nagram-desktop

LOW
maintainer ZhangHua 0 votes scanned 2026-10-06 00:13:36.889724
View on AUR
Why flagged

The package builds from source using pinned git repositories, including the main project and its submodules; while many sources lack checksums (SKIP), they are all from known project repositories and the build process uses file:// URLs to bind them locally, reducing supply-chain risk; the only notable issue is the low vote count and recent upload, but no evidence of malicious behavior is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source using pinned git repositories, including the main project and its submodules; while many sources lack checksums (SKIP), they are all from known project repositories and the build process uses file:// URLs to bind them locally, reducing supply-chain risk; the only notable issue is the low vote count and recent upload, but no evidence of malicious behavior is present.

PKGBUILD

1pkgname=nagram-desktop
2pkgver=7.2.10.3
3_td_commit=bc9c263e2bfee06aaab41e82db51a103376030bc
4pkgrel=1
5pkgdesc='An independent Telegram client built with Qt.'
6arch=('x86_64')
7url="https://github.com/NextAlone/Nagram-Qt"
8license=('GPL-3.0-or-later WITH OpenSSL-exception')
9depends=(
10 'abseil-cpp'
11 'ada'
12 'ffmpeg'
13 'glib2'
14 'glibc'
15 'hicolor-icon-theme'
16 'hunspell'
17 'kcoreaddons'
18 'libavif'
19 'libfido2'
20 'libgcc'
21 'libheif'
22 'libjpeg-turbo'
23 'libjxl'
24 'libpipewire'
25 'libsrtp'
26 'libstdc++'
27 'libvpx'
28 'libxcb'
29 'libxcomposite'
30 'libxdamage'
31 'libxext'
32 'libxfixes'
33 'libxkbcommon'
34 'libxrandr'
35 'libxtst'
36 'lz4'
37 'minizip'
38 'openal'
39 'openh264'
40 'openssl'
41 'opus'
42 'pipewire'
43 'qt6-base'
44 'qt6-declarative'
45 'qt6-imageformats'
46 'qt6-svg'
47 'qt6-wayland'
48 'rnnoise'
49 'tlottie'
50 'xxhash'
51 'zlib'
52)
53makedepends=(
54 'boost'
55 'boost-libs'
56 'cmake'
57 'git'
58 'glib2-devel'
59 'gobject-introspection'
60 'qt6-shadertools'
61 'gperf'
62 'libtg_owt'
63 'microsoft-gsl'
64 'ninja'
65 'python'
66 'range-v3'
67 'tl-expected'
68 'vulkan-headers'
69)
70optdepends=(
71 'geoclue: geoinformation support'
72 'crow-translate: translation provider'
73 'webkit2gtk-4.1: embedded browser features provided by webkit2gtk-4.1 (gtk3)'
74 'webkitgtk-6.0: embedded browser features provided by webkitgtk-6.0 (gtk4)'
75 'xdg-desktop-portal: desktop integration'
76)
77source=(
78 "git+https://github.com/NextAlone/Nagram-Qt.git#tag=v${pkgver}"
79 "git+https://github.com/tdlib/td.git#commit=${_td_commit}"
80 "git+https://github.com/Microsoft/GSL.git"
81 "git+https://github.com/Cyan4973/xxHash.git"
82 "git+https://github.com/lz4/lz4.git"
83 "git+https://github.com/desktop-app/lib_crl.git"
84 "git+https://github.com/desktop-app/lib_rpl.git"
85 "git+https://github.com/desktop-app/lib_base.git"
86 "git+https://github.com/desktop-app/codegen.git"
87 "git+https://github.com/desktop-app/lib_ui.git"
88 "git+https://github.com/desktop-app/lib_lottie.git"
89 "git+https://github.com/desktop-app/lib_tl.git"
90 "git+https://github.com/desktop-app/lib_spellcheck.git"
91 "git+https://github.com/desktop-app/lib_storage.git"
92 "git+https://github.com/desktop-app/cmake_helpers.git"
93 "git+https://github.com/TartanLlama/expected.git"
94 "git+https://github.com/nayuki/QR-Code-generator.git"
95 "git+https://github.com/desktop-app/lib_qr.git"
96 "git+https://github.com/hunspell/hunspell.git"
