msime-bin

LOW

maintainer czyt 0 votes scanned 2026-10-06 00:13:36.889724

View on AUR

Why flagged

The package downloads prebuilt .deb binaries from official and trusted sources (GitHub Releases and Ubuntu archives) with fixed, verifiable checksums; the only risk is using a binary from an external party, but the sources are reputable and the package does not execute unverified code or exfiltrate data.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt .deb binaries from official and trusted sources (GitHub Releases and Ubuntu archives) with fixed, verifiable checksums; the only risk is using a binary from an external party, but the sources are reputable and the package does not execute unverified code or exfiltrate data.

PKGBUILD

      1# Maintainer: czyt <czytcn@gmail.com>
    
      2pkgname=msime-bin
    
      3pkgver=0.9.1
    
      4pkgrel=1
    
      5pkgdesc="Metasequoia IME: IBus frontend and desktop tools for Chinese and Japanese input"
    
      6arch=('x86_64' 'aarch64')
    
      7url="https://msime.app"
    
      8license=('GPL-3.0-only')
    
      9depends=('cairo' 'curl' 'glib2' 'gtk3' 'ibus' 'libsecret' 'sqlite' 'gcc-libs')
    
      10optdepends=(
    
      11    'tesseract: local handwriting recognition'
    
      12    'tesseract-data-chi_sim: simplified Chinese data for tesseract'
    
      13)
    
      14provides=('metasequoia-ime-linux')
    
      15conflicts=('metasequoia-ime-linux')
    
      16options=('!strip' '!debug')
    
      17
    
      18_upstream_deb="metasequoia-ime-linux_${pkgver}"
    
      19# The upstream binaries are built against Boost.JSON 1.83; Arch ships a newer
    
      20# Boost, so the compatible runtime library is taken from Ubuntu and installed
    
      21# next to the rest of the system libraries.
    
      22_boost_deb="libboost-json_1.83.0-2.1ubuntu3.2"
    
      23
    
      24source_x86_64=(
    
      25    "${_upstream_deb}_amd64.deb::https://github.com/metasequoiaime/MSIME-Linux/releases/download/v${pkgver}/${_upstream_deb}_amd64.deb"
    
      26    "${_boost_deb}_amd64.deb::https://archive.ubuntu.com/ubuntu/pool/universe/b/boost1.83/libboost-json1.83.0_1.83.0-2.1ubuntu3.2_amd64.deb"
    
      27)
    
      28source_aarch64=(
    
      29    "${_upstream_deb}_arm64.deb::https://github.com/metasequoiaime/MSIME-Linux/releases/download/v${pkgver}/${_upstream_deb}_arm64.deb"
    
      30    "${_boost_deb}_arm64.deb::https://ports.ubuntu.com/ubuntu-ports/pool/universe/b/boost1.83/libboost-json1.83.0_1.83.0-2.1ubuntu3.2_arm64.deb"
    
      31)
    
      32sha256sums_x86_64=('a6f41fc80c6489ca851fd923709271bd9b9ba88a8a194eb05201a172ca10eca2'
    
      33                   '819acce84a1327ed7476cbae5b76893f902058ff30d538b637380b8a79ec1571')
    
      34sha256sums_aarch64=('0ea03e38ebf353e622cbef97331864e1783f2f68c84855138fcf303f31ccc5bf'
    
      35                    '926dd1beb34694bc29b49426d29461daa12444ca4b62f14abdd4224db14182a6')
    
      36noextract=(
    
      37    "${_upstream_deb}_amd64.deb"
    
      38    "${_upstream_deb}_arm64.deb"
    
      39    "${_boost_deb}_amd64.deb"
    
      40    "${_boost_deb}_arm64.deb"
    
      41)
    
      42
    
      43package() {
    
      44    local _suffix
    
      45    case "$CARCH" in
    
      46        x86_64)  _suffix=amd64 ;;
    
      47        aarch64) _suffix=arm64 ;;
    
      48    esac
    
      49
    
      50    local _deb="${_upstream_deb}_${_suffix}.deb"
    
      51    local _boost="${_boost_deb}_${_suffix}.deb"
    
      52
    
      53    bsdtar -xOf "${srcdir}/${_deb}" 'data.tar.*' |
    
      54        bsdtar --no-same-owner -xf - -C "${pkgdir}"
    
      55
    
      56    local _tmp="${srcdir}/boost-${_suffix}"
    
      57    rm -rf "${_tmp}"
    
      58    mkdir -p "${_tmp}"
    
      59    bsdtar -xOf "${srcdir}/${_boost}" 'data.tar.*' | bsdtar -xf - -C "${_tmp}"
    
      60    install -Dm644 "$(find "${_tmp}" -name 'libboost_json.so.1.83.0' -print -quit)" \
    
      61        "${pkgdir}/usr/lib/libboost_json.so.1.83.0"
    
      62    rm -rf "${_tmp}"
    
      63}
    
      64

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 00:13:36	Low	2
2026-10-05 23:40:58	Low	1