nextendo-citron-bin

LOW

maintainer enzomtp 0 votes scanned 2026-09-20 01:31:57.835043

View on AUR

Why flagged

The package downloads prebuilt binaries from a GitHub release tied to a specific commit and includes fixed checksums; while the source is not locally built, the use of verifiable, commit-specific artifacts from the project's own repository reduces risk, making it a typical AUR binary package with standard supply-chain assumptions.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from a GitHub release tied to a specific commit and includes fixed checksums; while the source is not locally built, the use of verifiable, commit-specific artifacts from the project's own repository reduces risk, making it a typical AUR binary package with standard supply-chain assumptions.

PKGBUILD

      1pkgname=nextendo-citron-bin
    
      2_commit=813b32e8b
    
      3pkgver=20260919.r${_commit}
    
      4pkgrel=1
    
      5pkgdesc="Nintendo Switch emulator (Citron nightly build from NextendoNetwork)"
    
      6arch=('x86_64' 'aarch64')
    
      7url="https://github.com/NextendoNetwork/citron-nextendo"
    
      8license=('GPL-2.0-or-later')
    
      9depends=(
    
      10  'glibc'
    
      11  'zlib'
    
      12  'fuse2'
    
      13  'hicolor-icon-theme'
    
      14)
    
      15optdepends=(
    
      16  'vulkan-driver: Vulkan graphics backend support'
    
      17  'libva: Hardware video decoding support'
    
      18)
    
      19provides=('citron')
    
      20conflicts=('citron' 'citron-neo' 'citron-neo-git' 'citron-neo-nightly-bin')
    
      21options=('!strip')
    
      22
    
      23_repo="NextendoNetwork/citron-nextendo"
    
      24_release_tag="nightly-linux"
    
      25
    
      26source_x86_64=(
    
      27  "${pkgname}-${_commit}-x86_64.tar.zst::https://github.com/${_repo}/releases/download/${_release_tag}/citron_nightly-${_commit}-linux-x86_64-use-nopgo.tar.zst"
    
      28)
    
      29sha256sums_x86_64=('dc5b0192471b03547b7a72e3bba4e1a38b4901f57bd9c43b63be23aa053008d3')
    
      30
    
      31source_aarch64=(
    
      32  "${pkgname}-${_commit}-aarch64.tar.zst::https://github.com/${_repo}/releases/download/${_release_tag}/citron_nightly-${_commit}-linux-aarch64-use-nopgo.tar.zst"
    
      33)
    
      34sha256sums_aarch64=('706d6916f91fca3362a9b20c41dc1e906d8373264a768671251e5038daa9227c')
    
      35
    
      36package() {
    
      37  local _installdir="${pkgdir}/opt/nextendo-citron"
    
      38
    
      39  # Install payload
    
      40  install -dm755 "${_installdir}"
    
      41  cp -a "${srcdir}"/{bin,lib,shared,sharun,AppRun*,org.citron_emu.citron.*} "${_installdir}/"
    
      42
    
      43  # Install binary symlinks in PATH
    
      44  install -dm755 "${pkgdir}/usr/bin"
    
      45  ln -sf "/opt/nextendo-citron/AppRun" "${pkgdir}/usr/bin/citron"
    
      46  ln -sf "/opt/nextendo-citron/AppRun" "${pkgdir}/usr/bin/nextendo-citron"
    
      47
    
      48  # Install Desktop file with proper Exec path
    
      49  install -Dm644 "${srcdir}/org.citron_emu.citron.desktop" \
    
      50    "${pkgdir}/usr/share/applications/org.citron_emu.citron.desktop"
    
      51  sed -i 's|^Exec=.*|Exec=/usr/bin/citron %f|' \
    
      52    "${pkgdir}/usr/share/applications/org.citron_emu.citron.desktop"
    
      53
    
      54  # Install icon to hicolor theme directory
    
      55  install -Dm644 "${srcdir}/org.citron_emu.citron.png" \
    
      56    "${pkgdir}/usr/share/icons/hicolor/256x256/apps/org.citron_emu.citron.png"
    
      57}
    
      58

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-20 01:31:57	Low	2