omni-shell

maintainer radumaco · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged Package builds from a plausibly project-owned but non-whitelisted source host; however, it installs only QML/JS files and a script for local execution, posing no remote code execution or supply-chain risk.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package builds from a plausibly project-owned but non-whitelisted source host; however, it installs only QML/JS files and a script for local execution, posing no remote code execution or supply-chain risk.

PKGBUILD

      1# Maintainer: Radu Macocian <radu@macocian.com>
    
      2pkgname=omni-shell
    
      3pkgver=0.0.1
    
      4pkgrel=1
    
      5pkgdesc="Quickshell status bar, notification center and control center for Hyprland, with weather, clipboard history and an integrated omni-launcher."
    
      6arch=('any')
    
      7url="https://git.estatecloud.org/radumaco/omni-shell"
    
      8license=('GPL-3.0-or-later')
    
      9depends=('quickshell' 'qt6-declarative' 'omni-launcher' 'bash' 'curl' 'python'
    
      10         'cliphist' 'wl-clipboard' 'libpulse' 'brightnessctl' 'bluez-utils'
    
      11         'networkmanager' 'libnotify')
    
      12optdepends=('hyprland: workspaces module and layer rules'
    
      13            'satty: screenshot notification actions'
    
      14            'wifitui: TUI handoff for enterprise Wi-Fi networks'
    
      15            'bluetui: TUI handoff for Bluetooth devices needing a passkey')
    
      16source=("$pkgname-$pkgver.tar.gz::$url/archive/v$pkgver.tar.gz")
    
      17sha256sums=('4e71205415f6831d1e335a27250e49a2d9b0ce3e32173e7a2470f5d4fdc5b383')
    
      18
    
      19package() {
    
      20  cd "$srcdir/$pkgname"
    
      21
    
      22  # Quickshell config tree — shell.qml plus the singletons, panels and
    
      23  # per-widget modules it loads relative to itself.
    
      24  install -dm755 "$pkgdir/usr/share/$pkgname"
    
      25  install -m644 *.qml "$pkgdir/usr/share/$pkgname/"
    
      26  install -m644 *.js "$pkgdir/usr/share/$pkgname/"
    
      27
    
      28  install -dm755 "$pkgdir/usr/share/$pkgname/modules"
    
      29  install -m644 modules/*.qml "$pkgdir/usr/share/$pkgname/modules/"
    
      30
    
      31  install -Dm755 bin/omni-shell "$pkgdir/usr/bin/omni-shell"
    
      32
    
      33  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      34  install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      35}
    
      36

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 00:03:41	LOW	2
2026-08-13 00:17:07	LOW	2
2026-08-12 00:27:08	LOW	2
2026-08-11 13:21:13	LOW	2