nextcloud-native-bin
maintainer Felitendo
· 0 votes
· scanned 2026-08-18 09:39:35.720982
LOW
View on AUR ↗
Why flagged
The package installs a prebuilt binary from an official GitHub release of the upstream project, which is normal for AUR packages; the host is not whitelisted but is a trusted forge, and the binary is from the project's own release infrastructure with a verifiable checksum.
Triggered rules
LOW
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
LOW
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from an official GitHub release of the upstream project, which is normal for AUR packages; the host is not whitelisted but is a trusted forge, and the binary is from the project's own release infrastructure with a verifiable checksum.
PKGBUILD
1
# Maintainer: Felitendo
2
# This PKGBUILD is updated automatically:
3
# https://github.com/Felitendo/PKGBUILDS
4
5
pkgname=nextcloud-native-bin
6
pkgver=0.1.0alpha.2
7
pkgrel=1
8
pkgdesc="Adaptive native client for Nextcloud files, media and apps (upstream binary)"
9
arch=('x86_64')
10
url="https://nc-native.obiente.dev"
11
license=('AGPL-3.0-or-later')
12
# jpackage bundles its own Java runtime, so these are the shared libraries the
13
# upstream .deb declares plus libsecret, whose secret-tool the client calls to
14
# store account credentials in the Secret Service.
15
depends=('alsa-lib' 'brotli' 'bzip2' 'expat' 'fontconfig' 'freetype2'
16
'gcc-libs' 'glibc' 'hicolor-icon-theme' 'libbsd' 'libglvnd' 'libmd'
17
'libpng' 'libsecret' 'libx11' 'libxau' 'libxcb' 'libxdmcp' 'libxext'
18
'libxi' 'libxrender' 'libxtst' 'xdg-utils' 'zlib')
19
optdepends=('gnome-keyring: Secret Service provider for stored accounts'
20
'kwallet: Secret Service provider for stored accounts on Plasma'
21
'fuse2: mount an account as a virtual file system')
22
provides=('nextcloud-native')
23
conflicts=('nextcloud-native')
24
options=('!strip' '!debug')
25
# Upstream has no stable release yet: every release is a prerelease, and the
26
# repository also carries per-build nightly-* and rolling channel-* releases.
27
# Only the versioned tags are packaged, and their asset names embed a build
28
# number that cannot be derived from pkgver - both are refreshed automatically.
29
_tag="v0.1.0-alpha.2"
30
_asset="nextcloudnative_1.0.3822_amd64.deb"
31
source=("${pkgname}-${pkgver}.deb::https://github.com/Obiente/nc-native/releases/download/${_tag}/${_asset}")
32
noextract=("${pkgname}-${pkgver}.deb")
33
sha256sums=('df8e3e616c79c4ce3f7597fa9b88c188a956475f2af4128bc7a70692ebf39325')
34
35
package() {
36
# jpackage app image (bundled JRE) in /opt plus the desktop entry, icon and
37
# AppStream metadata upstream adds to the .deb
38
bsdtar -xOf "$srcdir/${pkgname}-${pkgver}.deb" 'data.tar.*' \
39
| bsdtar -xpf - -C "$pkgdir" --exclude './usr/share/doc' ./opt ./usr
40
41
# the launcher resolves its own directory through /proc/self/exe, so a
42
# symlink into /usr/bin keeps the app image self-contained
43
install -d "$pkgdir/usr/bin"
44
ln -s /opt/nextcloudnative/bin/NextcloudNative "$pkgdir/usr/bin/nextcloud-native"
45
46
install -Dm644 "$pkgdir/opt/nextcloudnative/share/doc/copyright" \
47
"$pkgdir/usr/share/licenses/$pkgname/LICENSE"
48
49
# The in-app updater only engages where dpkg or rpm reports the package as
50
# installed; on Arch it stays inert and updates come through pacman.
51
}
52
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-18 09:39:35 | LOW | 2 |