p2p-kiwi-bin

LOW

maintainer zxp19821005 0 votes scanned 2026-09-02 03:49:31.775712

View on AUR

Why flagged

The package installs a prebuilt Electron app from GitHub releases, which is normal for AUR binary packages; the source is verifiable and signed by the project's release process, and no malicious behavior is evident in the build or install steps.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt Electron app from GitHub releases, which is normal for AUR binary packages; the source is verifiable and signed by the project's release process, and no malicious behavior is evident in the build or install steps.

PKGBUILD

      1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
    
      2_appname=p2p.kiwi
    
      3pkgname="${_appname//./-}-bin"
    
      4pkgver=1.0.0
    
      5_electronversion=44
    
      6pkgrel=1
    
      7pkgdesc="Asimple and easy-to-use screen sharing tool."
    
      8arch=(
    
      9    'aarch64'
    
      10    'x86_64'
    
      11)
    
      12url="https://p2p.kiwi/"
    
      13_ghurl="https://github.com/dont-be-evil-company/p2p.kiwi"
    
      14license=('MIT')
    
      15provides=("${pkgname%-bin}=${pkgver}")
    
      16conflicts=("${pkgname%-bin}")
    
      17depends=(
    
      18    "electron${_electronversion}"
    
      19)
    
      20source=(
    
      21    "LICENSE-${pkgver}::https://raw.githubusercontent.com/dont-be-evil-company/p2p.kiwi/v${pkgver}/LICENSE"
    
      22    "${pkgname%-bin}.sh"
    
      23)
    
      24source_aarch64=("${pkgname%-bin}-${pkgver}-aarch64.deb::${_ghurl}/releases/download/v${pkgver}/${pkgname%-bin}_arm64.deb")
    
      25source_x86_64=("${pkgname%-bin}-${pkgver}-x86_64.deb::${_ghurl}/releases/download/v${pkgver}/${pkgname%-bin}_amd64.deb")
    
      26sha256sums=('5ba8d10757c4ce9b880422e3746897d89b27647febd1f70ab5021f9ac10ade95'
    
      27            'a774c2f54fbbeeaac3cefc0f7250796d30c86d27f0fd40b7eaf9c0fdb021623d')
    
      28sha256sums_aarch64=('33ffe6e8842eb4f81e1a76e9b15fc7dc58403a7d3e244b31afb5c653e23b4ed1')
    
      29sha256sums_x86_64=('5d239834578bb6952e3228c69a246c70ac968d0af923b300374faf6539766c98')
    
      30_get_app_dir() {
    
      31    find "${srcdir}" -type f -name "resources.pak" -exec dirname {} + | head -n 1
    
      32}
    
      33_check_electron_version() {
    
      34    echo "Verifying Electron version..."
    
      35    local _main_exe=$(find "$(_get_app_dir)" -maxdepth 1 -type f -executable -printf '%s %p\n' | sort -nr | head -1 | cut -d' ' -f2-)
    
      36    [[ -z "${_main_exe}" ]] && echo -e "\033[1;33mNote: Could not find Electron binary.\033[0m" && return
    
      37    local _elec_ver=$(strings "${_main_exe}" | grep -oP 'Electron/\K[0-9]+' | head -1)
    
      38    [[ -z "${_elec_ver}" ]] && echo -e "\033[1;33mNote: Could not determine Electron version.\033[0m" && return
    
      39    [[ "${_elec_ver}" != "${_electronversion}" ]] &&
    
      40        echo -e "\033[1;31mWarning: Electron version mismatch! Detected: ${_elec_ver}, Expected: ${_electronversion}\033[0m" ||
    
      41        echo -e "Electron version verified: \033[1;31m${_elec_ver}\033[0m"
    
      42}
    
      43prepare() {
    
      44    sed -i -e "
    
      45        s/@electronversion@/${_electronversion}/g
    
      46        s/@appname@/${pkgname%-bin}/g
    
      47        s/@runname@/app.asar/g
    
      48        s/@cfgdirname@/${_appname}/g
    
      49    " "${srcdir}/${pkgname%-bin}.sh"
    
      50    bsdtar -xf "${srcdir}/data."*
    
      51    _check_electron_version
    
      52    sed -i "s/\/opt\/${_appname}\/${_appname}/${pkgname%-bin}/g" "${srcdir}/usr/share/applications/${_appname}.desktop"
    
      53}
    
      54package() {
    
      55    install -Dm755 "${srcdir}/${pkgname%-bin}.sh" "${pkgdir}/usr/bin/${pkgname%-bin}"
    
      56    install -Dm755 -d "${pkgdir}/usr/lib/${pkgname%-bin}"
    
      57    local _app_dir=$(_get_app_dir)
    
      58    cp -a "${_app_dir}/resources/"* "${pkgdir}/usr/lib/${pkgname%-bin}/"
    
      59    install -Dm644 "${srcdir}/usr/share/applications/${_appname}.desktop" "${pkgdir}/usr/share/applications/${pkgname%-bin}.desktop"
    
      60    find "${srcdir}" -type f \( -name "*.png" -o -name "*.svg" \) -path "*share/icons/*" | while read -r _i; do
    
      61        _extension="${_i##*.}"
    
      62        _icon_path="${_i#*share/icons/}"
    
      63        _target_dir="/usr/share/icons/$(dirname "${_icon_path}")"
    
      64        install -Dm644 "${_i}" "${pkgdir}${_target_dir}/${pkgname%-bin}.${_extension}"
    
      65    done
    
      66    install -Dm644 "${srcdir}/LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      67}
    
      68

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-02 03:49:31	Low	2