motrix-next-git

maintainer XiHanQWQ · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package builds from a legitimate git source with a SKIP'd checksum, which is common for git-based AUR packages; the build process uses standard tools and dependencies, and no suspicious downloads or obfuscated code is present.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package builds from a legitimate git source with a SKIP'd checksum, which is common for git-based AUR packages; the build process uses standard tools and dependencies, and no suspicious downloads or obfuscated code is present.

PKGBUILD

      1# Maintainer: XiHanQWQ
    
      2
    
      3pkgname=motrix-next-git
    
      4pkgver=3.9.7_0_gdc12e7d9
    
      5pkgrel=1
    
      6pkgdesc="A full-featured download manager rebuilt with Tauri 2, Vue 3, and Rust"
    
      7arch=('x86_64' 'aarch64')
    
      8url="https://github.com/AnInsomniacy/motrix-next"
    
      9license=('MIT')
    
      10provides=('motrix-next')
    
      11conflicts=('motrix-next' 'motrix-next-bin')
    
      12depends=(
    
      13    cairo
    
      14    gdk-pixbuf2
    
      15    gtk3
    
      16    hicolor-icon-theme
    
      17    libappindicator
    
      18    libsoup3
    
      19    webkit2gtk-4.1
    
      20)
    
      21makedepends=(
    
      22    cargo
    
      23    nodejs
    
      24    pnpm
    
      25    openssl
    
      26    appmenu-gtk-module
    
      27    git
    
      28)
    
      29options=(!lto)
    
      30source=("$pkgname::git+https://github.com/AnInsomniacy/motrix-next.git")
    
      31sha256sums=('SKIP')
    
      32
    
      33pkgver() {
    
      34    cd "$srcdir/$pkgname"
    
      35    git describe --long --tags | sed 's/^v//;s/-/_/g'
    
      36}
    
      37
    
      38prepare() {
    
      39    cd "$srcdir/$pkgname"
    
      40    sed -i '/"createUpdaterArtifacts":/s/true/false/' src-tauri/tauri.conf.json
    
      41    pnpm install --frozen-lockfile
    
      42}
    
      43
    
      44build() {
    
      45    cd "$srcdir/$pkgname"
    
      46    export CARGO_HOME="${srcdir}/cargo-home"
    
      47    export CC=gcc
    
      48    export AR=ar
    
      49    export CARGO_TARGET_X86_64_UNKNOWN_LINUX_GNU_LINKER=gcc
    
      50    rm -rf src-tauri/target/release/build/ring-*
    
      51    pnpm tauri build --bundles deb
    
      52}
    
      53
    
      54package() {
    
      55    cd "$srcdir/$pkgname"
    
      56    local tmpdir="${srcdir}/deb-extract"
    
      57    mkdir -p "$tmpdir"
    
      58    ar x src-tauri/target/release/bundle/deb/*.deb --output="$tmpdir"
    
      59    tar -xf "$tmpdir/data.tar.gz" -C "$pkgdir"
    
      60    install -Dm644 LICENSE -t "$pkgdir/usr/share/licenses/$pkgname/"
    
      61    sed -i '/^Categories=/c\Categories=Network;FileTransfer;' \
    
      62        "$pkgdir/usr/share/applications/MotrixNext.desktop"
    
      63}
    
      64

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 09:30:19	LOW	2