97 "git+https://github.com/ericniebler/range-v3.git"
98 "git+https://github.com/hamonikr/nimf.git"
99 "git+https://github.com/hime-ime/hime.git"
100 "git+https://github.com/fcitx/fcitx5-qt.git"
101 "git+https://github.com/desktop-app/lib_webrtc.git"
102 "git+https://github.com/TelegramMessenger/tgcalls.git"
103 "git+https://github.com/desktop-app/lib_webview.git"
104 "git+https://github.com/KDE/kimageformats.git"
105 "git+https://github.com/KDE/kcoreaddons.git"
106 "git+https://github.com/google/cld3.git"
107 "git+https://github.com/desktop-app/libprisma.git"
108 "git+https://github.com/flatpak/xdg-desktop-portal.git"
109 "git+https://github.com/desktop-app/lib_translate.git"
110 "git+https://github.com/desktop-app/cmark-gfm.git"
111 "git+https://github.com/desktop-app/MicroTeX.git"
112 "git+https://github.com/tzcnt/TooManyCooks.git"
113 "git+https://github.com/PJK/libcbor.git"
114 "git+https://github.com/Yubico/libfido2.git"
115 "git+https://gitlab.com/mnauw/cppgir.git"
116 "git+https://github.com/martinmoene/expected-lite.git"
117)
118sha512sums=('d19e8ba70b5f91f20df96150a2d7c642097003a00493ed8389ec566f2b13bad80aa20fc4d5728bc9af1821c60183933ed60318d5ff88393493bc4c174205cf92'
119 '12d3b77dbb2a7b7deaef0e173626b9d16acfbdde5b1df4bd58a70a7541a5d8032f25ecbc14604b0e47aa3d6d76704c56409d432717412c6046efebd0ab6180f1'
120 'SKIP'
121 'SKIP'
122 'SKIP'
123 'SKIP'
124 'SKIP'
125 'SKIP'
126 'SKIP'
127 'SKIP'
128 'SKIP'
129 'SKIP'
130 'SKIP'
131 'SKIP'
132 'SKIP'
133 'SKIP'
134 'SKIP'
135 'SKIP'
136 'SKIP'
137 'SKIP'
138 'SKIP'
139 'SKIP'
140 'SKIP'
141 'SKIP'
142 'SKIP'
143 'SKIP'
144 'SKIP'
145 'SKIP'
146 'SKIP'
147 'SKIP'
148 'SKIP'
149 'SKIP'
150 'SKIP'
151 'SKIP'
152 'SKIP'
153 'SKIP'
154 'SKIP'
155 'SKIP'
156 'SKIP')
157
158prepare() {
159 git -C Nagram-Qt submodule init
160 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/GSL".url "file://${srcdir}/GSL"
161 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/xxHash".url "file://${srcdir}/xxHash"
162 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/lz4".url "file://${srcdir}/lz4"
163 git -C Nagram-Qt config --local submodule."Telegram/lib_crl".url "file://${srcdir}/lib_crl"
164 git -C Nagram-Qt config --local submodule."Telegram/lib_rpl".url "file://${srcdir}/lib_rpl"
165 git -C Nagram-Qt config --local submodule."Telegram/lib_base".url "file://${srcdir}/lib_base"
166 git -C Nagram-Qt config --local submodule."Telegram/codegen".url "file://${srcdir}/codegen"
167 git -C Nagram-Qt config --local submodule."Telegram/lib_ui".url "file://${srcdir}/lib_ui"
168 git -C Nagram-Qt config --local submodule."Telegram/lib_lottie".url "file://${srcdir}/lib_lottie"
169 git -C Nagram-Qt config --local submodule."Telegram/lib_tl".url "file://${srcdir}/lib_tl"
170 git -C Nagram-Qt config --local submodule."Telegram/lib_spellcheck".url "file://${srcdir}/lib_spellcheck"
171 git -C Nagram-Qt config --local submodule."Telegram/lib_storage".url "file://${srcdir}/lib_storage"
172 git -C Nagram-Qt config --local submodule."cmake".url "file://${srcdir}/cmake_helpers"
173 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/expected".url "file://${srcdir}/expected"
174 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/QR".url "file://${srcdir}/QR-Code-generator"
175 git -C Nagram-Qt config --local submodule."Telegram/lib_qr".url "file://${srcdir}/lib_qr"
