loliashizuku-git
The package builds from source using Go and Bun, with dependencies fetched from official repositories (GitHub, npm via bun); no untrusted prebuilt binaries or remote code execution.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source using Go and Bun, with dependencies fetched from official repositories (GitHub, npm via bun); no untrusted prebuilt binaries or remote code execution.
1 higher static finding superseded - not the current verdict (shown for transparency)
alt_pkg_manager_install
A non-pip/npm package manager (pipx, uv, poetry, cargo install, go install, gem, conda…) fetches and builds an external package at build time, outside source=() and makepkg's checksums.
-
PKGBUILD:40
go install github.com/wailsapp/wails/v2/cmd/wails@v2.11.0
PKGBUILD
1 offending line(s) highlighted# Maintainer: Pysio <qq593277393@outlook.com>
pkgname=loliashizuku-git
pkgver=0.0.2
pkgrel=1
pkgdesc="Wails-powered third-party desktop client for Lolia FRP"
arch=('x86_64' 'aarch64')
url="https://github.com/Mxmilu666/LoliaShizuku"
license=('MIT')
depends=(
'gtk3'
'webkit2gtk'
'ca-certificates'
'tzdata'
)
makedepends=(
'git'
'go>=1.24'
'bun'
'patchelf'
)
provides=('loliashizuku')
conflicts=('loliashizuku')
source=("${pkgname}::git+https://github.com/Mxmilu666/LoliaShizuku.git#tag=v${pkgver}")
sha256sums=('8987335b447b7c08560a09201212fe904afe8a9fcbcdc9029dd4936e8c5bc171')
prepare() {
cd "$pkgname"
export GOPATH="${srcdir}/gopath"
export GOMODCACHE="${GOPATH}/pkg/mod"
go mod download
}
build() {
cd "$pkgname"
export GOPATH="${srcdir}/gopath"
export GOMODCACHE="${GOPATH}/pkg/mod"
export CGO_ENABLED=1
# Install wails CLI into build GOPATH
go install github.com/wailsapp/wails/v2/cmd/wails@v2.11.0
export PATH="${GOPATH}/bin:${PATH}"
# Install frontend dependencies
cd frontend
bun install
cd ..
# Prepare ldflags
local _commit _buildtime
_commit="$(git rev-parse --short=12 HEAD)"
_buildtime="$(date -u +'%Y-%m-%dT%H:%M:%SZ')"
local _ldflags=(
"-X github.com/Mxmilu666/LoliaShizuku/backend/version.Version=${pkgver}"
"-X github.com/Mxmilu666/LoliaShizuku/backend/version.GitCommit=${_commit}"
"-X github.com/Mxmilu666/LoliaShizuku/backend/version.GitBranch=v${pkgver}"
"-X github.com/Mxmilu666/LoliaShizuku/backend/version.BuildTime=${_buildtime}"
)
wails build -clean -ldflags "${_ldflags[*]}"
}
package() {
cd "$pkgname"
# Install binary
install -Dm755 "build/bin/LoliaShizuku" "${pkgdir}/usr/bin/LoliaShizuku"
# Install desktop file
install -Dm644 "build/linux/loliashizuku.desktop" "${pkgdir}/usr/share/applications/loliashizuku.desktop"
# Patch desktop file Exec path to /usr/bin
sed -i 's|Exec=/usr/local/bin/LoliaShizuku|Exec=/usr/bin/LoliaShizuku|' \
"${pkgdir}/usr/share/applications/loliashizuku.desktop"
# Install icon
install -Dm644 "build/appicon.png" "${pkgdir}/usr/share/icons/hicolor/512x512/apps/loliashizuku.png"
# Install license
install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |