lsw-bin

LOW
maintainer acceleration3 0 votes scanned 2026-10-17 00:21:55.226236
View on AUR
Why flagged

Package is a prebuilt binary from the project's official GitHub release, which is normal for complex builds; no malicious payloads or remote code execution, just a low-risk, unverifiable binary release from a new maintainer with few votes.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package is a prebuilt binary from the project's official GitHub release, which is normal for complex builds; no malicious payloads or remote code execution, just a low-risk, unverifiable binary release from a new maintainer with few votes.

PKGBUILD

1# Maintainer: acceleration3 <acceleration23 at gmail dot com>
2#
3# A prebuilt release: scripts/package-release.sh builds the tarball in a
4# clean Arch userland and it is attached to the GitHub release v$pkgver
5# (README.md in this directory has the whole procedure). Building from
6# source takes a WDK subset Microsoft does not allow redistributing, a
7# patched QEMU, DXVK, vkd3d-proton and two mingw toolchains, which is
8# why this package does not.
9
10pkgname=lsw-bin
11pkgver=0.1.6
12pkgrel=1
13pkgdesc="Linux Subsystem for Windows: Windows applications as native windows, from a KVM guest with a paravirtual GPU"
14arch=('x86_64')
15url="https://github.com/acceleration3/linux-subsystem-windows"
16# LSW itself; QEMU and its firmware; vkd3d-proton; DXVK. The texts are
17# in /usr/share/licenses/lsw-bin.
18license=('Apache-2.0' 'GPL-2.0-only' 'LGPL-2.1-or-later' 'Zlib')
19provides=('lsw')
20conflicts=('lsw')
21# The libraries the shipped ELF files link (the release's .depends file,
22# from readelf and pacman -Qo in the build container), then what the
23# manager runs or reads without linking it.
24depends=(
25 # lsw-manager, remotewin. remotewin speaks Wayland below Qt and uses
26 # Qt's private Gui and WaylandClient API (both in qt6-base since Qt
27 # 6.10), so it runs on the Qt minor it was built with and no other:
28 # an older one refuses it (qt_version_tag), a newer one may have
29 # moved the private API. A Qt update calls for a rebuild of this
30 # package; see README.md.
31 'qt6-base>=6.12' 'qt6-base<6.13' 'libvirt' 'libisofs' 'libvncserver' 'wimlib' 'hivex'
32 'spdlog' 'fmt' 'zlib' 'wayland' 'libxkbcommon'
33 # accel-virt: the executor, QEMU and its modules
34 'vulkan-icd-loader' 'ocl-icd' 'libglvnd' 'libpipewire'
35 'glib2' 'pixman' 'gnutls' 'libpng' 'libjpeg-turbo' 'libsasl' 'snappy' 'lzo'
36 'zstd' 'numactl' 'keyutils' 'libslirp' 'libbpf'
37 'libelf' 'libcbor' 'systemd-libs' 'libseccomp' 'dtc' 'pam' 'fuse3'
38 'libaio' 'liburing' 'capstone'
39 'glibc' 'libgcc' 'libstdc++'
40 # At run time: the host GPU's Vulkan driver, the UEFI firmware the
41 # guest boots, the disk tool, the install-media reader, downloads
42 'vulkan-driver' 'edk2-ovmf' 'qemu-img' '7zip' 'curl'
43 # The launcher icon's theme directories
44 'hicolor-icon-theme'
45 # Loaded, not linked, so no NEEDED entry finds it: DXVK's native
46 # build opens its window-system backend even with no window, and
47 # without it the host serves no Direct3D and the guest desktop
48 # crash-loops.
49 'sdl3'
50)
51optdepends=(
52 'virtiofsd: shared folders between the host and the guest'
53 'opencl-driver: OpenCL in the guest, run on the host GPU'
54 'mesa: OpenGL in the guest on an AMD or Intel GPU (the host EGL driver)'
55)
56install=lsw-bin.install
57# Stripped when the release was built (cmake --install --strip), and
58# QEMU and accel-virt build without debug info: there is nothing for
59# makepkg to strip, and a debug package would be empty.
60options=('!strip' '!debug')
61source=("https://github.com/acceleration3/linux-subsystem-windows/releases/download/v${pkgver}/lsw-${pkgver}-${CARCH}.tar.zst")
62sha256sums=('c86c7e44290da91d7dd6b15847a2887c1447f36c3a473677ec046f97476ff4aa')
63
64package() {
65 cp -a --no-preserve=ownership "${srcdir}/usr" "${pkgdir}/"
66 # The tarball names its license directory after the project; a
67 # package's is named after the package.
68 mv "${pkgdir}/usr/share/licenses/lsw" "${pkgdir}/usr/share/licenses/${pkgname}"
69}
70

Changes since previous scan

--- PKGBUILD @ 2026-10-12 00:18
+++ PKGBUILD @ 2026-10-17 00:21
@@ -8,7 +8,7 @@
# why this package does not.
pkgname=lsw-bin
-pkgver=0.1.5
+pkgver=0.1.6
pkgrel=1
pkgdesc="Linux Subsystem for Windows: Windows applications as native windows, from a KVM guest with a paravirtual GPU"
arch=('x86_64')
@@ -59,7 +59,7 @@
# makepkg to strip, and a debug package would be empty.
options=('!strip' '!debug')
source=("https://github.com/acceleration3/linux-subsystem-windows/releases/download/v${pkgver}/lsw-${pkgver}-${CARCH}.tar.zst")
-sha256sums=('d8662e98b4357f2057b02bdcddf9e31936c8cfe8492fdf5fea72ef47c90daab4')
+sha256sums=('c86c7e44290da91d7dd6b15847a2887c1447f36c3a473677ec046f97476ff4aa')
package() {
cp -a --no-preserve=ownership "${srcdir}/usr" "${pkgdir}/"

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 00:06:47 Low 2
2026-10-13 00:23:45 Low 2
2026-10-12 13:13:52 Low 2
2026-10-12 00:18:51 Low 2
2026-10-11 21:11:00 Low 2
2026-10-11 17:10:51 Low 2
2026-10-11 13:10:50 Low 2
2026-10-11 09:10:29 Low 2
2026-10-11 07:10:25 Low 2
2026-10-11 02:16:32 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion