omasnap-bin

LOW
maintainer polr 0 votes scanned 2026-08-27 11:32:31.656570
View on AUR
Why flagged

The package installs a prebuilt binary from the project's official GitHub releases, which is a normal distribution method for some projects; the source is verifiable and the binary is not obfuscated or executed remotely, limiting supply-chain risk to the project's own release integrity.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal distribution method for some projects; the source is verifiable and the binary is not obfuscated or executed remotely, limiting supply-chain risk to the project's own release integrity.

PKGBUILD

1# Maintainer: Pol Rivero <aur at polrivero dot com>
2pkgname=omasnap-bin
3_pkgname=omasnap
4pkgver=1.20.1
5pkgrel=1
6pkgdesc="Native Wayland screenshot and annotation editor for Omarchy and Hyprland (prebuilt binary)"
7arch=('x86_64')
8url="https://github.com/tobi/omasnap"
9license=('MIT')
10provides=("${_pkgname}=${pkgver}")
11conflicts=("${_pkgname}")
12depends=(
13 'glibc'
14 'hyprland'
15 'layer-shell-qt'
16 'libgcc'
17 'libglvnd'
18 'libstdc++'
19 'qt6-base'
20 'wayland'
21 'wl-clipboard'
22)
23optdepends=(
24 'tesseract: extract text from screenshots (OCR)'
25 'tesseract-data-eng: English training data for OCR'
26)
27# Upstream ships a prebuilt, unstripped binary; leave it exactly as released.
28options=('!strip' '!debug')
29source=(
30 "${_pkgname}-${pkgver}-archlinux-x86_64.tar.gz::${url}/releases/download/v${pkgver}/${_pkgname}-${pkgver}-archlinux-x86_64.tar.gz"
31 "LICENSE-${pkgver}::https://raw.githubusercontent.com/tobi/omasnap/v${pkgver}/LICENSE"
32)
33
34sha256sums=('8890b45aad71728ec7ebaad4bdaf8cdc59bd2a5d7e14b749973e4bb5f544a366'
35 'SKIP')
36
37package() {
38 # The release tarball is already a /usr filesystem tree.
39 install -Dm755 "${srcdir}/usr/bin/${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
40
41 install -Dm644 "${srcdir}/usr/share/applications/${_pkgname}.desktop" \
42 -t "${pkgdir}/usr/share/applications"
43
44 install -Dm644 "${srcdir}/LICENSE-${pkgver}" \
45 "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
46
47 install -Dm644 "${srcdir}/usr/share/licenses/${_pkgname}/"*.txt \
48 -t "${pkgdir}/usr/share/licenses/${pkgname}"
49}
50

Scan history

Scanned at (UTC)SeverityRules
2026-08-27 11:32:31 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion