kolimi-desktop
LOW
maintainer yeleti
0 votes
scanned 2026-10-17 00:21:55.226236
Why flagged
The package builds from source hosted on GitHub under a legitimate project repository, with a verifiable checksum; the low severity is due to few votes and recent upload, not malicious content.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on GitHub under a legitimate project repository, with a verifiable checksum; the low severity is due to few votes and recent upload, not malicious content.
PKGBUILD
1
# Maintainer: Kolimi <ci@kolimi.local>
2
pkgname=kolimi-desktop
3
pkgver=0.1.17
4
pkgrel=1
5
pkgdesc="Kolimi desktop client: browse, share, and keep a local folder in sync"
6
arch=('x86_64' 'aarch64')
7
url="https://github.com/chaitanyayeleti/kolimi"
8
license=('AGPL-3.0-or-later')
9
depends=('webkit2gtk-4.1' 'gtk3' 'libayatana-appindicator')
10
makedepends=('rust' 'pkgconf')
11
options=('!lto')
12
source=("$pkgname-$pkgver.tar.gz::https://github.com/chaitanyayeleti/kolimi/archive/refs/tags/desktop-v$pkgver.tar.gz")
13
sha256sums=('3bba54906fc0d3c63a534f8ae5d57f63893dfa64891733a1edc07afbfd1e334d')
14
15
build() {
16
cd "kolimi-desktop-v$pkgver/apps/kolimi-desktop"
17
export RUSTUP_TOOLCHAIN=stable
18
# aws-lc-sys (pulled in by rustls) requires -O0 for its jitterentropy RNG,
19
# but Arch's hardened CFLAGS force -O2 afterwards, tripping a compile-time
20
# #error. Disable the jitterentropy fallback so the OS RNG is used instead.
21
export AWS_LC_SYS_NO_JITTER_ENTROPY=1
22
cargo build --release --locked
23
}
24
25
package() {
26
cd "kolimi-desktop-v$pkgver/apps/kolimi-desktop"
27
install -Dm755 target/release/kolimi-desktop "$pkgdir/usr/bin/kolimi-desktop"
28
for size in 32x32 128x128 512x512; do
29
install -Dm644 "icons/$size.png" \
30
"$pkgdir/usr/share/icons/hicolor/$size/apps/kolimi-desktop.png"
31
done
32
install -Dm644 icons/128x128@2x.png \
33
"$pkgdir/usr/share/icons/hicolor/256x256/apps/kolimi-desktop.png"
34
install -Dm644 icons/icon.png "$pkgdir/usr/share/pixmaps/kolimi-desktop.png"
35
install -Dm644 /dev/stdin "$pkgdir/usr/share/applications/kolimi-desktop.desktop" <<'EOF'
36
[Desktop Entry]
37
Type=Application
38
Name=Kolimi
39
Comment=Kolimi desktop client
40
Exec=kolimi-desktop
41
Icon=kolimi-desktop
42
Categories=Utility;Network;
43
Terminal=false
44
EOF
45
}
46
Changes since previous scan
--- PKGBUILD @ 2026-10-14 07:19+++ PKGBUILD @ 2026-10-17 00:21@@ -1,6 +1,6 @@ # Maintainer: Kolimi <ci@kolimi.local> pkgname=kolimi-desktop-pkgver=0.1.15+pkgver=0.1.17 pkgrel=1 pkgdesc="Kolimi desktop client: browse, share, and keep a local folder in sync" arch=('x86_64' 'aarch64')@@ -10,7 +10,7 @@ makedepends=('rust' 'pkgconf') options=('!lto') source=("$pkgname-$pkgver.tar.gz::https://github.com/chaitanyayeleti/kolimi/archive/refs/tags/desktop-v$pkgver.tar.gz")-sha256sums=('7858014567af1e54bc049073864808ec8374e20742089e1866fa1986e278a34b')+sha256sums=('3bba54906fc0d3c63a534f8ae5d57f63893dfa64891733a1edc07afbfd1e334d') build() { cd "kolimi-desktop-v$pkgver/apps/kolimi-desktop"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 09:19:50 | Low | 2 |
| 2026-10-14 07:19:30 | Low | 1 |
| 2026-10-14 00:06:47 | Clean | 2 |
| 2026-10-13 17:17:20 | Low | 1 |
| 2026-10-13 15:17:00 | Low | 1 |
| 2026-10-13 13:16:52 | Low | 1 |
| 2026-10-13 11:16:23 | Low | 1 |