mangatan-bin

maintainer scrubeye · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR binary packages; the low severity is due to the unverifiable origin of the binary and lack of build-from-source, but it comes from the project's official repository and has no signs of malicious behavior.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR binary packages; the low severity is due to the unverifiable origin of the binary and lack of build-from-source, but it comes from the project's official repository and has no signs of malicious behavior.

PKGBUILD

1# Maintainer: Autumn (Bee) <10378052+bee-san at users dot noreply dot github dot com>
2
3pkgname=mangatan-bin
4_pkgname=mangatan
5pkgver=1.1.0
6pkgrel=1
7pkgdesc="Read manga and light novels, and watch anime"
8arch=('x86_64')
9url="https://github.com/1Selxo/Mangatan"
10license=('GPL-3.0-only')
11
12makedepends=('patchelf')
13depends=(
14 'alsa-lib'
15 'at-spi2-core'
16 'cairo'
17 'fontconfig'
18 'gdk-pixbuf2'
19 'glib2'
20 'glibc'
21 'gtk3'
22 'harfbuzz'
23 'libepoxy'
24 'libgcc'
25 'libsecret'
26 'libstdc++'
27 'libsoup3'
28 'mpv'
29 'pango'
30 'webkit2gtk-4.1'
31 'xdg-utils'
32 'zlib-ng-compat'
33)
34
35provides=('mangatan' 'mangayomi')
36conflicts=(
37 'mangatan'
38 'mangatan-git'
39 'mangayomi'
40 'mangayomi-bin'
41 'mangayomi-git'
42)
43options=('!strip')
44
45source=(
46 "mangatan.desktop::https://raw.githubusercontent.com/1Selxo/Mangatan/v${pkgver}/linux/mangayomi.desktop"
47 "LICENSE-${pkgver}::https://raw.githubusercontent.com/1Selxo/Mangatan/v${pkgver}/LICENSE"
48)
49source_x86_64=(
50 "${pkgname}-${pkgver}-${CARCH}.tar.gz::${url}/releases/download/v${pkgver}/Mangatan-v${pkgver}-linux-${CARCH}.tar.gz"
51)
52
53sha256sums=(
54 'd00453f6aa1f75357a31d0a696861be6f7e82bd824920faa98bf48b2a4769c25'
55 'e57f1c320b8cf8798a7d2ff83a6f9e06a33a03585f6e065fea97f1d86db84052'
56)
57sha256sums_x86_64=(
58 '8f967cb324ea671319f1f970a130dbf2ed719a7483288c70cd5b286fd9f77657'
59)
60
61package() {
62 local bundle="${srcdir}/Mangatan-v${pkgver}-linux-${CARCH}"
63
64 install -dm755 "${pkgdir}/usr/lib/${_pkgname}"
65 cp -a "${bundle}/." "${pkgdir}/usr/lib/${_pkgname}/"
66
67 install -dm755 "${pkgdir}/usr/bin"
68 ln -s "/usr/lib/${_pkgname}/mangayomi" "${pkgdir}/usr/bin/mangatan"
69 ln -s "/usr/lib/${_pkgname}/mangayomi" "${pkgdir}/usr/bin/mangayomi"
70
71 find "${pkgdir}/usr/lib/${_pkgname}/lib" \
72 -maxdepth 1 -type f -name '*.so' \
73 -exec patchelf --set-rpath '$ORIGIN' {} +
74
75 install -Dm644 \
76 "${bundle}/data/flutter_assets/assets/app_icons/icon.png" \
77 "${pkgdir}/usr/share/pixmaps/mangayomi.png"
78
79 install -Dm644 "${srcdir}/mangatan.desktop" \
80 "${pkgdir}/usr/share/applications/mangayomi.desktop"
81
82 install -Dm644 "${srcdir}/LICENSE-${pkgver}" \
83 "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
84}
85

Changes since previous scan

--- PKGBUILD @ 2026-07-30 00:17
+++ PKGBUILD @ 2026-08-03 00:08
@@ -2,7 +2,7 @@
pkgname=mangatan-bin
_pkgname=mangatan
-pkgver=1.0.9
+pkgver=1.1.0
pkgrel=1
pkgdesc="Read manga and light novels, and watch anime"
arch=('x86_64')
@@ -55,7 +55,7 @@
'e57f1c320b8cf8798a7d2ff83a6f9e06a33a03585f6e065fea97f1d86db84052'
)
sha256sums_x86_64=(
- '25331bc6dc47f27cbd0aa24c22c3e5475366803c45425bad6c5dcd2f07645248'
+ '8f967cb324ea671319f1f970a130dbf2ed719a7483288c70cd5b286fd9f77657'
)
package() {

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 03:13:55 LOW 2
2026-07-30 01:13:52 LOW 2
2026-07-30 00:17:23 CLEAN 2
2026-07-29 07:10:52 LOW 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion