ltbox-bin

maintainer BanzaiBrotha · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads prebuilt binaries from GitHub Releases, which is a standard practice for binary packages; the source is verifiable via checksums, and the build process is transparent with no obfuscated or suspicious commands.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from GitHub Releases, which is a standard practice for binary packages; the source is verifiable via checksums, and the build process is transparent with no obfuscated or suspicious commands.

PKGBUILD

      1# Maintainer: Jochem Kuipers <jochem@kuipers.cc>
    
      2
    
      3pkgname=ltbox-bin
    
      4pkgver=3.2.2
    
      5pkgrel=1
    
      6pkgdesc='Lenovo tablet firmware tool (region, root, EDL) — binary release'
    
      7arch=('x86_64' 'aarch64')
    
      8url='https://github.com/miner7222/LTBox'
    
      9license=('GPL-3.0-or-later')
    
      10depends=('systemd-libs' 'hicolor-icon-theme')
    
      11makedepends=('python')
    
      12optdepends=(
    
      13  'android-tools: optional host adb/fastboot alongside LTBox'
    
      14  'polkit: GUI-assisted udev install (not needed; rules are packaged)'
    
      15)
    
      16provides=('ltbox')
    
      17conflicts=('ltbox')
    
      18options=('!strip' '!debug')
    
      19install=ltbox-bin.install
    
      20
    
      21source=(
    
      22  "51-ltbox-qcom.rules::https://raw.githubusercontent.com/miner7222/LTBox/v${pkgver}/misc/udev/51-ltbox-qcom.rules"
    
      23)
    
      24source_x86_64=(
    
      25  "LTBox-linux_x86_64-v${pkgver}.tar.gz::https://github.com/miner7222/LTBox/releases/download/v${pkgver}/LTBox-linux_x86_64-v${pkgver}.tar.gz"
    
      26)
    
      27source_aarch64=(
    
      28  "LTBox-linux_arm64-v${pkgver}.tar.gz::https://github.com/miner7222/LTBox/releases/download/v${pkgver}/LTBox-linux_arm64-v${pkgver}.tar.gz"
    
      29)
    
      30sha256sums=('0f6346cbba24fd373e3edaefb2a212412517c4f34f7600fe20df432d58acfccb')
    
      31sha256sums_x86_64=('b64085ea9fa6f5871126a71e90bdf6a914f63551f5f30eaca5f71c6f915bfb42')
    
      32sha256sums_aarch64=('064fec83312cce30ab12de05a18aa5c00e9d1f37ad1966b5480b50a128154b8d')
    
      33
    
      34package() {
    
      35  local _srcdir
    
      36  case $CARCH in
    
      37    x86_64) _srcdir="LTBox-linux_x86_64-v${pkgver}" ;;
    
      38    aarch64) _srcdir="LTBox-linux_arm64-v${pkgver}" ;;
    
      39  esac
    
      40
    
      41  cd "${srcdir}/${_srcdir}"
    
      42
    
      43  install -Dm755 ltbox "${pkgdir}/usr/bin/ltbox"
    
      44  install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      45  install -Dm644 README.md "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      46  install -Dm644 "${srcdir}/51-ltbox-qcom.rules" \
    
      47    "${pkgdir}/usr/lib/udev/rules.d/51-ltbox-qcom.rules"
    
      48
    
      49  install -Dm644 /dev/stdin "${pkgdir}/usr/share/applications/io.github.miner7222.LTBox.desktop" <<'EOF'
    
      50[Desktop Entry]
    
      51Type=Application
    
      52Name=LTBox
    
      53GenericName=Lenovo Tablet Flashing Tool
    
      54Comment=Region conversion, root, and EDL flashing for Lenovo tablets
    
      55Exec=/usr/bin/ltbox
    
      56Icon=io.github.miner7222.LTBox
    
      57Terminal=false
    
      58Categories=Utility;System;
    
      59StartupWMClass=io.github.miner7222.LTBox
    
      60Keywords=android;lenovo;flash;edl;root;
    
      61EOF
    
      62
    
      63  # App icon is embedded in the upstream binary next to the desktop template.
    
      64  python - "${pkgdir}" <<'PY'
    
      65import sys
    
      66from pathlib import Path
    
      67
    
      68pkgdir = Path(sys.argv[1])
    
      69binary = Path("ltbox").read_bytes()
    
      70start = binary.find(b"<svg")
    
      71end = binary.find(b"</svg>", start)
    
      72if start < 0 or end < 0:
    
      73    raise SystemExit("embedded LTBox SVG icon not found in binary")
    
      74icon_path = pkgdir / "usr/share/icons/hicolor/scalable/apps/io.github.miner7222.LTBox.svg"
    
      75icon_path.parent.mkdir(parents=True, exist_ok=True)
    
      76icon_path.write_bytes(binary[start : end + len(b"</svg>")])
    
      77PY
    
      78}
    
      79

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 13:14:23	LOW	2