mantle-bin

LOW

maintainer anasgets111 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package downloads prebuilt binaries from the project's GitHub releases, which is a common and generally trusted practice; the low severity is due to the lack of source build and reliance on external binaries, but the source is from the official project repository.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from the project's GitHub releases, which is a common and generally trusted practice; the low severity is due to the lack of source build and reliance on external binaries, but the source is from the official project repository.

PKGBUILD

      1# Maintainer: Anas Khalifa <anasgets111@gmail.com>
    
      2
    
      3# release.yml's aur job sets pkgver and sha256sums from each tag and pushes this to the AUR.
    
      4pkgname=mantle-bin
    
      5pkgver=0.7.5
    
      6pkgrel=1
    
      7pkgdesc='A Wayland shell engine that runs shells written in Lua (release binaries)'
    
      8arch=('x86_64')
    
      9url='https://github.com/anasgets111/mantle'
    
      10license=('MIT')
    
      11depends=('fontconfig' 'libgcc' 'glibc' 'libglvnd' 'libpipewire' 'libxkbcommon' 'mesa'
    
      12         'pacman' 'pam' 'polkit' 'systemd-libs' 'wayland')
    
      13optdepends=('niri: workspaces, windows and keyboard layout'
    
      14            'hyprland: workspaces, windows and keyboard layout'
    
      15            'paru: AUR package updates'
    
      16            'yay: AUR package updates'
    
      17            'sound-theme-freedesktop: notification sounds'
    
      18            'lua-language-server: type-checking the config in an editor')
    
      19provides=("mantle=$pkgver")
    
      20conflicts=('mantle' 'mantle-git')
    
      21backup=('etc/pam.d/mantle')
    
      22# The release build already strips its binaries.
    
      23options=('!debug' '!strip')
    
      24source=("$url/releases/download/v$pkgver/mantle-$pkgver-$CARCH-linux.tar.gz")
    
      25sha256sums=('b57b66edcb3ba4d7e6b6c36ed2d4fd944cedab82ddb91d920636f980e6b06f7c')
    
      26
    
      27# The tarball installs under /usr/local; its relative symlink and stub lookup work under /usr too.
    
      28package() {
    
      29    install -dm755 "$pkgdir/usr"
    
      30    cp -a usr/local/. "$pkgdir/usr/"
    
      31    mv "$pkgdir/usr/share/licenses/mantle" "$pkgdir/usr/share/licenses/$pkgname"
    
      32    install -Dm644 etc/pam.d/mantle "$pkgdir/etc/pam.d/mantle"
    
      33    install -Dm644 -t "$pkgdir/usr/share/polkit-1/rules.d" etc/polkit-1/rules.d/*.rules
    
      34}
    
      35

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 21:16:13	Low	2