matuwall-bin

LOW

maintainer naurissteins 0 votes scanned 2026-09-21 17:35:47.897038

View on AUR

Why flagged

The package downloads a prebuilt binary tarball from the project's GitHub releases, which is a common but unverifiable practice; however, it installs only static files and poses no active execution or remote code risk during install.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary tarball from the project's GitHub releases, which is a common but unverifiable practice; however, it installs only static files and poses no active execution or remote code risk during install.

PKGBUILD

      1# Maintainer: Nauris Steins <me@naurissteins.com>
    
      2pkgname=matuwall-bin
    
      3_pkgname=matuwall
    
      4pkgver=0.2.0
    
      5pkgrel=1
    
      6pkgdesc="Fast and lightweight wallpaper picker for Wayland"
    
      7arch=('x86_64')
    
      8url="https://github.com/naurissteins/Matuwall"
    
      9license=('GPL-3.0-or-later')
    
      10options=('!debug')
    
      11depends=('wayland' 'libxkbcommon' 'libpng' 'libjpeg-turbo' 'libwebp')
    
      12optdepends=(
    
      13  'awww: apply wallpapers'
    
      14  'sweetbg: apply wallpapers'
    
      15  'matugen: generate colorschemes from the applied wallpaper'
    
      16  'python-pywal: generate colorschemes from the applied wallpaper'
    
      17)
    
      18provides=("$_pkgname=$pkgver")
    
      19conflicts=("$_pkgname" "$_pkgname-git")
    
      20source=(
    
      21  "$_pkgname-$pkgver-x86_64-linux.tar.xz::$url/releases/download/v$pkgver/$_pkgname-$pkgver-x86_64-linux.tar.xz"
    
      22  "LICENSE::https://raw.githubusercontent.com/naurissteins/Matuwall/v$pkgver/LICENSE"
    
      23)
    
      24sha256sums=('e56e58c3e12f52c8b40fd8a5b28c8fa8a710a265578b9972391136e1ffab1c3a'
    
      25            '3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986')
    
      26
    
      27package() {
    
      28  # The tarball already carries the usr/ prefix
    
      29  cp -a usr "$pkgdir/usr"
    
      30  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      31}
    
      32

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-21 17:35:47	Low	2