novabrowser
LOW
maintainer novaturient
0 votes
scanned 2026-10-20 11:27:57.544889
Why flagged
Package builds from source and downloads a prebuilt CEF library from the project's own GitHub releases; while the library is not from a whitelisted host, it is part of the project's official release and used in a normal build process, posing low risk.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package builds from source and downloads a prebuilt CEF library from the project's own GitHub releases; while the library is not from a whitelisted host, it is part of the project's official release and used in a normal build process, posing low risk.
PKGBUILD
1
# Maintainer: Novaturiente
2
pkgname=novabrowser
3
pkgver=0.1.2
4
pkgrel=1
5
pkgdesc="AVX2-optimized keyboard-driven web browser on Chromium (CEF), configured in TypeScript"
6
arch=(x86_64)
7
url="https://github.com/Novaturiente/nova-browser"
8
license=(GPL-3.0-or-later)
9
# libcef.so's runtime deps (same set Arch's cef/electron packages pull in)
10
depends=(sqlite gtk3 nss alsa-lib libxss libxkbcommon libdrm mesa libcups at-spi2-core)
11
makedepends=(cargo cmake ninja)
12
optdepends=('wl-clipboard: primary selection and paste on Wayland'
13
'xclip: primary selection and paste on X11'
14
'xdg-utils: download-open and default-browser setup'
15
'aria2: faster downloads (8 connections), resume after restart, magnet links and torrents'
16
'rbw: Bitwarden passwords'
17
'pass: password-store passwords')
18
conflicts=(novabrowser-bin novabrowser-git)
19
# libcef.so ships with debug info; strip keeps ~280 MB
20
options=(strip !lto !debug)
21
# Our CEF build (packaging/cef-patches: H.264/AAC, privacy patch, PartitionAlloc), x86-64-v3
22
_cef=cef-154.0.34-novabrowser-x86_64-v3
23
source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz"
24
"$_cef.tar.zst::$url/releases/download/cef-154.0.34-nova1/$_cef.tar.zst")
25
sha256sums=('8c96dff1c52ffc9d62396c020458c223ff252b4dc140d0a7b2e9b1233c89d51e'
26
'a88ace6b3f2857e28a9ca9446c041a5cd729a15aa2e838caa7e3d8f9906e285f')
27
_src=nova-browser-$pkgver
28
29
prepare() {
30
/lib/ld-linux-x86-64.so.2 --help 2>/dev/null | grep -q 'x86-64-v3 (supported' || {
31
error "novabrowser needs an x86-64-v3 CPU (AVX2: Intel Haswell / AMD Excavator or newer)"
32
return 1
33
}
34
cd "$_src"
35
export CARGO_HOME="$srcdir/cargo-home"
36
cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
37
}
38
39
_env() {
40
export CARGO_HOME="$srcdir/cargo-home" CEF_PATH="$srcdir/cef-own"
41
export RUSTFLAGS="${RUSTFLAGS:-} --remap-path-prefix=$srcdir=/build" # no build paths in panic messages
42
export CFLAGS="${CFLAGS:-} -ffile-prefix-map=$srcdir=/build" # QuickJS C sources use __FILE__
43
}
44
45
build() {
46
cd "$_src"
47
_env
48
cargo build --release --frozen
49
}
50
51
check() {
52
cd "$_src"
53
_env
54
cargo test --release --frozen
55
}
56
57
package() {
58
cd "$_src"
59
local lib="$pkgdir/usr/lib/novabrowser" r=target/release
60
install -Dm755 $r/novabrowser "$lib/novabrowser"
61
install -m755 $r/libcef.so $r/libvk_swiftshader.so $r/libvulkan.so.1 "$lib/"
62
install -m644 $r/{icudtl.dat,v8_context_snapshot.bin,resources.pak,chrome_100_percent.pak,chrome_200_percent.pak,vk_swiftshader_icd.json} "$lib/"
63
cp -r $r/locales "$lib/"
64
chmod 644 "$lib"/locales/*
65
# binary has RUNPATH $ORIGIN, so a symlink is the whole launcher
66
install -d "$pkgdir/usr/bin"
67
ln -s /usr/lib/novabrowser/novabrowser "$pkgdir/usr/bin/novabrowser"
68
install -Dm644 packaging/novabrowser.desktop "$pkgdir/usr/share/applications/novabrowser.desktop"
69
install -Dm644 packaging/novabrowser.svg "$pkgdir/usr/share/icons/hicolor/scalable/apps/novabrowser.svg"
70
for s in 16 32 48 64 128 256 512; do
71
install -Dm644 packaging/icons/novabrowser-$s.png "$pkgdir/usr/share/icons/hicolor/${s}x${s}/apps/novabrowser.png"
72
done
73
install -Dm644 README.md "$pkgdir/usr/share/doc/novabrowser/README.md"
74
install -Dm644 docs/*.md -t "$pkgdir/usr/share/doc/novabrowser/docs/"
75
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/novabrowser/LICENSE"
76
install -Dm644 $r/CREDITS.html "$pkgdir/usr/share/licenses/novabrowser/CEF-CREDITS.html"
77
}
78
Changes since previous scan
--- PKGBUILD @ 2026-10-15 00:28+++ PKGBUILD @ 2026-10-20 11:27@@ -1,6 +1,6 @@ # Maintainer: Novaturiente pkgname=novabrowser-pkgver=0.1.1+pkgver=0.1.2 pkgrel=1 pkgdesc="AVX2-optimized keyboard-driven web browser on Chromium (CEF), configured in TypeScript" arch=(x86_64)@@ -22,7 +22,7 @@ _cef=cef-154.0.34-novabrowser-x86_64-v3 source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz" "$_cef.tar.zst::$url/releases/download/cef-154.0.34-nova1/$_cef.tar.zst")-sha256sums=('071f1e8134ede713343f2e9ace8122b96d1715ae51a479565ecfa30fc69c85e9'+sha256sums=('8c96dff1c52ffc9d62396c020458c223ff252b4dc140d0a7b2e9b1233c89d51e' 'a88ace6b3f2857e28a9ca9446c041a5cd729a15aa2e838caa7e3d8f9906e285f') _src=nova-browser-$pkgver Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-20 11:27:57 | Low | 2 |
| 2026-10-15 00:28:05 | Clean | 2 |
| 2026-10-14 11:19:54 | Low | 1 |
| 2026-10-14 09:19:50 | Low | 1 |
| 2026-10-14 00:06:47 | Clean | 2 |
| 2026-10-13 07:16:10 | Low | 1 |