orca-sofriendly-git

maintainer futpib · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from source hosted on GitHub (plausibly the project's own), uses standard build tools, and disables self-updates; the only concerns are low-risk due to SKIP'd checksum for the git source and few votes, but no remote code execution or malicious payloads are present.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on GitHub (plausibly the project's own), uses standard build tools, and disables self-updates; the only concerns are low-risk due to SKIP'd checksum for the git source and few votes, but no remote code execution or malicious payloads are present.

PKGBUILD

      1pkgname=orca-sofriendly-git
    
      2pkgver=0.3.15.r0.g0d0301c
    
      3pkgrel=1
    
      4pkgdesc='Visual Git client with an integrated terminal for AI coding assistants (git version)'
    
      5arch=('x86_64' 'aarch64')
    
      6url='https://github.com/SoFriendly/orca'
    
      7license=('MIT')
    
      8depends=(
    
      9  'git'
    
      10  'gtk3'
    
      11  'libayatana-appindicator'
    
      12  'libgit2'
    
      13  'libssh2'
    
      14  'libx11'
    
      15  'openssl'
    
      16  'sqlite'
    
      17  'webkit2gtk-4.1'
    
      18  'xdg-utils'
    
      19)
    
      20makedepends=(
    
      21  'cargo'
    
      22  'cmake'
    
      23  'npm'
    
      24  'pkgconf'
    
      25)
    
      26provides=('orca-sofriendly')
    
      27conflicts=('orca-sofriendly')
    
      28options=('!lto')
    
      29source=(
    
      30  "$pkgname::git+$url.git"
    
      31  'desktop-build.patch'
    
      32  'disable-self-updater.patch'
    
      33  'orca-sofriendly.desktop'
    
      34  'orca-sofriendly.xml'
    
      35)
    
      36sha256sums=(
    
      37  'SKIP'
    
      38  '7d55f1103d497597edbbb6499c81568428ed837276148637bba29156ea436042'
    
      39  'cf2a604c6322a84253185125612ffdd6cd675317c30cf7df3ee776d14e1fd407'
    
      40  '6072b928c27f30a70f54bf6106103d0e510e4e0f9dc3c10d999e18f0a844219d'
    
      41  '0eb3e0bbc4f08d029b00e22abf9f252aada1afa9a61b4988bea2be97f2f7bf7b'
    
      42)
    
      43
    
      44pkgver() {
    
      45  cd "$pkgname"
    
      46
    
      47  git describe --long --tags --abbrev=7 2>/dev/null |
    
      48    sed 's/^v//;s/-/.r/;s/-/./'
    
      49}
    
      50
    
      51prepare() {
    
      52  cd "$pkgname"
    
      53
    
      54  patch -Np1 -i "$srcdir/desktop-build.patch"
    
      55  patch -Np1 -i "$srcdir/disable-self-updater.patch"
    
      56
    
      57  npm ci --cache "$srcdir/npm-cache"
    
      58
    
      59  export CARGO_HOME="$srcdir/cargo-home"
    
      60  local rust_target
    
      61  rust_target="$(rustc -vV | sed -n 's/^host: //p')"
    
      62  cargo fetch \
    
      63    --manifest-path src-tauri/Cargo.toml \
    
      64    --locked \
    
      65    --target "$rust_target"
    
      66}
    
      67
    
      68build() {
    
      69  cd "$pkgname"
    
      70
    
      71  export CARGO_HOME="$srcdir/cargo-home"
    
      72  export CARGO_TARGET_DIR="$srcdir/target"
    
      73  export LIBGIT2_NO_VENDOR=1
    
      74  export LIBSSH2_SYS_USE_PKG_CONFIG=1
    
      75  export RUSTFLAGS="${RUSTFLAGS:-} --remap-path-prefix=$srcdir=/usr/src/debug/$pkgbase"
    
      76  unset LDFLAGS
    
      77
    
      78  npm run build
    
      79  cargo build \
    
      80    --manifest-path src-tauri/Cargo.toml \
    
      81    --bin orca \
    
      82    --release \
    
      83    --frozen
    
      84}
    
      85
    
      86package() {
    
      87  cd "$pkgname"
    
      88
    
      89  install -Dm755 "$srcdir/target/release/orca" \
    
      90    "$pkgdir/usr/bin/orca-sofriendly"
    
      91
    
      92  install -Dm644 src-tauri/icons/32x32.png \
    
      93    "$pkgdir/usr/share/icons/hicolor/32x32/apps/orca-sofriendly.png"
    
      94  install -Dm644 src-tauri/icons/128x128.png \
    
      95    "$pkgdir/usr/share/icons/hicolor/128x128/apps/orca-sofriendly.png"
    
      96  install -Dm644 src-tauri/icons/128x128@2x.png \
    
      97    "$pkgdir/usr/share/icons/hicolor/256x256/apps/orca-sofriendly.png"
    
      98  install -Dm644 src-tauri/icons/icon.png \
    
      99    "$pkgdir/usr/share/icons/hicolor/1024x1024/apps/orca-sofriendly.png"
    
      100
    
      101  install -Dm644 "$srcdir/orca-sofriendly.desktop" \
    
      102    "$pkgdir/usr/share/applications/orca-sofriendly.desktop"
    
      103  install -Dm644 "$srcdir/orca-sofriendly.xml" \
    
      104    "$pkgdir/usr/share/mime/packages/orca-sofriendly.xml"
    
      105  install -Dm644 LICENSE \
    
      106    "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      107}
    
      108

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 19:16:23	LOW	2
2026-07-30 17:15:21	LOW	2