novabrowser-bin

LOW

maintainer novaturient 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

Package builds from a prebuilt release on the project's official GitHub repository, which is a normal AUR practice; the low severity from the static rule (few votes, recent upload) does not indicate active malice or supply-chain compromise.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package builds from a prebuilt release on the project's official GitHub repository, which is a normal AUR practice; the low severity from the static rule (few votes, recent upload) does not indicate active malice or supply-chain compromise.

PKGBUILD

      1# Maintainer: Novaturiente
    
      2pkgname=novabrowser-bin
    
      3pkgver=0.1.1
    
      4pkgrel=1
    
      5pkgdesc="AVX2-optimized keyboard-driven web browser on Chromium (CEF), configured in TypeScript (prebuilt)"
    
      6arch=(x86_64)
    
      7url="https://github.com/Novaturiente/nova-browser"
    
      8license=(GPL-3.0-or-later)
    
      9depends=(sqlite gtk3 nss alsa-lib libxss libxkbcommon libdrm mesa libcups at-spi2-core)
    
      10optdepends=('wl-clipboard: primary selection and paste on Wayland'
    
      11            'xclip: primary selection and paste on X11'
    
      12            'xdg-utils: download-open and default-browser setup'
    
      13            'aria2: faster downloads (8 connections), resume after restart, magnet links and torrents'
    
      14            'rbw: Bitwarden passwords'
    
      15            'pass: password-store passwords')
    
      16provides=(novabrowser)
    
      17conflicts=(novabrowser novabrowser-git)
    
      18options=(!strip !debug)
    
      19# The /usr tree of the `novabrowser` package, built by packaging/release.sh
    
      20source=("novabrowser-$pkgver-x86_64.tar.zst::$url/releases/download/v$pkgver/novabrowser-$pkgver-x86_64.tar.zst")
    
      21sha256sums=('55282a78966bcb8f1d7c903ecbf1e197a77113918c395ceda13ec8e363d9f832')
    
      22
    
      23prepare() {
    
      24  /lib/ld-linux-x86-64.so.2 --help 2>/dev/null | grep -q 'x86-64-v3 (supported' || {
    
      25    error "novabrowser needs an x86-64-v3 CPU (AVX2: Intel Haswell / AMD Excavator or newer)"
    
      26    return 1
    
      27  }
    
      28}
    
      29
    
      30package() {
    
      31  cp -a "$srcdir/usr" "$pkgdir/"
    
      32}
    
      33

Changes since previous scan

--- PKGBUILD @ 2026-10-14 00:06
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,6 +1,6 @@
 # Maintainer: Novaturiente
 pkgname=novabrowser-bin
-pkgver=0.1.0
+pkgver=0.1.1
 pkgrel=1
 pkgdesc="AVX2-optimized keyboard-driven web browser on Chromium (CEF), configured in TypeScript (prebuilt)"
 arch=(x86_64)
@@ -18,7 +18,7 @@
 options=(!strip !debug)
 # The /usr tree of the `novabrowser` package, built by packaging/release.sh
 source=("novabrowser-$pkgver-x86_64.tar.zst::$url/releases/download/v$pkgver/novabrowser-$pkgver-x86_64.tar.zst")
-sha256sums=('9fa1d05a4d45aa6721d8c953bebe631c348b4d6fe032890381dfe94b0c343f26')
+sha256sums=('55282a78966bcb8f1d7c903ecbf1e197a77113918c395ceda13ec8e363d9f832')
 
 prepare() {
   /lib/ld-linux-x86-64.so.2 --help 2>/dev/null | grep -q 'x86-64-v3 (supported' || {

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 11:19:54	Low	2
2026-10-14 09:19:50	Low	1
2026-10-14 00:06:47	Low	2
2026-10-13 07:16:10	Low	2