orca-ide-appimage

LOW

maintainer prochac 0 votes scanned 2026-09-16 15:22:50.295451

View on AUR

Why flagged

The package downloads prebuilt AppImages from the project's official GitHub releases, which is a normal distribution method for Electron apps; the source is trustworthy and the build process is transparent, though the binary nature of AppImages limits verifiability.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt AppImages from the project's official GitHub releases, which is a normal distribution method for Electron apps; the source is trustworthy and the build process is transparent, though the binary nature of AppImages limits verifiability.

PKGBUILD

      1# Maintainer: Tomáš Karela Procházka <tomas.prochazka5d@gmail.com>
    
      2
    
      3pkgname=orca-ide-appimage
    
      4_pkgname=orca-ide
    
      5pkgver=1.4.204
    
      6pkgrel=1
    
      7pkgdesc="Next-gen IDE for working with a fleet of parallel coding agents (AppImage)"
    
      8arch=('x86_64' 'aarch64')
    
      9url="https://github.com/stablyai/orca"
    
      10license=('MIT')
    
      11# fuse2: the bundled runtime is a type-2 AppImage (statically linked libfuse 2,
    
      12# looks for `fusermount` on $PATH) and self-mounts on every launch.
    
      13# The rest is what the bundled Electron dlopen()s from the host.
    
      14depends=('fuse2'
    
      15         'gtk3'
    
      16         'nss'
    
      17         'libnotify'
    
      18         'libsecret'
    
      19         'libxss'
    
      20         'libxtst'
    
      21         'hicolor-icon-theme')
    
      22optdepends=('at-spi2-core: UI automation for Design Mode/element picking'
    
      23            'python-gobject: UI automation for Design Mode/element picking'
    
      24            'xdotool: UI automation for Design Mode/element picking'
    
      25            'libappindicator-gtk3: system tray icon')
    
      26# orca-ide is upstream's own Linux name, also used by orca-ide-bin, onorca-bin
    
      27# and stably-orca; all three collide with this package file-for-file.
    
      28provides=("orca-ide=$pkgver")
    
      29conflicts=('orca-ide')
    
      30# Prebuilt Electron payload inside a squashfs image: stripping corrupts it and
    
      31# there is nothing to put in a -debug package.
    
      32options=('!strip' '!debug')
    
      33
    
      34# $CARCH-suffixed local names: both release assets would otherwise land on the
    
      35# same filename, and `updpkgsums` would reuse the cached x86_64 download as the
    
      36# aarch64 source and emit the same checksum for both arrays.
    
      37source=("LICENSE-$pkgver::https://raw.githubusercontent.com/stablyai/orca/v$pkgver/LICENSE")
    
      38source_x86_64=("$_pkgname-$pkgver-x86_64.AppImage::$url/releases/download/v$pkgver/orca-linux.AppImage")
    
      39source_aarch64=("$_pkgname-$pkgver-aarch64.AppImage::$url/releases/download/v$pkgver/orca-linux-arm64.AppImage")
    
      40noextract=("$_pkgname-$pkgver-x86_64.AppImage"
    
      41           "$_pkgname-$pkgver-aarch64.AppImage")
    
      42sha256sums=('ff1b611f80580d49f4b97e93a97b24eb050b0671b26b8afe16341fab699112f3')
    
      43sha256sums_x86_64=('0c8481057d250bcd06299214bd5e21439137964b28e68cc2ea176f9a0ebc3559')
    
      44sha256sums_aarch64=('337efc5afa65d40bfd853f7ca42f2c0c9501a914e87c38ce4c47f12a59a16c8e')
    
      45
    
      46prepare() {
    
      47    cd "$srcdir"
    
      48
    
      49    # A leftover squashfs-root from a previous `makepkg -f` would merge with
    
      50    # this extraction instead of being replaced.
    
      51    rm -rf squashfs-root
    
      52    chmod +x "$_pkgname-$pkgver-$CARCH.AppImage"
    
      53    "./$_pkgname-$pkgver-$CARCH.AppImage" --appimage-extract >/dev/null
    
      54
    
      55    # Upstream ships Exec=orca, which is extra/orca -- the GNOME screen reader,
    
      56    # an unrelated package that owns /usr/bin/orca. Point it at the binary this
    
      57    # package actually installs.
    
      58    sed -i "s|^Exec=.*|Exec=$_pkgname %U|" "squashfs-root/$_pkgname.desktop"
    
      59}
    
      60
    
      61package() {
    
      62    cd "$srcdir"
    
      63
    
      64    install -Dm755 "$_pkgname-$pkgver-$CARCH.AppImage" \
    
      65        "$pkgdir/opt/$_pkgname/$_pkgname.AppImage"
    
      66    install -dm755 "$pkgdir/usr/bin"
    
      67    ln -s "/opt/$_pkgname/$_pkgname.AppImage" "$pkgdir/usr/bin/$_pkgname"
    
      68
    
      69    install -Dm644 "squashfs-root/$_pkgname.desktop" \
    
      70        "$pkgdir/usr/share/applications/$_pkgname.desktop"
    
      71
    
      72    # The AppImage ships a full hicolor set; Icon=orca-ide in the .desktop only
    
      73    # resolves if it is installed under those names. Listed explicitly so an
    
      74    # upstream icon rename fails the build instead of shipping a blank launcher.
    
      75    local _size
    
      76    for _size in 16 24 32 48 64 128 256 512; do
    
      77        install -Dm644 "squashfs-root/usr/share/icons/hicolor/${_size}x${_size}/apps/$_pkgname.png" \
    
      78            "$pkgdir/usr/share/icons/hicolor/${_size}x${_size}/apps/$_pkgname.png"
    
      79    done
    
      80
    
      81    install -Dm644 "LICENSE-$pkgver" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      82}
    
      83

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-16 15:22:50	Low	2