omniapi-desktop-bin

maintainer zaidejjo · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package installs a prebuilt binary from a non-whitelisted but project-owned GitHub release; while the source is not independently verifiable, it is not executed remotely and comes from the project's official repository, limiting risk to typical supply-chain concerns for binary packages.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 85%): The package installs a prebuilt binary from a non-whitelisted but project-owned GitHub release; while the source is not independently verifiable, it is not executed remotely and comes from the project's official repository, limiting risk to typical supply-chain concerns for binary packages.

PKGBUILD

      1# Maintainer: Zaid Ajo <zaidejjodev@gmail.com> [cite: 1]
    
      2
    
      3pkgname=omniapi-desktop-bin 
    
      4pkgver=1.0.10
    
      5pkgrel=1
    
      6pkgdesc="Blazing-fast API client — desktop GUI"
    
      7arch=('x86_64') 
    
      8url="https://github.com/zaidejjo/omniapi" 
    
      9license=('MIT') 
    
      10depends=(
    
      11  'gtk3' 
    
      12  'webkit2gtk-4.1' 
    
      13)
    
      14optdepends=('libappindicator-gtk3: tray icon') 
    
      15
    
      16# Tauri Linux Package — .deb
    
      17source=(
    
      18  "${url}/releases/download/v${pkgver}/omniapi_${pkgver}_amd64.deb"
    
      19  "https://raw.githubusercontent.com/zaidejjo/omniapi/v${pkgver}/README.md" 
    
      20  "https://raw.githubusercontent.com/zaidejjo/omniapi/v${pkgver}/LICENSE" 
    
      21)
    
      22sha256sums=('71622bfc9c0b3386c775bdc9a44bed1696abcc238e6c3526bd2b0c033818c2d4')
    
      23
    
      24package() {
    
      25  # 1. فك ضغط ملف الـ deb في مجلد البناء
    
      26  ar x "${srcdir}/omniapi_${pkgver}_amd64.deb"
    
      27
    
      28  # 2. استخراج المجلدات الجاهزة للنظام (/usr/bin, /usr/share ...)
    
      29  tar -xf data.tar.* -C "${pkgdir}"
    
      30
    
      31  # 3. تثبيت ملفات التوثيق والترخيص
    
      32  install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE" [cite: 5]
    
      33  install -Dm644 "${srcdir}/README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md" [cite: 5]
    
      34}

Changes since previous scan

--- PKGBUILD @ 2026-07-21 19:17
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,50 +1,34 @@
-# Maintainer: Zaid Ajo <zaidejjodev@gmail.com>
-# Template — replace zaidejjo and sha256sums before publishing.
+# Maintainer: Zaid Ajo <zaidejjodev@gmail.com> [cite: 1]
 
-pkgname=omniapi-desktop-bin
-pkgver=0.1.1
+pkgname=omniapi-desktop-bin 
+pkgver=1.0.10
 pkgrel=1
-pkgdesc="Blazing-fast API client — desktop GUI (prebuilt AppImage)"
-arch=('x86_64')
-url="https://github.com/zaidejjo/omniapi"
-license=('MIT')
+pkgdesc="Blazing-fast API client — desktop GUI"
+arch=('x86_64') 
+url="https://github.com/zaidejjo/omniapi" 
+license=('MIT') 
 depends=(
-  'fuse2'
-  'fuse2'
-  'gtk3'
-  'webkit2gtk-4.1'
+  'gtk3' 
+  'webkit2gtk-4.1' 
 )
-optdepends=('libappindicator-gtk3: tray icon')
+optdepends=('libappindicator-gtk3: tray icon') 
 
-# Tauri Linux AppImage — rename is `{productName}_{version}_amd64.AppImage`
-# e.g. OmniAPI_0.1.0_amd64.AppImage
-source=("${url}/releases/download/v${pkgver}/OmniAPI_${pkgver}_amd64.AppImage")
-sha256sums=('SKIP')   # TODO: replace after `makepkg -g`
+# Tauri Linux Package — .deb
+source=(
+  "${url}/releases/download/v${pkgver}/omniapi_${pkgver}_amd64.deb"
+  "https://raw.githubusercontent.com/zaidejjo/omniapi/v${pkgver}/README.md" 
+  "https://raw.githubusercontent.com/zaidejjo/omniapi/v${pkgver}/LICENSE" 
+)
+sha256sums=('71622bfc9c0b3386c775bdc9a44bed1696abcc238e6c3526bd2b0c033818c2d4')
 
 package() {
-  install -d "${pkgdir}/usr/bin"
+  # 1. فك ضغط ملف الـ deb في مجلد البناء
+  ar x "${srcdir}/omniapi_${pkgver}_amd64.deb"
 
-  # AppImage is a self-contained executable
-  install -Dm755 "${srcdir}/OmniAPI_${pkgver}_amd64.AppImage" \
-    "${pkgdir}/usr/bin/omniapi-desktop"
+  # 2. استخراج المجلدات الجاهزة للنظام (/usr/bin, /usr/share ...)
+  tar -xf data.tar.* -C "${pkgdir}"
 
-  # Desktop entry
-  install -d "${pkgdir}/usr/share/applications"
-  cat > "${pkgdir}/usr/share/applications/omniapi-desktop.desktop" << EOF
-[Desktop Entry]
-Name=OmniAPI
-Comment=Blazing-fast API client
-Exec=/usr/bin/omniapi-desktop
-Icon=omniapi-desktop
-Terminal=false
-Type=Application
-Categories=Development;Utility;
-StartupWMClass=omniapi-desktop
-EOF
-
-  # Extract icon from AppImage (it's an ISO mount or you can embed one)
-  # For now, provide a minimal placeholder. Replace with a real icon later.
-  install -d "${pkgdir}/usr/share/icons/hicolor/512x512/apps"
-  # If the AppImage was extracted already, you can grab its icon from there.
+  # 3. تثبيت ملفات التوثيق والترخيص
+  install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE" [cite: 5]
+  install -Dm644 "${srcdir}/README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md" [cite: 5]
 }
-

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 21:18:19	LOW	2
2026-07-21 19:17:41	MEDIUM	2
2026-07-21 17:17:32	MEDIUM	2