nexonic-download-manager-git

LOW

maintainer 9M2PJU 0 votes scanned 2026-11-06 08:11:27.004022

View on AUR

Why flagged

The package builds from a public git repository with no untrusted remote code execution; the low severity is due to few votes and recent upload, not inherent risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public git repository with no untrusted remote code execution; the low severity is due to few votes and recent upload, not inherent risk.

PKGBUILD

      1# Maintainer: Shahrukh Khalid <90670731+Shahrukhalid@users.noreply.github.com>
    
      2# Development snapshot: builds the latest git main from source, so installing
    
      3# this package always gives the newest code. For stable releases, use
    
      4# nexonic-download-manager-bin instead.
    
      5pkgname=nexonic-download-manager-git
    
      6pkgver=0.17.0.r0.g0000000
    
      7pkgrel=1
    
      8pkgdesc='Free, open-source download manager (latest git snapshot): up to 32 connections per file, pause and resume, queues and a scheduler, batch download, site grabber, browser extension and videos from YouTube and 1,000+ other sites'
    
      9arch=('x86_64' 'aarch64')
    
      10url='https://github.com/Shahrukhalid/nexonic-download-manager'
    
      11license=('MIT' 'Apache-2.0')
    
      12depends=('fontconfig' 'gcc-libs' 'glibc' 'hicolor-icon-theme' 'libice' 'libsm' 'libx11' 'openssl' 'zlib')
    
      13makedepends=('git' 'dotnet-sdk-8.0' 'python' 'cmake' 'ninja' 'pkgconf' 'nodejs' 'npm' 'ffmpeg')
    
      14optdepends=('libsecret: encrypted storage of passwords and cookies in the system keyring'
    
      15            'libnotify: desktop notifications'
    
      16            'xdg-utils: opening finished files and links')
    
      17provides=('nexonic-download-manager')
    
      18conflicts=('nexonic-download-manager' 'nexonic-download-manager-bin')
    
      19source=('git+https://github.com/Shahrukhalid/nexonic-download-manager.git')
    
      20sha256sums=('SKIP')
    
      21
    
      22pkgver() {
    
      23  cd "${srcdir}/nexonic-download-manager"
    
      24  local ver rev hash
    
      25  ver="$(tr -d '[:space:]' < VERSION)"
    
      26  rev="$(git rev-list --count HEAD)"
    
      27  hash="$(git rev-parse --short HEAD)"
    
      28  printf '%s.r%s.g%s' "${ver}" "${rev}" "${hash}"
    
      29}
    
      30
    
      31build() {
    
      32  cd "${srcdir}/nexonic-download-manager"
    
      33  # Video tools: fetch the pinned yt-dlp/qjs and reuse the system ffmpeg
    
      34  # (Arch's extra/ffmpeg) instead of compiling ffmpeg from source.
    
      35  bash scripts/fetch-video-tools.sh "linux-${CARCH}" "${srcdir}/tools-cache"
    
      36  mkdir -p "${srcdir}/ffmpeg-bin"
    
      37  ln -sf /usr/bin/ffmpeg "${srcdir}/ffmpeg-bin/ffmpeg"
    
      38  ln -sf /usr/bin/ffprobe "${srcdir}/ffmpeg-bin/ffprobe"
    
      39  local rid
    
      40  case "${CARCH}" in
    
      41    x86_64) rid=linux-x64 ;;
    
      42    aarch64) rid=linux-arm64 ;;
    
      43  esac
    
      44  python3 scripts/build-torrent-native.py "${rid}"
    
      45  bash "linux/packaging/build.sh" "${CARCH}" "${srcdir}/ffmpeg-bin" "${srcdir}/tools-cache"
    
      46}
    
      47
    
      48check() {
    
      49  cd "${srcdir}/nexonic-download-manager"
    
      50  local rid
    
      51  case "${CARCH}" in
    
      52    x86_64) rid=linux-x64 ;;
    
      53    aarch64) rid=linux-arm64 ;;
    
      54  esac
    
      55  dotnet test "linux/Tests/Tests.csproj" -p:NativeTorrentLibrary="${PWD}/.native-cache/sdk/${rid}/lib/libnexonic_torrent.so"
    
      56}
    
      57
    
      58package() {
    
      59  cd "${srcdir}/nexonic-download-manager"
    
      60  local out="build/linux-${CARCH}" app="${out}/app"
    
      61  install -dm755 "${pkgdir}/opt/nexonic-download-manager"
    
      62  cp -a "${app}/." "${pkgdir}/opt/nexonic-download-manager/"
    
      63  chmod 755 "${pkgdir}/opt/nexonic-download-manager/NexonicDownloadManager" \
    
      64            "${pkgdir}/opt/nexonic-download-manager/nexonic-host"
    
      65
    
      66  install -dm755 "${pkgdir}/usr/bin"
    
      67  printf '#!/bin/sh\nexec /opt/nexonic-download-manager/NexonicDownloadManager "$@"\n' > "${pkgdir}/usr/bin/nexonic-download-manager"
    
      68  printf '#!/bin/sh\nexec /opt/nexonic-download-manager/nexonic-host "$@"\n' > "${pkgdir}/usr/bin/ndm"
    
      69  chmod 755 "${pkgdir}/usr/bin/nexonic-download-manager" "${pkgdir}/usr/bin/ndm"
    
      70
    
      71  install -Dm644 linux/packaging/nexonic-download-manager.desktop \
    
      72    "${pkgdir}/usr/share/applications/nexonic-download-manager.desktop"
    
      73  local size
    
      74  for size in 16 24 32 48 64 128 256 512; do
    
      75    install -Dm644 "branding/universal/generated/linux/${size}.png" \
    
      76      "${pkgdir}/usr/share/icons/hicolor/${size}x${size}/apps/nexonic-download-manager.png"
    
      77  done
    
      78  install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      79  install -Dm644 LICENSE-APACHE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE-APACHE"
    
      80}
    
      81

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-06 08:11:27	Low	2