176 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/hunspell".url "file://${srcdir}/hunspell"
177 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/range-v3".url "file://${srcdir}/range-v3"
178 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/nimf".url "file://${srcdir}/nimf"
179 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/fcitx5-qt".url "file://${srcdir}/fcitx5-qt"
180 git -C Nagram-Qt config --local submodule."Telegram/lib_webrtc".url "file://${srcdir}/lib_webrtc"
181 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/tgcalls".url "file://${srcdir}/tgcalls"
182 git -C Nagram-Qt config --local submodule."Telegram/lib_webview".url "file://${srcdir}/lib_webview"
183 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/kimageformats".url "file://${srcdir}/kimageformats"
184 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/kcoreaddons".url "file://${srcdir}/kcoreaddons"
185 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/cld3".url "file://${srcdir}/cld3"
186 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/libprisma".url "file://${srcdir}/libprisma"
187 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/xdg-desktop-portal".url "file://${srcdir}/xdg-desktop-portal"
188 git -C Nagram-Qt config --local submodule."Telegram/lib_translate".url "file://${srcdir}/lib_translate"
189 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/cmark-gfm".url "file://${srcdir}/cmark-gfm"
190 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/MicroTeX".url "file://${srcdir}/MicroTeX"
191 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/TooManyCooks".url "file://${srcdir}/TooManyCooks"
192 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/libcbor".url "file://${srcdir}/libcbor"
193 git -C Nagram-Qt config --local submodule."Telegram/ThirdParty/libfido2".url "file://${srcdir}/libfido2"
194 git -C Nagram-Qt -c protocol.file.allow=always submodule update
195
196 git -C Nagram-Qt/cmake submodule init
197 git -C Nagram-Qt/cmake config --local submodule."external/glib/cppgir".url "file://${srcdir}/cppgir"
198 git -C Nagram-Qt/cmake -c protocol.file.allow=always submodule update
199
200 git -C Nagram-Qt/cmake/external/glib/cppgir submodule init
201 git -C Nagram-Qt/cmake/external/glib/cppgir config --local submodule."expected-lite".url "file://${srcdir}/expected-lite"
202 git -C Nagram-Qt/cmake/external/glib/cppgir -c protocol.file.allow=always submodule update
203}
204
205build() {
206 cmake -S td -B td/build \
207 -DCMAKE_BUILD_TYPE=None \
208 -DCMAKE_INSTALL_PREFIX="$PWD/td/install" \
209 -Wno-dev \
210 -DTD_E2E_ONLY=ON
211 cmake --build td/build
212 cmake --install td/build
213
214 if [[ -n "${MAKEPKG_NAGRAM_DESKTOP_API_ID}" ]] && [[ -n "${MAKEPKG_NAGRAM_DESKTOP_API_HASH}" ]]
215 then
216 _api_defines=(-DTDESKTOP_API_ID="${MAKEPKG_NAGRAM_DESKTOP_API_ID}"
217 -DTDESKTOP_API_HASH="${MAKEPKG_NAGRAM_DESKTOP_API_HASH}")
218 else
219 _api_defines=(-DTDESKTOP_API_TEST=ON)
220 fi
221
222 cmake -B build -S Nagram-Qt -G Ninja \
223 -DCMAKE_VERBOSE_MAKEFILE=ON \
224 -DCMAKE_INSTALL_PREFIX="/usr" \
225 -Dtde2e_DIR="$PWD/td/install/lib/cmake/tde2e" \
226 -DCMAKE_BUILD_TYPE=None \
227 "${_api_defines[@]}"
228 cmake --build build
229}
230
231package() {
232 DESTDIR="$pkgdir" cmake --install build
233}
234
235

Scan history

Scanned at (UTC)SeverityRules
2026-10-06 00:13:36 Low 2
2026-10-05 23:40:58 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion