netkeep-bin

LOW

maintainer mohamadkhani 0 votes scanned 2026-10-06 00:13:36.889724

View on AUR

Why flagged

The package installs prebuilt binaries from GitHub Releases with a verifiable b2sum, which is standard for -bin packages; the low severity reflects the inherent supply-chain risk of prebuilt binaries but is mitigated by checksum validation and official project hosting.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs prebuilt binaries from GitHub Releases with a verifiable b2sum, which is standard for -bin packages; the low severity reflects the inherent supply-chain risk of prebuilt binaries but is mitigated by checksum validation and official project hosting.

PKGBUILD

      1# Maintainer: Mohammadreza Khani <mohamadkhani14@gmail.com>
    
      2# This PKGBUILD is generated/updated by CI (see packaging/arch/publish-aur.sh).
    
      3# Hand-edits are fine but will be overwritten on the next tagged release.
    
      4# The source-built package lives in packaging/archlinux/PKGBUILD; this -bin
    
      5# package installs the prebuilt binaries from the GitHub release tarball.
    
      6
    
      7pkgname=netkeep-bin
    
      8pkgver=0.1.0
    
      9pkgrel=1
    
      10pkgdesc='Linux desktop network flow authorization (daemon, CLI, GPUI tray) — prebuilt'
    
      11arch=('x86_64')
    
      12url='https://github.com/mohamadkhani/netkeep'
    
      13license=('GPL-3.0-or-later')
    
      14depends=(
    
      15  'gcc-libs'
    
      16  'glibc'
    
      17  'gtk-update-icon-cache'
    
      18  'hicolor-icon-theme'
    
      19  'libxkbcommon'
    
      20  'libxcb'
    
      21  'sqlite'
    
      22  'xdotool'
    
      23)
    
      24optdepends=(
    
      25  'vulkan-mesa-layers: GPU stack for GPUI on some setups'
    
      26  'systemd-resolved: disable stub listener if using NETKEEP_DNS_FORWARDER on port 53'
    
      27)
    
      28provides=('netkeep')
    
      29conflicts=('netkeep')
    
      30# Binaries arrive UPX-packed: stripping them is impossible (no sections) and
    
      31# there is nothing to debug-package.
    
      32options=('!strip' '!debug')
    
      33source_x86_64=("https://github.com/mohamadkhani/netkeep/releases/download/v${pkgver}/netkeep-${pkgver}-x86_64-unknown-linux-gnu.tar.gz")
    
      34# Checksum is injected by CI from the built tarball (real b2sum, not SKIP).
    
      35b2sums_x86_64=('99ab422c896c08d3eccd6e7f52938f8c0628e1789af95394d6f9721d259d272bb04401cf077743195c0f2df8ad9cf4f2458f0c2345ed7115c383ab28a306a3ab')
    
      36
    
      37package() {
    
      38  install -Dm755 "$srcdir/netkeepd"     "$pkgdir/usr/bin/netkeepd"
    
      39  install -Dm755 "$srcdir/netkeep-cli"  "$pkgdir/usr/bin/netkeep-cli"
    
      40  install -Dm755 "$srcdir/netkeep-gpui" "$pkgdir/usr/bin/netkeep-gpui"
    
      41
    
      42  install -Dm644 "$srcdir/netkeepd.service" \
    
      43    "$pkgdir/usr/lib/systemd/system/netkeepd.service"
    
      44  install -Dm644 "$srcdir/io.logicamp.Netkeep.desktop" \
    
      45    "$pkgdir/usr/share/applications/io.logicamp.Netkeep.desktop"
    
      46  install -Dm644 "$srcdir/io.logicamp.Netkeep.svg" \
    
      47    "$pkgdir/usr/share/icons/hicolor/scalable/apps/io.logicamp.Netkeep.svg"
    
      48  install -Dm644 "$srcdir/netkeep.conf" \
    
      49    "$pkgdir/etc/environment.d/netkeep.conf"
    
      50
    
      51  install -Dm644 "$srcdir/LICENSE" \
    
      52    "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      53}
    
      54

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 00:13:36	Low	2
2026-10-05 23:40:58	Low	1