learnharness-bin

LOW

maintainer siva-sub 0 votes scanned 2026-10-25 15:42:54.962645

View on AUR

Why flagged

The package installs a prebuilt .deb from GitHub releases, which is a normal distribution method for Electron apps; the build process unpacks and modifies the app to disable auto-updates, which is a common and safe practice, and all sources are from the project's official repository or release page, with no evidence of malicious behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package installs a prebuilt .deb from GitHub releases, which is a normal distribution method for Electron apps; the build process unpacks and modifies the app to disable auto-updates, which is a common and safe practice, and all sources are from the project's official repository or release page, with no evidence of malicious behavior.

PKGBUILD

      1# Maintainer: Sivasubramanian Ramanathan <sivasub987@gmail.com>
    
      2
    
      3pkgname=learnharness-bin
    
      4pkgver=0.3.7
    
      5pkgrel=1
    
      6pkgdesc="Agent harness for adaptive teaching, practice, and a knowledge graph"
    
      7arch=('x86_64')
    
      8url="https://learnharness.ai/"
    
      9license=('AGPL-3.0-only')
    
      10makedepends=('asar')
    
      11depends=(
    
      12  'alsa-lib'
    
      13  'at-spi2-core'
    
      14  'cairo'
    
      15  'dbus'
    
      16  'expat'
    
      17  'glib2'
    
      18  'glibc'
    
      19  'gtk3'
    
      20  'libcups'
    
      21  'libgcc'
    
      22  'libnotify'
    
      23  'libsecret'
    
      24  'libstdc++'
    
      25  'libx11'
    
      26  'libxcb'
    
      27  'libxcomposite'
    
      28  'libxdamage'
    
      29  'libxext'
    
      30  'libxfixes'
    
      31  'libxkbcommon'
    
      32  'libxrandr'
    
      33  'libxss'
    
      34  'libxtst'
    
      35  'mesa'
    
      36  'nspr'
    
      37  'nss'
    
      38  'pango'
    
      39  'systemd-libs'
    
      40  'util-linux-libs'
    
      41  'xdg-utils'
    
      42)
    
      43provides=('learnharness')
    
      44conflicts=('learnharness')
    
      45options=('!strip' '!debug')
    
      46source=(
    
      47  "learnharness-${pkgver}.svg::https://raw.githubusercontent.com/amosblomqvist/learnharness/v${pkgver}/build/icon-flat.svg"
    
      48  'disable-auto-update.patch'
    
      49)
    
      50source_x86_64=("learnharness-${pkgver}.deb::https://github.com/amosblomqvist/learnharness/releases/download/v${pkgver}/LearnHarness-${pkgver}-amd64.deb")
    
      51sha256sums=(
    
      52  '6cf253fe5b5dcc88329faa24391249b996518ed6ba394980da945981b2981927'
    
      53  '2fd7cbcc049d2af339f79d83df49cf852581b29793a58fab535fc449759017ad'
    
      54)
    
      55sha256sums_x86_64=('0ccf2276043fc3ca4b969ea13c428992cc35165198473864bf6e86ee2c5178a7')
    
      56
    
      57package() {
    
      58  local resources="${pkgdir}/opt/LearnHarness/resources"
    
      59  local standalone="${resources}/server/standalone"
    
      60  local asar_tree="${srcdir}/app-asar"
    
      61
    
      62  bsdtar -xf "${srcdir}/learnharness-${pkgver}.deb" data.tar.xz
    
      63  bsdtar -xf data.tar.xz -C "${pkgdir}"
    
      64
    
      65  # Arch is glibc-only; remove the bundled musl build and non-English Electron
    
      66  # locales from this English-only application.
    
      67  rm -rf \
    
      68    "${standalone}/node_modules/@img/sharp-linuxmusl-x64" \
    
      69    "${standalone}/node_modules/@img/sharp-libvips-linuxmusl-x64"
    
      70  find "${pkgdir}/opt/LearnHarness/locales" -type f \
    
      71    ! -name 'en-US.pak' ! -name 'en-GB.pak' -delete
    
      72
    
      73  # Pacman owns upgrades. Patch the shell so it does not download or attempt to
    
      74  # install upstream Debian packages, then remove the now-unused update feed.
    
      75  rm -rf "${asar_tree}" "${srcdir}/app.asar"
    
      76  asar extract "${resources}/app.asar" "${asar_tree}"
    
      77  patch -d "${asar_tree}" -Np1 < "${srcdir}/disable-auto-update.patch"
    
      78  asar pack "${asar_tree}" "${srcdir}/app.asar"
    
      79  install -m644 "${srcdir}/app.asar" "${resources}/app.asar"
    
      80  rm -rf "${asar_tree}" "${srcdir}/app.asar"
    
      81  rm -f "${resources}/app-update.yml"
    
      82
    
      83  install -d "${pkgdir}/usr/bin"
    
      84  ln -s /opt/LearnHarness/learnharness "${pkgdir}/usr/bin/learnharness"
    
      85
    
      86  sed -i 's|^Exec=/opt/LearnHarness/learnharness|Exec=/usr/bin/learnharness|' \
    
      87    "${pkgdir}/usr/share/applications/learnharness.desktop"
    
      88  install -Dm644 "${srcdir}/learnharness-${pkgver}.svg" \
    
      89    "${pkgdir}/usr/share/icons/hicolor/scalable/apps/learnharness.svg"
    
      90
    
      91  install -Dm644 "${standalone}/LICENSE" \
    
      92    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      93}
    
      94

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-25 15:42:54	Low	2