nagram-desktop-bin

LOW

maintainer NextAlone 1 votes scanned 2026-10-06 00:13:36.889724

View on AUR

Why flagged

Package builds from a prebuilt binary released on the project's own GitHub repository, which is a normal AUR pattern; the low severity is due to few votes and recent upload, not inherent risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package builds from a prebuilt binary released on the project's own GitHub repository, which is a normal AUR pattern; the low severity is due to few votes and recent upload, not inherent risk.

PKGBUILD

      1# Maintainer: NextAlone <https://github.com/NextAlone>
    
      2# Generated by tools/nagram/aur_package.py in https://github.com/NextAlone/Nagram-qt
    
      3
    
      4pkgname=nagram-desktop-bin
    
      5pkgver=7.2.10.3
    
      6pkgrel=1
    
      7pkgdesc="Independent Telegram client based on Telegram Desktop (release binary)"
    
      8arch=(x86_64)
    
      9url="https://github.com/NextAlone/Nagram-qt"
    
      10license=('GPL-3.0-or-later WITH OpenSSL-exception')
    
      11depends=(cairo dbus fontconfig freetype2 glib2 glibc gtk3 hicolor-icon-theme libx11 libxcb pango wayland)
    
      12optdepends=(
    
      13	'webkit2gtk-4.1: bots and web apps inside the client'
    
      14	'xdg-desktop-portal: file dialogs of the desktop environment'
    
      15	'libpulse: sound through PulseAudio or PipeWire'
    
      16	'alsa-lib: sound through ALSA'
    
      17	'libpipewire: screen sharing on Wayland'
    
      18	'geoclue: sharing the current location'
    
      19	'libva: hardware video decoding'
    
      20)
    
      21provides=(nagram-desktop)
    
      22conflicts=(nagram-desktop)
    
      23options=(!strip !debug)
    
      24source=("Nagram-$pkgver-linux-$CARCH.tar.xz::$url/releases/download/v$pkgver/Nagram-$pkgver-linux-$CARCH.tar.xz")
    
      25sha256sums=('ba7b2a0412d5e6f0498849bfdcf372c934f252c0a26108b2e39f6ee75b7e09f4')
    
      26
    
      27package() {
    
      28	install -Dm755 Nagram/Nagram "$pkgdir/usr/bin/Nagram"
    
      29	install -d "$pkgdir/usr/share"
    
      30	cp -r --no-preserve=ownership Nagram/share/. "$pkgdir/usr/share/"
    
      31
    
      32	# pacman updates this copy, so the built-in updater is switched off.
    
      33	install -d "$pkgdir/usr/share/NagramDesktop/externalupdater.d"
    
      34	echo /usr/bin/Nagram > "$pkgdir/usr/share/NagramDesktop/externalupdater.d/$pkgname.conf"
    
      35}
    
      36

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 00:13:36	Low	2
2026-10-05 23:40:58	Low	2