loliashizuku-git

maintainer Pysio · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from source using Go and Bun, with dependencies fetched from official repositories (GitHub, npm via bun); no untrusted prebuilt binaries or remote code execution.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source using Go and Bun, with dependencies fetched from official repositories (GitHub, npm via bun); no untrusted prebuilt binaries or remote code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM External install via pipx/uv/poetry/cargo/go/gem alt_pkg_manager_install

A non-pip/npm package manager (pipx, uv, poetry, cargo install, go install, gem, conda…) fetches and builds an external package at build time, outside source=() and makepkg's checksums.

PKGBUILD:40 go install github.com/wailsapp/wails/v2/cmd/wails@v2.11.0

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Pysio <qq593277393@outlook.com>
    
      2pkgname=loliashizuku-git
    
      3pkgver=0.0.2
    
      4pkgrel=1
    
      5pkgdesc="Wails-powered third-party desktop client for Lolia FRP"
    
      6arch=('x86_64' 'aarch64')
    
      7url="https://github.com/Mxmilu666/LoliaShizuku"
    
      8license=('MIT')
    
      9depends=(
    
      10  'gtk3'
    
      11  'webkit2gtk'
    
      12  'ca-certificates'
    
      13  'tzdata'
    
      14)
    
      15makedepends=(
    
      16  'git'
    
      17  'go>=1.24'
    
      18  'bun'
    
      19  'patchelf'
    
      20)
    
      21provides=('loliashizuku')
    
      22conflicts=('loliashizuku')
    
      23source=("${pkgname}::git+https://github.com/Mxmilu666/LoliaShizuku.git#tag=v${pkgver}")
    
      24sha256sums=('8987335b447b7c08560a09201212fe904afe8a9fcbcdc9029dd4936e8c5bc171')
    
      25
    
      26prepare() {
    
      27  cd "$pkgname"
    
      28  export GOPATH="${srcdir}/gopath"
    
      29  export GOMODCACHE="${GOPATH}/pkg/mod"
    
      30  go mod download
    
      31}
    
      32
    
      33build() {
    
      34  cd "$pkgname"
    
      35  export GOPATH="${srcdir}/gopath"
    
      36  export GOMODCACHE="${GOPATH}/pkg/mod"
    
      37  export CGO_ENABLED=1
    
      38
    
      39  # Install wails CLI into build GOPATH
    
      40  go install github.com/wailsapp/wails/v2/cmd/wails@v2.11.0
    
      41  export PATH="${GOPATH}/bin:${PATH}"
    
      42
    
      43  # Install frontend dependencies
    
      44  cd frontend
    
      45  bun install
    
      46  cd ..
    
      47
    
      48  # Prepare ldflags
    
      49  local _commit _buildtime
    
      50  _commit="$(git rev-parse --short=12 HEAD)"
    
      51  _buildtime="$(date -u +'%Y-%m-%dT%H:%M:%SZ')"
    
      52
    
      53  local _ldflags=(
    
      54    "-X github.com/Mxmilu666/LoliaShizuku/backend/version.Version=${pkgver}"
    
      55    "-X github.com/Mxmilu666/LoliaShizuku/backend/version.GitCommit=${_commit}"
    
      56    "-X github.com/Mxmilu666/LoliaShizuku/backend/version.GitBranch=v${pkgver}"
    
      57    "-X github.com/Mxmilu666/LoliaShizuku/backend/version.BuildTime=${_buildtime}"
    
      58  )
    
      59
    
      60  wails build -clean -ldflags "${_ldflags[*]}"
    
      61}
    
      62
    
      63package() {
    
      64  cd "$pkgname"
    
      65
    
      66  # Install binary
    
      67  install -Dm755 "build/bin/LoliaShizuku" "${pkgdir}/usr/bin/LoliaShizuku"
    
      68
    
      69  # Install desktop file
    
      70  install -Dm644 "build/linux/loliashizuku.desktop" "${pkgdir}/usr/share/applications/loliashizuku.desktop"
    
      71
    
      72  # Patch desktop file Exec path to /usr/bin
    
      73  sed -i 's|Exec=/usr/local/bin/LoliaShizuku|Exec=/usr/bin/LoliaShizuku|' \
    
      74    "${pkgdir}/usr/share/applications/loliashizuku.desktop"
    
      75
    
      76  # Install icon
    
      77  install -Dm644 "build/appicon.png" "${pkgdir}/usr/share/icons/hicolor/512x512/apps/loliashizuku.png"
    
      78
    
      79  # Install license
    
      80  install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      81}
    
      82

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2