kudu-app-bin

LOW

maintainer czyt 0 votes scanned 2026-09-10 09:20:32.972965

View on AUR

Why flagged

The package installs a prebuilt Debian binary from the project's official GitHub releases, which is a normal distribution method for Electron apps; the source is verifiable and checksummed, and no remote code execution or obfuscation is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt Debian binary from the project's official GitHub releases, which is a normal distribution method for Electron apps; the source is verifiable and checksummed, and no remote code execution or obfuscation is present.

PKGBUILD

      1# Maintainer: czyt <czytcn@gmail.com>
    
      2pkgname=kudu-app-bin
    
      3pkgver=2.8.0
    
      4pkgrel=1
    
      5pkgdesc="Free Windows, Mac and Linux cleaner, scanner, and more."
    
      6arch=('x86_64')
    
      7url="https://github.com/AdventDevInc/kudu"
    
      8license=('MIT')
    
      9depends=('alsa-lib' 'at-spi2-core' 'cairo' 'dbus' 'expat' 'gcc-libs'
    
      10         'glib2' 'glibc' 'gtk3' 'libcups' 'libdrm' 'libx11' 'libxcb'
    
      11         'libxcomposite' 'libxdamage' 'libxext' 'libxfixes' 'libxkbcommon'
    
      12         'libxrandr' 'libxss' 'mesa' 'nspr' 'nss' 'pango' 'systemd-libs')
    
      13optdepends=('libappindicator-gtk3: system tray integration')
    
      14provides=('kudu-app')
    
      15# Both packages install /usr/bin/kudu.
    
      16conflicts=('kudu' 'kudu-bin')
    
      17options=('!strip' '!debug')
    
      18source=("kudu-${pkgver}-LICENSE::https://raw.githubusercontent.com/AdventDevInc/kudu/v${pkgver}/LICENSE")
    
      19source_x86_64=("Kudu-${pkgver}-amd64.deb::https://github.com/AdventDevInc/kudu/releases/download/v${pkgver}/Kudu-${pkgver}-amd64.deb")
    
      20noextract=("Kudu-${pkgver}-amd64.deb")
    
      21sha256sums=('25ffd176698d9f5cdebe9d8376a35b91a41aaef4dbac75c18d42730a71739a01')
    
      22sha256sums_x86_64=('8e20085499940d52702c676dcd3827e37a2858900972d56f47e21b0872b95b63')
    
      23
    
      24package() {
    
      25    local deb="${srcdir}/Kudu-${pkgver}-amd64.deb"
    
      26    local data_archive
    
      27    data_archive=$(bsdtar -tf "$deb" | sed -n '/^data\.tar\(\..*\)\?$/p')
    
      28    [[ -n "$data_archive" ]] || return 1
    
      29    bsdtar -xOf "$deb" "$data_archive" |
    
      30        bsdtar --no-same-owner -xf - -C "$pkgdir" || return 1
    
      31
    
      32    install -dm755 "${pkgdir}/usr/bin"
    
      33    ln -s /opt/Kudu/kudu "${pkgdir}/usr/bin/kudu"
    
      34    chmod 4755 "${pkgdir}/opt/Kudu/chrome-sandbox"
    
      35    install -Dm644 "${srcdir}/kudu-${pkgver}-LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      36}
    
      37

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-10 09:20:32	Low	2