panefile-git

LOW

maintainer andyjeffries 0 votes scanned 2026-09-01 09:47:42.175833

View on AUR

Why flagged

The package builds from the project's own git repository, which is normal for AUR packages; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own git repository, which is normal for AUR packages; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: Andy Jeffries <andy@andyjeffries.co.uk>
    
      2
    
      3pkgname=panefile-git
    
      4_pkgname=panefile
    
      5pkgver=r54.a1b837c
    
      6pkgrel=1
    
      7pkgdesc="Keyboard-driven, multi-panel file manager for Wayland (git)"
    
      8arch=('x86_64' 'aarch64')
    
      9url="https://github.com/andyjeffries/panefile"
    
      10license=('MIT')
    
      11
    
      12# Every optional dependency is a hard one here, deliberately.
    
      13#
    
      14# §3.4 keeps them out of the binary's load-time dependencies — they are opened
    
      15# on first use, and the application runs without any of them. But a package
    
      16# that leaves them to optdepends gives most people a build with no syntax
    
      17# highlighting, no PDF previews and no video thumbnails, and no indication that
    
      18# anything is missing. Installing them costs a few megabytes once; discovering
    
      19# their absence costs a bug report.
    
      20#
    
      21# panefile-git and panefile agree on this. Anyone who wants the lean build has
    
      22# makepkg and this file.
    
      23depends=(
    
      24  'qt6-base'          # Core, Gui, Widgets, DBus, Network
    
      25  'libarchive'        # §7.10 archives, resolved at runtime
    
      26  'shared-mime-info'  # §7.6 MIME detection
    
      27  'hicolor-icon-theme'
    
      28  'syntax-highlighting'   # §7.6 Quick Look source highlighting (KF6)
    
      29  'poppler-qt6'           # §7.6 PDF previews
    
      30  'qt6-multimedia'        # §7.6 audio and video previews
    
      31  'ffmpegthumbnailer'     # §7.7 video thumbnails
    
      32  'udisks2'               # §7.11 removable media
    
      33)
    
      34makedepends=('git' 'cmake' 'ninja' 'gcc')
    
      35checkdepends=('xorg-server-xvfb')
    
      36provides=("$_pkgname=$pkgver")
    
      37conflicts=("$_pkgname")
    
      38source=("$_pkgname::git+https://github.com/andyjeffries/panefile.git")
    
      39sha256sums=('SKIP')
    
      40
    
      41pkgver() {
    
      42  cd "$srcdir/$_pkgname"
    
      43  printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      44}
    
      45
    
      46build() {
    
      47  cmake -S "$srcdir/$_pkgname" -B build -G Ninja \
    
      48    -DCMAKE_BUILD_TYPE=Release \
    
      49    -DCMAKE_INSTALL_PREFIX=/usr \
    
      50    -DCMAKE_INTERPROCEDURAL_OPTIMIZATION=ON
    
      51  cmake --build build
    
      52}
    
      53
    
      54check() {
    
      55  # The GUI tests need a platform plugin; offscreen is what CI uses and needs
    
      56  # no display server.
    
      57  QT_QPA_PLATFORM=offscreen ctest --test-dir build --output-on-failure
    
      58}
    
      59
    
      60package() {
    
      61  DESTDIR="$pkgdir" cmake --install build
    
      62  install -Dm644 "$srcdir/$_pkgname/LICENSE" \
    
      63    "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      64}
    
      65

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-01 09:47:42	Low	2