minke

LOW

maintainer geosam 0 votes scanned 2026-09-15 21:20:38.565393

View on AUR

Why flagged

Package builds from a legitimate GitHub source with a SKIP'd checksum, but sources are public and build process is transparent; no evidence of malicious activity.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package builds from a legitimate GitHub source with a SKIP'd checksum, but sources are public and build process is transparent; no evidence of malicious activity.

PKGBUILD

      1# Maintainer: smesa <smesa@local>
    
      2# Minke - DeepSeek Harness Desktop (Electron app + bundled dsh harness runtime)
    
      3# https://github.com/lencx/Minke
    
      4
    
      5pkgname=minke
    
      6pkgver=0.6.1
    
      7pkgrel=1
    
      8pkgdesc="Minke desktop agent powered by DeepSeek Harness"
    
      9arch=(x86_64)
    
      10url="https://github.com/lencx/Minke"
    
      11license=(Apache-2.0)
    
      12
    
      13_gitname="Minke"
    
      14
    
      15
    
      16depends=(
    
      17  alsa-lib
    
      18  at-spi2-core
    
      19  cairo
    
      20  dbus
    
      21  expat
    
      22  glib2
    
      23  gtk3
    
      24  libcups
    
      25  libdrm
    
      26  libevdev
    
      27  libnotify
    
      28  libsecret
    
      29  libx11
    
      30  libxcb
    
      31  libxcomposite
    
      32  libxdamage
    
      33  libxext
    
      34  libxfixes
    
      35  libxkbcommon
    
      36  libxrandr
    
      37  libxss
    
      38  libxtst
    
      39  mesa
    
      40  nspr
    
      41  nss
    
      42  pango
    
      43  systemd-libs
    
      44  util-linux-libs
    
      45  wayland
    
      46  xdg-utils
    
      47)
    
      48makedepends=(
    
      49  gcc
    
      50  git
    
      51  libvips
    
      52  make
    
      53  nodejs
    
      54  pnpm
    
      55  python
    
      56)
    
      57# electron@43 and the dsh harness runtime are fetched from npm/GitHub during
    
      58# the build (pnpm install + harness:stage), so network access is required.
    
      59
    
      60source=(
    
      61  "$_gitname::git+https://github.com/lencx/Minke.git#tag=v${pkgver}"
    
      62  "$pkgname.desktop"
    
      63  "$pkgname.tmpfiles"
    
      64)
    
      65sha512sums=(
    
      66  SKIP
    
      67  "4ca3b2fb1e6ccc46180b499c39ef36150910557e4301a086de787146fdb4a21f7d7ec917b4c8bffd4ab5b0d71c541d40b7c7b903490fee14450900428377b5f6"
    
      68  "948820bfeef9a768d0d0400688b5d2e0cde94237c1cd487f83beca003c913fd495235c90b389d19f5bba199ee12d606d9c2fade8435af6c6bc101be5a3fd0e14"
    
      69)
    
      70
    
      71# The harness runtime is a git submodule pinned by the tag; fetch it explicitly.
    
      72prepare() {
    
      73  cd "$srcdir/$_gitname"
    
      74  git submodule update --init --depth 1
    
      75}
    
      76
    
      77build() {
    
      78  cd "$srcdir/$_gitname"
    
      79  # Installs app deps (incl. electron binary) and workspace packages.
    
      80  pnpm install --frozen-lockfile
    
      81  # Stage the dsh harness runtime into runtime/host from the pinned submodule
    
      82  # commit. Its native modules (sharp, node-pty, koffi) are installed against
    
      83  # the system Node.js ABI here.
    
      84  pnpm run harness:stage
    
      85
    
      86  # --- Fix sharp/libvips glib collision (electron/electron#46323) ---
    
      87  # sharp bundles a private libvips with its own glib symbols that collide
    
      88  # with the system glib dynamically linked by Electron, causing SIGSEGV.
    
      89  # Remove the bundled prebuilt binaries and rebuild sharp from source
    
      90  # against the system libvips so both share the same glib instance.
    
      91  rm -rf runtime/host/node_modules/@img/sharp-linux-x64
    
      92  rm -rf runtime/host/node_modules/@img/sharp-libvips-linux-x64
    
      93  (cd runtime/host/node_modules/sharp && node install/build.js)
    
      94
    
      95  # Package the unpacked app into out/Minke-linux-x64.
    
      96  pnpm run forge:package
    
      97}
    
      98
    
      99check() {
    
      100  cd "$srcdir/$_gitname"
    
      101  pnpm run test:assertions
    
      102}
    
      103
    
      104package() {
    
      105  cd "$srcdir/$_gitname"
    
      106
    
      107  # Unpacked Electron app: binary, resources (app.asar + host/ harness
    
      108  # runtime), locales, .pak files.
    
      109  install -dm755 "$pkgdir/usr/lib/$pkgname"
    
      110  cp -a out/Minke-linux-x64/. "$pkgdir/usr/lib/$pkgname/"
    
      111  # cp -a preserves restrictive perms (700) from the build output; make the
    
      112  # tree world-readable. Capital X only adds the exec bit to directories and
    
      113  # files that already have it (the Minke/chrome-sandbox binaries).
    
      114  chmod -R u=rwX,go=rX "$pkgdir/usr/lib/$pkgname"
    
      115
    
      116  install -dm755 "$pkgdir/usr/bin"
    
      117  ln -s "../lib/$pkgname/Minke" "$pkgdir/usr/bin/$pkgname"
    
      118
    
      119  install -Dm644 "$srcdir/$pkgname.desktop" \
    
      120    "$pkgdir/usr/share/applications/$pkgname.desktop"
    
      121
    
      122  # chrome-sandbox must be setuid root; set it at install time via tmpfiles
    
      123  # (Arch does not allow setuid bits inside packages).
    
      124  install -Dm644 "$srcdir/$pkgname.tmpfiles" \
    
      125    "$pkgdir/usr/lib/tmpfiles.d/$pkgname.conf"
    
      126
    
      127  install -Dm644 resources/icons/icon.png \
    
      128    "$pkgdir/usr/share/icons/hicolor/512x512/apps/$pkgname.png"
    
      129  install -Dm644 resources/icons/icon.png \
    
      130    "$pkgdir/usr/share/pixmaps/$pkgname.png"
    
      131
    
      132  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      133}
    
      134

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-15 21:20:38	Low	2