lightpanda

MEDIUM
maintainer swiftscythe 0 votes scanned 2026-11-01 14:00:44.307000
View on AUR
Why flagged

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

Triggered rules

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

1# Maintainer: xiliuya <xiliuya@aliyun.com>
2
3pkgname=lightpanda
4pkgver=1.0.0
5pkgrel=2
6pkgdesc="Headless browser designed for AI and automation - 11x faster than Chrome, 9x less memory"
7arch=('x86_64' 'aarch64')
8url="https://lightpanda.io"
9license=('AGPL-3.0-only')
10provides=('lightpanda')
11makedepends=('zig' 'rust' 'cargo' 'git' 'python3')
12options=(!debug)
13
14source=(lightpanda_${pkgver}.tar.gz::https://github.com/lightpanda-io/browser/archive/refs/tags/${pkgver}.tar.gz)
15sha256sums=('eb2b08b65052598f92441cc0f86d783e474bda7e638d2fd6f5eaf1cc8c2ecc5d')
16build() {
17 zig version
18 #Dedicated Zig global cache for makepkg
19
20 export ZIG_GLOBAL_CACHE_DIR="${srcdir}/.zig-global-cache"
21 mkdir -p "$ZIG_GLOBAL_CACHE_DIR/tmp"
22
23 cd "browser-${pkgver}"
24
25 if [[ "$CARCH" == "x86_64" ]]; then
26 msg2 "Optional: enable AVX build with: ENABLE_AVX=1 makepkg -si"
27 if [[ "$ENABLE_AVX" == "1" ]]; then
28 msg2 $'\e[32mBuilding with AVX\e[0m'
29 ZIG_CPU="x86_64_v3"
30 else
31 msg2 $'\e[32mBuilding baseline (no AVX)\e[0m'
32 ZIG_CPU="x86_64"
33 fi
34 else
35 ZIG_CPU="aarch64"
36 fi
37
38 printf "\033[36mBuilding v8 snapshot (release safe)...\033[0m\n"
39 zig build -Doptimize=ReleaseFast -Dcpu="$ZIG_CPU" snapshot_creator -- src/snapshot.bin || (
40 printf "\033[33mBuild ERROR\033[0m\n"
41 exit 1
42 )
43 printf "\033[33mBuild OK\033[0m\n"
44
45 printf "\033[36mBuilding (release fast)...\033[0m\n"
46 zig build -Doptimize=ReleaseFast -Dcpu="$ZIG_CPU" -Dsnapshot_path=../../snapshot.bin || (
47 printf "\033[33mBuild ERROR\033[0m\n"
48 exit 1
49 )
50 printf "\033[33mBuild OK\033[0m\n"
51
52}
53
54package() {
55 install -Dm755 "${srcdir}/browser-${pkgver}/zig-out/bin/lightpanda" "$pkgdir/usr/bin/lightpanda"
56 chmod +x "$pkgdir/usr/bin/lightpanda"
57}
58

Changes since previous scan

--- PKGBUILD @ 2026-09-05 14:00
+++ PKGBUILD @ 2026-11-01 14:00
@@ -1,19 +1,25 @@
# Maintainer: xiliuya <xiliuya@aliyun.com>
pkgname=lightpanda
-pkgver=0.4.0
-pkgrel=1
+pkgver=1.0.0
+pkgrel=2
pkgdesc="Headless browser designed for AI and automation - 11x faster than Chrome, 9x less memory"
arch=('x86_64' 'aarch64')
url="https://lightpanda.io"
license=('AGPL-3.0-only')
provides=('lightpanda')
makedepends=('zig' 'rust' 'cargo' 'git' 'python3')
+options=(!debug)
source=(lightpanda_${pkgver}.tar.gz::https://github.com/lightpanda-io/browser/archive/refs/tags/${pkgver}.tar.gz)
-sha256sums=('4a658e7d7a17d4c0047a2adb8092ec5021447eebce9090656f842aa768f9a42a')
+sha256sums=('eb2b08b65052598f92441cc0f86d783e474bda7e638d2fd6f5eaf1cc8c2ecc5d')
build() {
- zig version
+ zig version
+ #Dedicated Zig global cache for makepkg
+
+ export ZIG_GLOBAL_CACHE_DIR="${srcdir}/.zig-global-cache"
+ mkdir -p "$ZIG_GLOBAL_CACHE_DIR/tmp"
+
cd "browser-${pkgver}"
if [[ "$CARCH" == "x86_64" ]]; then

Scan history

Scanned at (UTC)SeverityRules
2026-11-01 14:00:44 Medium 1
2026-10-06 08:02:16 Clean 0
2026-09-05 14:00:22 Clean 0
2026-09-05 03:59:20 Clean 0
2026-08-30 07:41:46 Clean 0
2026-07-30 03:13:55 Clean 0
2026-07-20 03:12:42 Clean 0
2026-07-03 05:10:23 Clean 0
2026-06-25 06:21:37 Clean 0
2026-06-18 16:11:54 Clean 0

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion