niri-tracker-git
LOW
maintainer Qiumix
0 votes
scanned 2026-11-05 12:09:09.970845
Why flagged
The package builds from a public git repository with SKIP'd checksum, but it is a development build of a legitimate project; the source is transparent and the build process is standard for AUR, with no evidence of malicious behavior.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public git repository with SKIP'd checksum, but it is a development build of a legitimate project; the source is transparent and the build process is standard for AUR, with no evidence of malicious behavior.
PKGBUILD
1
# Maintainer: Qiumix <j487428862@gmail.com>
2
#
3
# Development build from the tip of the default branch. `pkgver()` derives the
4
# version from git, so this is rebuilt on every commit.
5
6
pkgname=niri-tracker-git
7
_pkgname=niri-tracker
8
pkgver=0.1.1.r10.g44d411d
9
pkgrel=1
10
pkgdesc="Screen time tracking for the niri Wayland compositor"
11
arch=('x86_64' 'aarch64')
12
url="https://github.com/Qiumix/niri-tracker"
13
license=('MIT')
14
depends=('glibc')
15
makedepends=('cargo' 'git')
16
checkdepends=()
17
provides=("$_pkgname")
18
conflicts=("$_pkgname" "${_pkgname}-bin")
19
options=('!lto')
20
source=("git+${url}.git")
21
sha256sums=('SKIP')
22
23
pkgver() {
24
cd "$srcdir/$_pkgname"
25
printf '%s.r%s.g%s' \
26
"$(grep -m1 '^version' Cargo.toml | cut -d'"' -f2)" \
27
"$(git rev-list --count HEAD)" \
28
"$(git rev-parse --short HEAD)"
29
}
30
31
prepare() {
32
cd "$srcdir/$_pkgname"
33
# Fetched here so the build phase needs no network. This is also what the
34
# AUR expects: downloads happen in prepare/build, not in package.
35
cargo fetch --locked
36
}
37
38
build() {
39
cd "$srcdir/$_pkgname"
40
export CARGO_PROFILE_RELEASE_STRIP=true
41
export CARGO_PROFILE_RELEASE_CODEGEN_UNITS=1
42
cargo build --release --locked --frozen
43
}
44
45
check() {
46
cd "$srcdir/$_pkgname"
47
cargo test --release --locked --frozen
48
}
49
50
package() {
51
cd "$srcdir/$_pkgname"
52
53
install -Dm755 "target/release/$_pkgname" "$pkgdir/usr/bin/$_pkgname"
54
install -Dm644 packaging/niri-tracker.service \
55
"$pkgdir/usr/lib/systemd/user/niri-tracker.service"
56
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
57
install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
58
install -Dm644 docs/design.md "$pkgdir/usr/share/doc/$pkgname/design.md"
59
install -Dm644 docs/protocol.md "$pkgdir/usr/share/doc/$pkgname/protocol.md"
60
61
# The schema ships next to the binary so that `niri-tracker config init` can
62
# write a `#:schema` line pointing at a path that really exists.
63
install -d "$pkgdir/usr/share/niri-tracker"
64
"$pkgdir/usr/bin/$_pkgname" schema > "$pkgdir/usr/share/niri-tracker/schema.json"
65
66
# Completions are generated from the binary just installed, so they can never
67
# describe a different set of flags than `--help` shows.
68
install -d "$srcdir/completions"
69
local shell
70
for shell in bash zsh fish; do
71
"$pkgdir/usr/bin/$_pkgname" completions "$shell" > "$srcdir/completions/$shell"
72
done
73
install -Dm644 "$srcdir/completions/bash" \
74
"$pkgdir/usr/share/bash-completion/completions/$_pkgname"
75
install -Dm644 "$srcdir/completions/zsh" \
76
"$pkgdir/usr/share/zsh/site-functions/_$_pkgname"
77
install -Dm644 "$srcdir/completions/fish" \
78
"$pkgdir/usr/share/fish/vendor_completions.d/$_pkgname.fish"
79
}
80
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-05 12:09:09 | Low | 2 |