nexus-aur-bin

MEDIUM

maintainer fogliadonato07 0 votes scanned 2026-09-05 18:00:42.527733

View on AUR

Why flagged

The package installs a prebuilt Flutter binary from a GitHub release with an unverified checksum (SKIP), representing a supply-chain risk if the source were compromised.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 85%): The package installs a prebuilt Flutter binary from a GitHub release with an unverified checksum (SKIP), representing a supply-chain risk if the source were compromised.

PKGBUILD

      1# Maintainer: Donato Foglia <fogliadonato2@gmail.com>
    
      2pkgname=nexus-aur-bin
    
      3pkgver=1.0.2
    
      4pkgrel=1
    
      5pkgdesc="Un gestore di pacchetti grafico per Arch Linux e AUR scritto in Flutter"
    
      6arch=('x86_64')
    
      7url="https://github.com/IlNinjaDiBattipaglia/Nexus-AUR"
    
      8license=('MIT')
    
      9depends=('gtk3' 'glib2' 'util-linux' 'yay')
    
      10provides=('nexus-aur')
    
      11conflicts=('nexus-aur')
    
      12source=("$pkgname-$pkgver.tar.gz::https://github.com/IlNinjaDiBattipaglia/Nexus-AUR/releases/download/v$pkgver/nexus-aur-linux-x86_64.tar.gz")
    
      13sha256sums=('SKIP')
    
      14
    
      15package() {
    
      16    install -dm755 "$pkgdir/usr/bin"
    
      17    install -dm755 "$pkgdir/opt/nexus_aur"
    
      18    install -dm755 "$pkgdir/usr/share/applications"
    
      19    install -dm755 "$pkgdir/usr/share/icons/hicolor/512x512/apps"
    
      20
    
      21    # Copia tutto il bundle Flutter in /opt
    
      22    cp -r * "$pkgdir/opt/nexus_aur/"
    
      23
    
      24    # Crea il symlink per l'eseguibile
    
      25    ln -s /opt/nexus_aur/nexus_aur "$pkgdir/usr/bin/nexus-aur"
    
      26
    
      27    # Sposta il file .desktop e l'icona nelle cartelle di sistema correnti
    
      28    if [ -f "$pkgdir/opt/nexus_aur/share/applications/nexus-aur.desktop" ]; then
    
      29        mv "$pkgdir/opt/nexus_aur/share/applications/nexus-aur.desktop" "$pkgdir/usr/share/applications/"
    
      30    fi
    
      31    if [ -f "$pkgdir/opt/nexus_aur/share/icons/hicolor/512x512/apps/nexus-aur.png" ]; then
    
      32        mv "$pkgdir/opt/nexus_aur/share/icons/hicolor/512x512/apps/nexus-aur.png" "$pkgdir/usr/share/icons/hicolor/512x512/apps/"
    
      33    fi
    
      34
    
      35    # Rimuove la cartella share ridondante da /opt
    
      36    rm -rf "$pkgdir/opt/nexus_aur/share"
    
      37}
    
      38

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-05 18:00:42	Medium	2