orangchat-bin

maintainer adasjusk · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package installs a prebuilt binary from the project's official GitHub release, which is a normal practice for Electron apps; the low severity is due to the unverifiable binary release but from a trusted project host with no obfuscation or remote code execution.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub release, which is a normal practice for Electron apps; the low severity is due to the unverifiable binary release but from a trusted project host with no obfuscation or remote code execution.

PKGBUILD

      1_gh=Orang-Studio/OrangChat
    
      2pkgname=orangchat-bin
    
      3pkgver=0.1.0
    
      4pkgrel=1
    
      5pkgdesc="OrangChat desktop - a Discord-like real-time messaging client"
    
      6arch=('x86_64')
    
      7url="https://github.com/${_gh}"
    
      8license=('custom')
    
      9depends=('gtk3' 'nss' 'alsa-lib')
    
      10optdepends=('libnotify: desktop notifications'
    
      11            'libappindicator-gtk3: system tray icon'
    
      12            'pipewire: screen sharing on wayland')
    
      13provides=('orangchat')
    
      14conflicts=('orangchat')
    
      15options=('!strip')
    
      16source=("orangchat-${pkgver}.tar.gz::https://github.com/${_gh}/releases/download/${pkgver}/OrangChat-${pkgver}-x64.tar.gz"
    
      17        "orangchat.png")
    
      18sha256sums=('c03f25c295e1df11882ddb66a3306dc2e68e488eb280c6d6218ea54719585a3a'
    
      19            '3018de2f89a912f38ae31a1c42284df05f90ce726cb1f64211774a7bc9fac71a')
    
      20
    
      21package() {
    
      22	install -dm755 "${pkgdir}/opt/orangchat"
    
      23	cp -a "${srcdir}/OrangChat-${pkgver}-x64/." "${pkgdir}/opt/orangchat/"
    
      24	chmod 4755 "${pkgdir}/opt/orangchat/chrome-sandbox"
    
      25	install -dm755 "${pkgdir}/usr/bin"
    
      26	cat > "${pkgdir}/usr/bin/orangchat" <<'EOF'
    
      27#!/bin/sh
    
      28exec /opt/orangchat/orangchat "$@"
    
      29EOF
    
      30	chmod 755 "${pkgdir}/usr/bin/orangchat"
    
      31
    
      32	install -Dm644 "${srcdir}/orangchat.png" \
    
      33		"${pkgdir}/usr/share/icons/hicolor/512x512/apps/orangchat.png"
    
      34
    
      35	install -Dm644 /dev/stdin "${pkgdir}/usr/share/applications/orangchat.desktop" <<'EOF'
    
      36[Desktop Entry]
    
      37Name=OrangChat
    
      38Comment=A Discord-like real-time messaging client
    
      39Exec=orangchat %U
    
      40Icon=orangchat
    
      41Terminal=false
    
      42Type=Application
    
      43Categories=Network;InstantMessaging;
    
      44StartupWMClass=orangchat
    
      45MimeType=x-scheme-handler/orangchat;
    
      46EOF
    
      47
    
      48	install -Dm644 "${pkgdir}/opt/orangchat/LICENSE.electron.txt" \
    
      49		"${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.electron.txt"
    
      50}

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 21:26:05	LOW	2