lsw-bin
Package is a prebuilt binary from the project's official GitHub release, which is normal for complex builds; no malicious payloads or remote code execution, just a low-risk, unverifiable binary release from a new maintainer with few votes.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package is a prebuilt binary from the project's official GitHub release, which is normal for complex builds; no malicious payloads or remote code execution, just a low-risk, unverifiable binary release from a new maintainer with few votes.
PKGBUILD
# Maintainer: acceleration3 <acceleration23 at gmail dot com>
#
# A prebuilt release: scripts/package-release.sh builds the tarball in a
# clean Arch userland and it is attached to the GitHub release v$pkgver
# (README.md in this directory has the whole procedure). Building from
# source takes a WDK subset Microsoft does not allow redistributing, a
# patched QEMU, DXVK, vkd3d-proton and two mingw toolchains, which is
# why this package does not.
pkgname=lsw-bin
pkgver=0.1.6
pkgrel=1
pkgdesc="Linux Subsystem for Windows: Windows applications as native windows, from a KVM guest with a paravirtual GPU"
arch=('x86_64')
url="https://github.com/acceleration3/linux-subsystem-windows"
# LSW itself; QEMU and its firmware; vkd3d-proton; DXVK. The texts are
# in /usr/share/licenses/lsw-bin.
license=('Apache-2.0' 'GPL-2.0-only' 'LGPL-2.1-or-later' 'Zlib')
provides=('lsw')
conflicts=('lsw')
# The libraries the shipped ELF files link (the release's .depends file,
# from readelf and pacman -Qo in the build container), then what the
# manager runs or reads without linking it.
depends=(
# lsw-manager, remotewin. remotewin speaks Wayland below Qt and uses
# Qt's private Gui and WaylandClient API (both in qt6-base since Qt
# 6.10), so it runs on the Qt minor it was built with and no other:
# an older one refuses it (qt_version_tag), a newer one may have
# moved the private API. A Qt update calls for a rebuild of this
# package; see README.md.
'qt6-base>=6.12' 'qt6-base<6.13' 'libvirt' 'libisofs' 'libvncserver' 'wimlib' 'hivex'
'spdlog' 'fmt' 'zlib' 'wayland' 'libxkbcommon'
# accel-virt: the executor, QEMU and its modules
'vulkan-icd-loader' 'ocl-icd' 'libglvnd' 'libpipewire'
'glib2' 'pixman' 'gnutls' 'libpng' 'libjpeg-turbo' 'libsasl' 'snappy' 'lzo'
'zstd' 'numactl' 'keyutils' 'libslirp' 'libbpf'
'libelf' 'libcbor' 'systemd-libs' 'libseccomp' 'dtc' 'pam' 'fuse3'
'libaio' 'liburing' 'capstone'
'glibc' 'libgcc' 'libstdc++'
# At run time: the host GPU's Vulkan driver, the UEFI firmware the
# guest boots, the disk tool, the install-media reader, downloads
'vulkan-driver' 'edk2-ovmf' 'qemu-img' '7zip' 'curl'
# The launcher icon's theme directories
'hicolor-icon-theme'
# Loaded, not linked, so no NEEDED entry finds it: DXVK's native
# build opens its window-system backend even with no window, and
# without it the host serves no Direct3D and the guest desktop
# crash-loops.
'sdl3'
)
optdepends=(
'virtiofsd: shared folders between the host and the guest'
'opencl-driver: OpenCL in the guest, run on the host GPU'
'mesa: OpenGL in the guest on an AMD or Intel GPU (the host EGL driver)'
)
install=lsw-bin.install
# Stripped when the release was built (cmake --install --strip), and
# QEMU and accel-virt build without debug info: there is nothing for
# makepkg to strip, and a debug package would be empty.
options=('!strip' '!debug')
source=("https://github.com/acceleration3/linux-subsystem-windows/releases/download/v${pkgver}/lsw-${pkgver}-${CARCH}.tar.zst")
sha256sums=('c86c7e44290da91d7dd6b15847a2887c1447f36c3a473677ec046f97476ff4aa')
package() {
cp -a --no-preserve=ownership "${srcdir}/usr" "${pkgdir}/"
# The tarball names its license directory after the project; a
# package's is named after the package.
mv "${pkgdir}/usr/share/licenses/lsw" "${pkgdir}/usr/share/licenses/${pkgname}"
}
Changes since previous scan
--- PKGBUILD @ 2026-10-12 00:18+++ PKGBUILD @ 2026-10-17 00:21@@ -8,7 +8,7 @@ # why this package does not. pkgname=lsw-bin-pkgver=0.1.5+pkgver=0.1.6 pkgrel=1 pkgdesc="Linux Subsystem for Windows: Windows applications as native windows, from a KVM guest with a paravirtual GPU" arch=('x86_64')@@ -59,7 +59,7 @@ # makepkg to strip, and a debug package would be empty. options=('!strip' '!debug') source=("https://github.com/acceleration3/linux-subsystem-windows/releases/download/v${pkgver}/lsw-${pkgver}-${CARCH}.tar.zst")-sha256sums=('d8662e98b4357f2057b02bdcddf9e31936c8cfe8492fdf5fea72ef47c90daab4')+sha256sums=('c86c7e44290da91d7dd6b15847a2887c1447f36c3a473677ec046f97476ff4aa') package() { cp -a --no-preserve=ownership "${srcdir}/usr" "${pkgdir}/"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |
| 2026-10-12 13:13:52 | Low | 2 |
| 2026-10-12 00:18:51 | Low | 2 |
| 2026-10-11 21:11:00 | Low | 2 |
| 2026-10-11 17:10:51 | Low | 2 |
| 2026-10-11 13:10:50 | Low | 2 |
| 2026-10-11 09:10:29 | Low | 2 |
| 2026-10-11 07:10:25 | Low | 2 |
| 2026-10-11 02:16:32 | Low | 2 |