kiro-crew-bin

maintainer AlphaLynx · 1 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package installs a prebuilt AppImage from the project's official GitHub releases, which is unpacked and installed locally; while the host is not whitelisted, it is the legitimate project source, and no remote code execution or obfuscation is present.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt AppImage from the project's official GitHub releases, which is unpacked and installed locally; while the host is not whitelisted, it is the legitimate project source, and no remote code execution or obfuscation is present.

PKGBUILD

      1# Maintainer: AlphaLynx <alphalynx at alphalynx dot dev>
    
      2
    
      3pkgname=kiro-crew-bin
    
      4_name=${pkgname%-bin}
    
      5pkgver=0.2.0
    
      6pkgrel=1
    
      7pkgdesc='A persistent workspace for development work that self-improves and continues beyond one session'
    
      8arch=(x86_64)
    
      9url=https://kiro.dev/crew
    
      10license=(Apache-2.0)
    
      11depends=(alsa-lib
    
      12         at-spi2-core
    
      13         cairo
    
      14         dbus
    
      15         expat
    
      16         glib2
    
      17         glibc
    
      18         gtk3
    
      19         hicolor-icon-theme
    
      20         kiro-cli
    
      21         libcups
    
      22         libgcc
    
      23         libstdc++
    
      24         libx11
    
      25         libxcb
    
      26         libxcomposite
    
      27         libxdamage
    
      28         libxext
    
      29         libxfixes
    
      30         libxkbcommon
    
      31         libxrandr
    
      32         mesa
    
      33         nspr
    
      34         nss
    
      35         pango
    
      36         systemd-libs
    
      37         zlib)
    
      38makedepends=(imagemagick)
    
      39provides=($_name)
    
      40conflicts=($_name)
    
      41options=(!strip !debug)
    
      42_appimage=KiroCrew-$pkgver.AppImage
    
      43source=(https://github.com/kirodotdev/KiroCrew/releases/download/v$pkgver/$_appimage)
    
      44b2sums=('a3b5023aa873e651ea3a582da37cc07358f0734aed2ee5ec38a6679d94d58ab96ff03730fc3caf8fb962fd7ba15c306b108a7d8970a1701bff17f585402e8d8e')
    
      45
    
      46prepare() {
    
      47    local _appname=kirocrew-electron-mac
    
      48
    
      49    # Copy AppImage in case $SRCDEST is mounted with noexec
    
      50    cp $_appimage $_appimage.copy
    
      51    chmod +x $_appimage.copy
    
      52    ./$_appimage.copy --appimage-extract
    
      53    rm $_appimage.copy
    
      54
    
      55    # Adjust .desktop so it will work outside of AppImage container
    
      56    sed -i -E "s|^Exec=.*|Exec=/usr/bin/$_name %U|;s|^Icon=.*|Icon=$_name|" \
    
      57        squashfs-root/$_appname.desktop
    
      58
    
      59    # Fix permissions; .AppImage permissions are 700 for all directories
    
      60    chmod -R a+rX squashfs-root
    
      61    chmod u+s squashfs-root/chrome-sandbox
    
      62
    
      63    magick squashfs-root/usr/share/icons/hicolor/1024x1024/apps/$_appname.png \
    
      64        -resize 512x512 $_name.png
    
      65
    
      66    mv squashfs-root/$_appname squashfs-root/$_name
    
      67    mv squashfs-root/$_appname.desktop $_name.desktop
    
      68    magick squashfs-root/usr/share/icons/hicolor/1024x1024/apps/$_appname.png \
    
      69        -resize 512x512 $_name.png
    
      70    mv squashfs-root/LICENSE.electron.txt squashfs-root/LICENSES.chromium.html .
    
      71
    
      72    rm -f squashfs-root/{$_appname.png,AppRun,.DirIcon}
    
      73    rm -r squashfs-root/usr/share
    
      74    rm -r squashfs-root/resources/backend-dist/kirocrew-backend/lib/python3.12/site-packages/kiro_crew/_vendor/llama_cpp_libs/{linux_aarch64,macos_arm64,macos_x86_64,win_amd64}
    
      75}
    
      76
    
      77package() {
    
      78    install -d "$pkgdir/opt/$_name"
    
      79    cp -a squashfs-root/. "$pkgdir/opt/$_name/"
    
      80
    
      81    install -d "$pkgdir/usr/bin"
    
      82    ln -s /opt/$_name/$_name "$pkgdir/usr/bin/$_name"
    
      83
    
      84    install -Dm644 $_name.desktop -t "$pkgdir/usr/share/applications"
    
      85    install -Dm644 $_name.png -t "$pkgdir/usr/share/icons/hicolor/1024x1024/apps"
    
      86    install -Dm644 LICENSE.electron.txt LICENSES.chromium.html \
    
      87        -t "$pkgdir/usr/share/licenses/$pkgname"
    
      88}
    
      89

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 00:03:41	LOW	2
2026-08-13 00:17:07	LOW	2
2026-08-12 00:27:08	LOW	2
2026-08-11 17:21:34	LOW	2