linux-wallpaperengine-v3-bin

LOW

maintainer illusory 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package installs prebuilt binaries from a GitHub release, which is a supply-chain risk if the host is compromised, but the source is from a known developer and the binaries are not executed remotely or obfuscated.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs prebuilt binaries from a GitHub release, which is a supply-chain risk if the host is compromised, but the source is from a known developer and the binaries are not executed remotely or obfuscated.

PKGBUILD

      1# Maintainer: illusory <becomeillusory@gmail.com>
    
      2#
    
      3# Prebuilt x86-64-v3 binaries for linux-wallpaperengine.
    
      4#
    
      5# Built in CI inside the CachyOS x86-64-v3 container, so both this code and
    
      6# the libraries it links against are compiled for the x86-64-v3
    
      7# micro-architecture level (AVX2, BMI2, FMA, ...).
    
      8#
    
      9# Requires a CPU that supports x86-64-v3:
    
      10#   $ /lib/ld-linux-x86-64.so.2 --help | grep x86-64-v3
    
      11#
    
      12# Upstream: https://github.com/Almamu/linux-wallpaperengine
    
      13# Builds:   https://github.com/Become-ILLUSORY/linux-wallpaperengine/actions
    
      14
    
      15pkgname=linux-wallpaperengine-v3-bin
    
      16_pkgname=linux-wallpaperengine
    
      17pkgver=1.0.1
    
      18pkgrel=1
    
      19pkgdesc="Wallpaper Engine backgrounds for Linux (prebuilt x86-64-v3)"
    
      20arch=('x86_64')
    
      21url="https://github.com/Become-ILLUSORY/linux-wallpaperengine"
    
      22license=('GPL-3.0-only')
    
      23provides=("${_pkgname}=${pkgver}" "linux-wallpaperengine")
    
      24conflicts=("${_pkgname}" "linux-wallpaperengine-git" "linux-wallpaperengine-core-git")
    
      25options=('!strip' '!debug')
    
      26
    
      27# Runtime libraries the packaged binary and liblinux-wallpaperengine-lib.so
    
      28# link against directly, plus what CEF (Chromium) pulls in. Derived from
    
      29# `ldd` output mapped through `pacman -Qoq` in the build job.
    
      30depends=(
    
      31    'alsa-lib'
    
      32    'at-spi2-core'
    
      33    'cairo'
    
      34    'dbus'
    
      35    'ffmpeg'
    
      36    'freeglut'
    
      37    'freetype2'
    
      38    'glew'
    
      39    'glfw'
    
      40    'glib2'
    
      41    'glibc'
    
      42    'glu'
    
      43    'libcups'
    
      44    'libdrm'
    
      45    'libglvnd'
    
      46    'libpulse'
    
      47    'libx11'
    
      48    'libxcomposite'
    
      49    'libxdamage'
    
      50    'libxext'
    
      51    'libxfixes'
    
      52    'libxi'
    
      53    'libxkbcommon'
    
      54    'libxrandr'
    
      55    'libxrender'
    
      56    'libxss'
    
      57    'libxtst'
    
      58    'libxxf86vm'
    
      59    'lz4'
    
      60    'mesa'
    
      61    'mpv'
    
      62    'nspr'
    
      63    'nss'
    
      64    'pango'
    
      65    'sdl2-compat'
    
      66    'vulkan-icd-loader'
    
      67    'wayland'
    
      68    'zlib-ng-compat'
    
      69)
    
      70
    
      71source=("${pkgname}-${pkgver}.tar.zst::https://github.com/Become-ILLUSORY/linux-wallpaperengine/releases/download/v${pkgver}/${_pkgname}-${pkgver}-x86_64.tar.zst")
    
      72sha256sums=('108ca1eeb6ebadf83a41c3269d6e762a5441f92842b54103d6c5cd6ac5e746a6')
    
      73
    
      74# The tarball is already a complete, correctly laid out install tree; makepkg
    
      75# would otherwise unpack it into $srcdir and the file names would collide with
    
      76# the ones we want to install. Keep it as a single file and extract it
    
      77# ourselves in package().
    
      78noextract=("${pkgname}-${pkgver}.tar.zst")
    
      79
    
      80package() {
    
      81    # Extract straight into $pkgdir. The archive holds the full /opt install
    
      82    # tree, the /usr/bin wrapper and the upstream license.
    
      83    bsdtar -xf "${srcdir}/${pkgname}-${pkgver}.tar.zst" -C "${pkgdir}"
    
      84
    
      85    # Arch packaging guidelines want the license under the package's own name.
    
      86    install -d "${pkgdir}/usr/share/licenses/${pkgname}"
    
      87    mv "${pkgdir}/usr/share/licenses/linux-wallpaperengine/LICENSE" \
    
      88        "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      89    rmdir "${pkgdir}/usr/share/licenses/linux-wallpaperengine"
    
      90}
    
      91

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 01:15:21	Low	2