orchis-theme-fixed-git
LOW
maintainer gaougalos
0 votes
scanned 2026-10-30 00:29:30.650963
Why flagged
The package builds a GTK theme from source using git repositories with SKIP'd checksums, but the content is non-executable data; worst case is theme corruption, not code execution.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds a GTK theme from source using git repositories with SKIP'd checksums, but the content is non-executable data; worst case is theme corruption, not code execution.
PKGBUILD
1
# Maintainer: gaou-piou <i dot am dot piou at gmail dot com>
2
# Contributor: Mark Wagie <mark dot wagie at tutanota dot com>
3
pkgname=orchis-theme-fixed-git
4
_name=orchis-theme
5
_fixes=orchis
6
pkgver=2026.07.07.r5.ga4c48a4.f7.0c09bae
7
pkgrel=1
8
pkgdesc="Orchis, a Material Design GTK theme, Dracula colors, with GTK 3/4 geometry fixes (window buttons, headerbars, Nautilus, Electron/Chromium titlebars)"
9
arch=('any')
10
url='https://github.com/vinceliuice/Orchis-theme'
11
license=('GPL-3.0-or-later')
12
depends=('gtk3' 'gnome-themes-extra')
13
makedepends=('git' 'sassc')
14
optdepends=('gtk-engine-murrine: GTK 2 support'
15
'kvantum-theme-orchis: Matching Kvantum theme'
16
'tela-circle-icon-theme: Recommended icon theme')
17
provides=("${_name}")
18
conflicts=("${_name}" "${_name}-git")
19
options=('!strip' '!debug')
20
install=orchis-theme-fixed.install
21
source=("${_name}::git+https://github.com/vinceliuice/Orchis-theme.git")
22
sha256sums=('SKIP')
23
# The fixes follow the main branch of github.com/gaou-piou/gtk-theme-fixes, so a change there needs
24
# no package update; pkgver() records which commit a build took. local_build=true: they come from a
25
# gtk-theme-fixes/ working tree in a parent directory of this PKGBUILD instead (uncommitted changes
26
# included).
27
if [[ ${local_build:-} != true ]]; then
28
source+=('gtk-theme-fixes::git+https://github.com/gaou-piou/gtk-theme-fixes.git')
29
sha256sums+=('SKIP')
30
fi
31
32
_local_fixes() {
33
local d=$startdir
34
until [[ -d $d/gtk-theme-fixes/generic || $d == / ]]; do d=$(dirname "$d"); done
35
if [[ ! -d $d/gtk-theme-fixes/generic ]]; then
36
error "local_build: no gtk-theme-fixes/ in a parent directory of $startdir"
37
return 1
38
fi
39
printf '%s\n' "$d/gtk-theme-fixes"
40
}
41
42
# <theme version>.f<count>.<commit>: the commits of gtk-theme-fixes that change the files this
43
# package uses (generic/ and its own directory), so other themes' fixes leave the version alone
44
pkgver() {
45
local theme="$srcdir/${_name}" fixes="$srcdir/gtk-theme-fixes" v
46
if [[ ${local_build:-} == true ]]; then
47
fixes=$(_local_fixes) || return 1
48
fi
49
if v=$(git -C "$theme" describe --long --tags --abbrev=7 2>/dev/null); then
50
v=$(sed 's/\([^-]*-g\)/r\1/;s/-/./g' <<< "$v")
51
else
52
v=r$(git -C "$theme" rev-list --count HEAD).g$(git -C "$theme" rev-parse --short=7 HEAD)
53
fi
54
printf '%s.f%s.%s' "$v" "$(git -C "$fixes" rev-list --count HEAD -- generic "${_fixes}")" \
55
"$(git -C "$fixes" log -1 --format=%h --abbrev=7 HEAD -- generic "${_fixes}")"
56
}
57
58
prepare() {
59
local fx="$srcdir/gtk-theme-fixes"
60
if [[ ${local_build:-} == true ]]; then
61
local d
62
d=$(_local_fixes) || return 1
63
warning "local_build: fixes from $d (uncommitted changes included)"
64
rm -rf "$fx" && mkdir "$fx"
65
cp -r "$d/generic" "$d/${_fixes}" "$fx/"
66
fi
67
cd "${_name}"
68
69
local sass=src/_sass
70
cp "$fx/generic/fixes-3.0.scss" "$sass/_fixes-3.0.scss"
71
cp "$fx/generic/fixes-4.0.scss" "$sass/_fixes-4.0.scss"
72
cp "$fx/${_fixes}/fixes-variables.scss" "$sass/_variables-fix.scss"
73
cp "$fx/${_fixes}/local-fixes-3.0.scss" "$sass/_local-fixes-3.0.scss"
74
cp "$fx/${_fixes}/local-fixes-4.0.scss" "$sass/_local-fixes-4.0.scss"
75
76
# the fixes are imported near the end of each GTK entry file, after the theme's own partials,
77
# so they see its variables
78
local f
79
for f in src/gtk/3.0/*.scss; do
80
sed -i "$(awk 'END { print NR - 1 }' "$f") a @import '../../_sass/fixes-3.0';" "$f"
81
sed -i "$(awk 'END { print NR - 1 }' "$f") a @import '../../_sass/local-fixes-3.0';" "$f"
82
sed -i "$(awk 'END { print NR - 6 }' "$f") a @import '../../_sass/variables-fix';" "$f"
83
done
84
for f in src/gtk/4.0/*.scss; do
85
sed -i "$(awk 'END { print NR - 1 }' "$f") a @import '../../_sass/fixes-4.0';" "$f"
86
sed -i "$(awk 'END { print NR - 1 }' "$f") a @import '../../_sass/local-fixes-4.0';" "$f"
87
sed -i "$(awk 'END { print NR - 6 }' "$f") a @import '../../_sass/variables-fix';" "$f"
88
done
89
}
90
91
package() {
92
cd "${_name}"
93
install -Dm644 COPYING "${pkgdir}/usr/share/licenses/${pkgname}/COPYING"
94
install -d "${pkgdir}/usr/share/themes"
95
# every accent, Dracula colors, 12px corners
96
# TERM: install.sh draws a spinner with tput, which fails without one (clean chroots)
97
TERM=${TERM:-dumb} ./install.sh -t all --tweaks dracula --round 12px -d "${pkgdir}/usr/share/themes"
98
}
99
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 21:53:30 | Low | 2 |