paseo-desktop-bin-beta
The package downloads a prebuilt .deb from the project's official GitHub release page, which is a normal distribution method; while the host is not whitelisted, the source is verifiable and matches the project's official channel, posing low risk.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt .deb from the project's official GitHub release page, which is a normal distribution method; while the host is not whitelisted, the source is verifiable and matches the project's official channel, posing low risk.
PKGBUILD
# Maintainer: xpufx <github@xpufx.com>
pkgname="paseo-desktop-bin-beta"
pkgver="0.7.0_beta.2"
pkgrel=1
pkgdesc="One interface for all your Claude Code, Codex and OpenCode agents. (beta)"
arch=("x86_64")
url="https://paseo.sh"
_github_url="https://github.com/getpaseo/paseo"
makedepends=("binutils" "tar")
depends=(libxkbcommon libxcb libgcc gtk3 libxext libx11 libcups nspr mesa dbus pango libxcomposite libxrandr nodejs glib2 nss libxdamage alsa-lib systemd-libs bash hicolor-icon-theme cairo at-spi2-core expat libstdc++ libxfixes)
provides=("paseo=${pkgver}")
conflicts=(paseo paseo-bin paseo-appimage paseo-desktop-bin)
license=("Apache-2.0")
source=("${_github_url}/releases/download/v0.7.0-beta.2/Paseo-0.7.0-beta.2-amd64.deb")
sha256sums=('2e333c6b38c731c52d164f0a87ce536d62fcf1f9227b2d0008688f043b0d0c6e')
prepare() {
ar p Paseo-0.7.0-beta.2-amd64.deb data.tar.xz | tar --zstd -x
}
package() {
cd $srcdir
cp -R usr ${pkgdir}
cp -R opt ${pkgdir}
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-30 11:42:29 | Low | 2 |