omachat

LOW

maintainer HowieDuhzit 0 votes scanned 2026-09-28 07:20:27.447771

View on AUR

Why flagged

The package builds from a public git repository with a SKIP'd checksum, but sources are from the project's official GitHub; the flagged low votes and recent upload are quality concerns, not security risks, as no untrusted executable payloads or malicious patterns are present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public git repository with a SKIP'd checksum, but sources are from the project's official GitHub; the flagged low votes and recent upload are quality concerns, not security risks, as no untrusted executable payloads or malicious patterns are present.

PKGBUILD

      1# Maintainer: HowieDuhzit <contact@howieduhzit.best>
    
      2#
    
      3# Build from the published repository:   makepkg -si
    
      4# Build the working tree you are in:      OMACHAT_SRC=$PWD/../.. makepkg -si
    
      5#
    
      6# The Omarchy shell plugin is not part of this package; it is installed and
    
      7# removed independently with `omarchy plugin add|remove` (see README).
    
      8
    
      9pkgname=omachat
    
      10pkgver=0.2.0
    
      11pkgrel=1
    
      12pkgdesc="Native voice, text and screen chat for Omarchy and Linux (client, daemon, CLI and self-hostable server)"
    
      13arch=('x86_64' 'aarch64')
    
      14url="https://github.com/Sleepy-Studio/OmaChat"
    
      15license=('MIT')
    
      16depends=('qt6-base' 'qt6-declarative' 'qt6-svg' 'qt6-wayland' 'qtkeychain-qt6' 'protobuf' 'abseil-cpp'
    
      17         'libsodium' 'opus' 'libpipewire' 'openssl' 'tomlplusplus' 'rnnoise' 'ffmpeg' 'hicolor-icon-theme')
    
      18makedepends=('cmake' 'ninja' 'git' 'gtest')
    
      19optdepends=('gnome-keyring: store session tokens in the Secret Service keyring'
    
      20            'kwallet: alternative Secret Service keyring'
    
      21            'xdg-desktop-portal: screen sharing, with a backend such as xdg-desktop-portal-hyprland')
    
      22backup=()
    
      23source=("git+${url}.git#tag=v${pkgver}")
    
      24sha256sums=('SKIP')
    
      25if [[ -n ${OMACHAT_SRC:-} ]]; then
    
      26    source=()
    
      27    sha256sums=()
    
      28fi
    
      29
    
      30_src() {
    
      31    if [[ -n ${OMACHAT_SRC:-} ]]; then
    
      32        echo "${OMACHAT_SRC}"
    
      33    else
    
      34        echo "${srcdir}/OmaChat"
    
      35    fi
    
      36}
    
      37
    
      38build() {
    
      39    cmake -S "$(_src)" -B build -G Ninja \
    
      40        -DCMAKE_BUILD_TYPE=Release \
    
      41        -DCMAKE_INSTALL_PREFIX=/usr \
    
      42        -DOMACHAT_BUILD_TESTS=ON
    
      43    cmake --build build
    
      44}
    
      45
    
      46check() {
    
      47    # Hardware-free suites; integration tests use loopback TLS/UDP only.
    
      48    QT_QPA_PLATFORM=offscreen ctest --test-dir build -L 'unit|fuzz|integration' --output-on-failure
    
      49}
    
      50
    
      51package() {
    
      52    DESTDIR="${pkgdir}" cmake --install build
    
      53    install -Dm644 "$(_src)/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      54    install -Dm644 "$(_src)/README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      55}
    
      56

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-28 07:20:27	Low	2