loliashizuku-git
The package builds from source using Go and Bun, with dependencies fetched from official repositories (GitHub, npm via bun); no untrusted prebuilt binaries or remote code execution.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source using Go and Bun, with dependencies fetched from official repositories (GitHub, npm via bun); no untrusted prebuilt binaries or remote code execution.
1 higher static finding superseded - not the current verdict (shown for transparency)
alt_pkg_manager_install
A non-pip/npm package manager (pipx, uv, poetry, cargo install, go install, gem, conda…) fetches and builds an external package at build time, outside source=() and makepkg's checksums.
-
PKGBUILD:40
go install github.com/wailsapp/wails/v2/cmd/wails@v2.11.0
PKGBUILD
1 offending line(s) highlighted# Maintainer: Pysio <qq593277393@outlook.com>
pkgname=loliashizuku-git
pkgver=0.0.2
pkgrel=1
pkgdesc="Wails-powered third-party desktop client for Lolia FRP"
arch=('x86_64' 'aarch64')
url="https://github.com/Mxmilu666/LoliaShizuku"
license=('MIT')
depends=(
'gtk3'
'webkit2gtk'
'ca-certificates'
'tzdata'
)
makedepends=(
'git'
'go>=1.24'
'bun'
'patchelf'
)
provides=('loliashizuku')
conflicts=('loliashizuku')
source=("${pkgname}::git+https://github.com/Mxmilu666/LoliaShizuku.git#tag=v${pkgver}")
sha256sums=('8987335b447b7c08560a09201212fe904afe8a9fcbcdc9029dd4936e8c5bc171')
prepare() {
cd "$pkgname"
export GOPATH="${srcdir}/gopath"
export GOMODCACHE="${GOPATH}/pkg/mod"
go mod download
}
build() {
cd "$pkgname"
export GOPATH="${srcdir}/gopath"
export GOMODCACHE="${GOPATH}/pkg/mod"
export CGO_ENABLED=1
# Install wails CLI into build GOPATH
go install github.com/wailsapp/wails/v2/cmd/wails@v2.11.0
export PATH="${GOPATH}/bin:${PATH}"
# Install frontend dependencies
cd frontend
bun install
cd ..
# Prepare ldflags
local _commit _buildtime
_commit="$(git rev-parse --short=12 HEAD)"
_buildtime="$(date -u +'%Y-%m-%dT%H:%M:%SZ')"
local _ldflags=(
"-X github.com/Mxmilu666/LoliaShizuku/backend/version.Version=${pkgver}"
"-X github.com/Mxmilu666/LoliaShizuku/backend/version.GitCommit=${_commit}"
"-X github.com/Mxmilu666/LoliaShizuku/backend/version.GitBranch=v${pkgver}"
"-X github.com/Mxmilu666/LoliaShizuku/backend/version.BuildTime=${_buildtime}"
)
wails build -clean -ldflags "${_ldflags[*]}"
}
package() {
cd "$pkgname"
# Install binary
install -Dm755 "build/bin/LoliaShizuku" "${pkgdir}/usr/bin/LoliaShizuku"
# Install desktop file
install -Dm644 "build/linux/loliashizuku.desktop" "${pkgdir}/usr/share/applications/loliashizuku.desktop"
# Patch desktop file Exec path to /usr/bin
sed -i 's|Exec=/usr/local/bin/LoliaShizuku|Exec=/usr/bin/LoliaShizuku|' \
"${pkgdir}/usr/share/applications/loliashizuku.desktop"
# Install icon
install -Dm644 "build/appicon.png" "${pkgdir}/usr/share/icons/hicolor/512x512/apps/loliashizuku.png"
# Install license
install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |