mango-launcher-bin

maintainer fraa2a · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads a prebuilt tarball and icon from the project's own GitHub releases and raw content, which is normal for a -bin AUR package; the SKIP'd checksums are a quality issue but not inherently dangerous as the sources are from the project's official repository, and it installs only the expected files without executing remote code or exfiltrating data.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package downloads a prebuilt tarball and icon from the project's own GitHub releases and raw content, which is normal for a -bin AUR package; the SKIP'd checksums are a quality issue but not inherently dangerous as the sources are from the project's official repository, and it installs only the expected files without executing remote code or exfiltrating data.

PKGBUILD

1# Maintainer: fraa2a <fraa2a@users.noreply.github.com>
2# AUR binary package for Mango Launcher
3# https://aur.archlinux.org/packages/mango-launcher-bin
4
5pkgname=mango-launcher-bin
6pkgver=2.0.1
7pkgrel=1
8pkgdesc="Mango Launcher - An open-source gaming platform"
9arch=('x86_64')
10url="https://github.com/fraa2a/mango-launcher"
11license=('MIT')
12depends=(
13 'electron'
14 'libappindicator-gtk3'
15 'libnotify'
16 'ttf-font'
17)
18conflicts=('mangolauncher' 'mangolauncher-bin')
19provides=('mangolauncher')
20source=(
21 "https://github.com/fraa2a/mango-launcher/releases/download/v${pkgver}/mango-launcher-${pkgver}.tar.gz"
22 "https://raw.githubusercontent.com/fraa2a/mango-launcher/v${pkgver}/build/icons/512x512.png"
23)
24sha256sums=('SKIP' 'SKIP')
25
26package() {
27 install -d "$pkgdir/opt/mango-launcher"
28 tar -xzf "$srcdir/mango-launcher-${pkgver}.tar.gz" --strip-components=1 -C "$pkgdir/opt/mango-launcher"
29
30 find "$pkgdir/opt/mango-launcher" -type f \( -name "*.so*" -o -name "mango-launcher" \) -exec chmod 755 {} \;
31
32 install -d "$pkgdir/usr/bin"
33 ln -sf "/opt/mango-launcher/mango-launcher" "$pkgdir/usr/bin/mangolauncher"
34
35 install -d "$pkgdir/usr/share/applications"
36 cat > "$pkgdir/usr/share/applications/mangolauncher.desktop" << EOF
37[Desktop Entry]
38Name=Mango Launcher
39Comment=Gaming platform
40Exec=/opt/mango-launcher/mango-launcher %U
41Icon=mangolauncher
42Terminal=false
43Type=Application
44Categories=Game;
45StartupWMClass=Mango Launcher
46MimeType=application/x-mango-custom-download-source;
47EOF
48
49 install -d "$pkgdir/usr/share/mime/packages"
50 cat > "$pkgdir/usr/share/mime/packages/mangolauncher.xml" << EOF
51<?xml version="1.0" encoding="UTF-8"?>
52<mime-info xmlns="http://www.freedesktop.org/standards/shared-mime-info">
53 <mime-type type="application/x-mango-custom-download-source">
54 <comment>Mango Custom Download Source</comment>
55 <glob pattern="*.mangocds"/>
56 <sub-class-of type="application/json"/>
57 </mime-type>
58</mime-info>
59EOF
60
61 install -d "$pkgdir/usr/share/icons/hicolor/512x512/apps"
62 install -m644 "$srcdir/512x512.png" "$pkgdir/usr/share/icons/hicolor/512x512/apps/mangolauncher.png"
63}
64
65post_install() {
66 # Electron needs a SUID chrome-sandbox unless the kernel supports user namespaces.
67 if ! { [[ -L /proc/self/ns/user ]] && unshare --user true; }; then
68 chown root:root /opt/mango-launcher/chrome-sandbox
69 chmod 4755 /opt/mango-launcher/chrome-sandbox
70 fi
71 update-mime-database /usr/share/mime
72 update-desktop-database /usr/share/applications
73 gtk-update-icon-cache /usr/share/icons/hicolor
74}
75
76post_upgrade() {
77 post_install
78}
79
80post_remove() {
81 post_install
82}
83

Changes since previous scan

--- PKGBUILD @ 2026-07-31 01:17
+++ PKGBUILD @ 2026-08-03 00:08
@@ -3,7 +3,7 @@
# https://aur.archlinux.org/packages/mango-launcher-bin
pkgname=mango-launcher-bin
-pkgver=2.0.0
+pkgver=2.0.1
pkgrel=1
pkgdesc="Mango Launcher - An open-source gaming platform"
arch=('x86_64')
@@ -24,20 +24,20 @@
sha256sums=('SKIP' 'SKIP')
package() {
- install -d "$pkgdir/opt/mangolauncher"
- tar -xzf "$srcdir/mango-launcher-${pkgver}.tar.gz" -C "$pkgdir/opt/mangolauncher"
+ install -d "$pkgdir/opt/mango-launcher"
+ tar -xzf "$srcdir/mango-launcher-${pkgver}.tar.gz" --strip-components=1 -C "$pkgdir/opt/mango-launcher"
- find "$pkgdir/opt/mangolauncher" -type f \( -name "*.so*" -o -name "mango-launcher" -o -name "chrome-sandbox" \) -exec chmod 755 {} \;
+ find "$pkgdir/opt/mango-launcher" -type f \( -name "*.so*" -o -name "mango-launcher" \) -exec chmod 755 {} \;
install -d "$pkgdir/usr/bin"
- ln -sf "/opt/mangolauncher/mango-launcher" "$pkgdir/usr/bin/mangolauncher"
+ ln -sf "/opt/mango-launcher/mango-launcher" "$pkgdir/usr/bin/mangolauncher"
install -d "$pkgdir/usr/share/applications"
cat > "$pkgdir/usr/share/applications/mangolauncher.desktop" << EOF
[Desktop Entry]
Name=Mango Launcher
Comment=Gaming platform
-Exec=/opt/mangolauncher/mango-launcher %U
+Exec=/opt/mango-launcher/mango-launcher %U
Icon=mangolauncher
Terminal=false
Type=Application
@@ -63,6 +63,11 @@
}
post_install() {
+ # Electron needs a SUID chrome-sandbox unless the kernel supports user namespaces.
+ if ! { [[ -L /proc/self/ns/user ]] && unshare --user true; }; then
+ chown root:root /opt/mango-launcher/chrome-sandbox
+ chmod 4755 /opt/mango-launcher/chrome-sandbox
+ fi
update-mime-database /usr/share/mime
update-desktop-database /usr/share/applications
gtk-update-icon-cache /usr/share/icons/hicolor

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 13:18:10 LOW 2
2026-07-31 01:17:03 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion