kolimi-desktop

LOW
maintainer yeleti 0 votes scanned 2026-10-17 00:21:55.226236
View on AUR
Why flagged

The package builds from source hosted on GitHub under a legitimate project repository, with a verifiable checksum; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on GitHub under a legitimate project repository, with a verifiable checksum; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

1# Maintainer: Kolimi <ci@kolimi.local>
2pkgname=kolimi-desktop
3pkgver=0.1.17
4pkgrel=1
5pkgdesc="Kolimi desktop client: browse, share, and keep a local folder in sync"
6arch=('x86_64' 'aarch64')
7url="https://github.com/chaitanyayeleti/kolimi"
8license=('AGPL-3.0-or-later')
9depends=('webkit2gtk-4.1' 'gtk3' 'libayatana-appindicator')
10makedepends=('rust' 'pkgconf')
11options=('!lto')
12source=("$pkgname-$pkgver.tar.gz::https://github.com/chaitanyayeleti/kolimi/archive/refs/tags/desktop-v$pkgver.tar.gz")
13sha256sums=('3bba54906fc0d3c63a534f8ae5d57f63893dfa64891733a1edc07afbfd1e334d')
14
15build() {
16 cd "kolimi-desktop-v$pkgver/apps/kolimi-desktop"
17 export RUSTUP_TOOLCHAIN=stable
18 # aws-lc-sys (pulled in by rustls) requires -O0 for its jitterentropy RNG,
19 # but Arch's hardened CFLAGS force -O2 afterwards, tripping a compile-time
20 # #error. Disable the jitterentropy fallback so the OS RNG is used instead.
21 export AWS_LC_SYS_NO_JITTER_ENTROPY=1
22 cargo build --release --locked
23}
24
25package() {
26 cd "kolimi-desktop-v$pkgver/apps/kolimi-desktop"
27 install -Dm755 target/release/kolimi-desktop "$pkgdir/usr/bin/kolimi-desktop"
28 for size in 32x32 128x128 512x512; do
29 install -Dm644 "icons/$size.png" \
30 "$pkgdir/usr/share/icons/hicolor/$size/apps/kolimi-desktop.png"
31 done
32 install -Dm644 icons/128x128@2x.png \
33 "$pkgdir/usr/share/icons/hicolor/256x256/apps/kolimi-desktop.png"
34 install -Dm644 icons/icon.png "$pkgdir/usr/share/pixmaps/kolimi-desktop.png"
35 install -Dm644 /dev/stdin "$pkgdir/usr/share/applications/kolimi-desktop.desktop" <<'EOF'
36[Desktop Entry]
37Type=Application
38Name=Kolimi
39Comment=Kolimi desktop client
40Exec=kolimi-desktop
41Icon=kolimi-desktop
42Categories=Utility;Network;
43Terminal=false
44EOF
45}
46

Changes since previous scan

--- PKGBUILD @ 2026-10-14 07:19
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,6 +1,6 @@
# Maintainer: Kolimi <ci@kolimi.local>
pkgname=kolimi-desktop
-pkgver=0.1.15
+pkgver=0.1.17
pkgrel=1
pkgdesc="Kolimi desktop client: browse, share, and keep a local folder in sync"
arch=('x86_64' 'aarch64')
@@ -10,7 +10,7 @@
makedepends=('rust' 'pkgconf')
options=('!lto')
source=("$pkgname-$pkgver.tar.gz::https://github.com/chaitanyayeleti/kolimi/archive/refs/tags/desktop-v$pkgver.tar.gz")
-sha256sums=('7858014567af1e54bc049073864808ec8374e20742089e1866fa1986e278a34b')
+sha256sums=('3bba54906fc0d3c63a534f8ae5d57f63893dfa64891733a1edc07afbfd1e334d')
build() {
cd "kolimi-desktop-v$pkgver/apps/kolimi-desktop"

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 09:19:50 Low 2
2026-10-14 07:19:30 Low 1
2026-10-14 00:06:47 Clean 2
2026-10-13 17:17:20 Low 1
2026-10-13 15:17:00 Low 1
2026-10-13 13:16:52 Low 1
2026-10-13 11:16:23 Low 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion