openresearch
LOW
maintainer victorqueirozg
0 votes
scanned 2026-10-08 18:09:39.829306
Why flagged
The package builds from source and includes prebuilt binaries from the project's official GitHub releases; while the host is not whitelisted, the sources are verifiable via checksums and the build process is transparent, posing minimal risk.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source and includes prebuilt binaries from the project's official GitHub releases; while the host is not whitelisted, the sources are verifiable via checksums and the build process is transparent, posing minimal risk.
PKGBUILD
1
# Maintainer: Victor Queiroz <victorcqueirozg at gmail dot com>
2
3
pkgbase=openresearch
4
pkgname=(openresearch openresearch-cli openresearch-bin openresearch-cli-bin)
5
pkgver=0.2.17
6
pkgrel=1
7
pkgdesc="Automated research with coding agents"
8
arch=("x86_64" "aarch64")
9
url="https://github.com/alphaXiv/OpenResearch"
10
license=("MIT")
11
makedepends=("rust" "nodejs" "pnpm>=11" "pkgconf" "gtk3" "webkit2gtk-4.1" "sqlite" "7zip" "patchelf")
12
# Rust's LLVM linker cannot consume GCC LTO objects from ring's C code.
13
options=("!debug" "!lto")
14
_release_url="$url/releases/download/v$pkgver"
15
_source_dir="openresearch-cli-$pkgver"
16
source=("openresearch-$pkgver.tar.gz::$_release_url/source.tar.gz")
17
sha256sums=("5a5d50bf61a7aa451ea31c877370b5f69a65c2c4f193da622da18115eabc3771")
18
source_x86_64=(
19
"OpenResearch-$pkgver-x86_64.AppImage::$_release_url/OpenResearch-x86_64.AppImage"
20
"openresearch-cli-$pkgver-x86_64.tar.xz::$_release_url/openresearch-cli-x86_64-unknown-linux-musl.tar.xz"
21
)
22
sha256sums_x86_64=(
23
"957348df22aaa302b264323fdfa091326bf8f939039e5070f877f555177b1aaa"
24
"3eaeadfb6feee68b8e7c65de2f930b015d45d23b4be52842773ca18cedbf528d"
25
)
26
source_aarch64=(
27
"OpenResearch-$pkgver-aarch64.AppImage::$_release_url/OpenResearch-aarch64.AppImage"
28
"openresearch-cli-$pkgver-aarch64.tar.xz::$_release_url/openresearch-cli-aarch64-unknown-linux-musl.tar.xz"
29
)
30
sha256sums_aarch64=(
31
"b8fa5fc9b002d75d8cfe3d13e89e8a2dde0deafb26e0ba4b587345360eaa773d"
32
"76a5ac4c8deeba3b3a1acc71ea764f53fcf9532b548e92255c76e8e5930acc3b"
33
)
34
noextract=("OpenResearch-$pkgver-x86_64.AppImage" "OpenResearch-$pkgver-aarch64.AppImage")
35
36
_prepare_appimage() {
37
# 7zip extracts either architecture without executing downloaded code.
38
7z x -y "OpenResearch-$pkgver-$CARCH.AppImage" -o"$srcdir/appimage"
39
# The extracted app belongs to pacman, even if launched from another AppImage.
40
sed -i '/^set -e$/a unset APPIMAGE APPDIR' "$srcdir/appimage/AppRun.wrapped"
41
# Upstream's nested GTK modules look beside themselves, outside usr/lib.
42
# Resolve their dependencies from the bundle rather than the host toolkit.
43
local module
44
for module in "$srcdir/appimage/usr/lib/gtk-3.0/3.0.0/"{immodules,printbackends}/*.so \
45
"$srcdir/appimage/usr/lib/gdk-pixbuf-2.0/2.10.0/loaders/"*.so; do
46
patchelf --set-rpath "\$ORIGIN/../../.." "$module"
47
done
48
}
49
50
prepare() {
51
_prepare_appimage
52
53
cd "$srcdir/$_source_dir"
54
export CARGO_TARGET_DIR="$srcdir/target"
55
cargo fetch --locked --target "$CARCH-unknown-linux-gnu"
56
cd ui
57
# pnpm 11 requires explicit approval of esbuild's native-binary setup.
58
printf '%s\n' 'allowBuilds:' ' esbuild: true' > pnpm-workspace.yaml
59
pnpm install --frozen-lockfile
60
}
61
62
build() {
63
cd "$srcdir/$_source_dir/ui"
64
pnpm build
65
66
cd "$srcdir/$_source_dir"
67
export CARGO_TARGET_DIR="$srcdir/target"
68
# Link Arch's SQLite instead of upstream's bundled C build for static musl.
69
export LIBSQLITE3_SYS_USE_PKG_CONFIG=1
70
# Upstream reserves its production telemetry channel for official CI builds.
71
unset ORX_OFFICIAL_RELEASE_BUILD
72
cargo build --release --frozen --target "$CARCH-unknown-linux-gnu"
73
install -Dm755 "$CARGO_TARGET_DIR/$CARCH-unknown-linux-gnu/release/orx" "$srcdir/orx-cli"
74
cargo build --release --frozen --target "$CARCH-unknown-linux-gnu" --features desktop
75
install -Dm755 "$CARGO_TARGET_DIR/$CARCH-unknown-linux-gnu/release/orx" "$srcdir/orx-desktop"
76
}
77
78
_install_license() {
79
install -Dm644 "$srcdir/$_source_dir/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
80
}
81
82
_install_desktop_entry() {
83
install -Dm644 "$srcdir/$_source_dir/linux/OpenResearch.desktop" \
84
"$pkgdir/usr/share/applications/openresearch.desktop"
85
sed -i 's/^Exec=.*/Exec=openresearch/' "$pkgdir/usr/share/applications/openresearch.desktop"
86
install -Dm644 "$srcdir/$_source_dir/linux/OpenResearch.png" \
87
"$pkgdir/usr/share/icons/hicolor/256x256/apps/OpenResearch.png"
88
}
89
90
package_openresearch() {
91
pkgdesc="Automated research with coding agents (desktop, built from source)"
92
depends=("bash" "glibc" "gcc-libs" "gtk3" "webkit2gtk-4.1" "sqlite" "ca-certificates" "hicolor-icon-theme")
93
optdepends=("openresearch-cli: standalone headless orx command" "git: local project version control")
94
conflicts=("openresearch-bin")
95
96
install -Dm755 "$srcdir/orx-desktop" "$pkgdir/usr/lib/openresearch/orx"
97
install -dm755 "$pkgdir/usr/bin"
98
printf '%s\n' '#!/bin/sh' 'exec /usr/lib/openresearch/orx app' > "$pkgdir/usr/bin/openresearch"
99
chmod 755 "$pkgdir/usr/bin/openresearch"
100
_install_desktop_entry
101
_install_license
102
}
103
104
package_openresearch-cli() {
105
pkgdesc="Automated research with coding agents (headless CLI, built from source)"
106
depends=("glibc" "gcc-libs" "sqlite" "ca-certificates")
107
optdepends=("git: local project version control" "openssh: remote compute over SSH")
108
conflicts=("openresearch-cli-bin")
109
110
install -Dm755 "$srcdir/orx-cli" "$pkgdir/usr/bin/orx"
111
_install_license
112
}
113
114
package_openresearch-bin() {
115
pkgdesc="Automated research with coding agents (desktop, upstream binary)"
116
depends=(
117
"bash" "glibc" "gcc-libs" "ca-certificates" "fontconfig" "harfbuzz" "fribidi"
118
"libglvnd" "mesa" "libx11" "libgpg-error" "e2fsprogs" "gmp" "hicolor-icon-theme" "ttf-font"
119
)
120
optdepends=(
121
"openresearch-cli: standalone headless orx command"
122
"git: local project version control"
123
"zenity: graphical startup error dialogs"
124
"xorg-xwayland: desktop app on Wayland"
125
)
126
provides=("openresearch=$pkgver")
127
conflicts=("openresearch")
128
options=("!strip" "!debug")
129
130
install -dm755 "$pkgdir/opt/openresearch" "$pkgdir/usr/bin"
131
cp -a "$srcdir/appimage/." "$pkgdir/opt/openresearch/"
132
ln -s /opt/openresearch/AppRun.wrapped "$pkgdir/usr/bin/openresearch"
133
_install_desktop_entry
134
_install_license
135
}
136
137
package_openresearch-cli-bin() {
138
pkgdesc="Automated research with coding agents (headless CLI, upstream binary)"
139
depends=("ca-certificates")
140
optdepends=("git: local project version control" "openssh: remote compute over SSH")
141
provides=("openresearch-cli=$pkgver")
142
conflicts=("openresearch-cli")
143
options=("!strip" "!debug")
144
145
install -Dm755 "$srcdir/openresearch-cli-$CARCH-unknown-linux-musl/orx" "$pkgdir/usr/bin/orx"
146
_install_license
147
}
148
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-08 18:09:39 | Low | 2 |