pattn

LOW

maintainer mhdi 0 votes scanned 2026-08-26 19:30:41.077132

View on AUR

Why flagged

The package builds from source via git and includes non-executable geolocation data files from various GitHub sources; while checksums are skipped for many sources, the files are configuration/data-only and not executed, limiting risk to data tampering rather than code execution.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source via git and includes non-executable geolocation data files from various GitHub sources; while checksums are skipped for many sources, the files are configuration/data-only and not executed, limiting risk to data tampering rather than code execution.

PKGBUILD

      1# Maintainer:
    
      2
    
      3pkgname=pattn
    
      4_name=PattN
    
      5pkgver=7.24.8.P9
    
      6pkgrel=1
    
      7pkgdesc="A GUI client for Windows, Linux and macOS, support Xray and sing-box and others"
    
      8arch=('x86_64')
    
      9url="https://github.com/patterniha/PattN"
    
      10license=('GPL-3.0-only')
    
      11depends=('bash' 'dotnet-runtime-10.0' 'fontconfig' 'glibc' 'libgcc' 'libstdc++' 'xray')
    
      12makedepends=('dotnet-sdk-10.0' 'gendesk' 'git')
    
      13source=("git+${url}#tag=${pkgver//.P/-P}"
    
      "git+https://github.com/2dust/GlobalHotKeys.git"
    
      "https://github.com/MetaCubeX/meta-rules-dat/releases/latest/download/geoip.metadb"
    
      "https://github.com/Loyalsoldier/geoip/releases/latest/download/Country.mmdb"
    
      "https://github.com/Loyalsoldier/geoip/releases/latest/download/geoip-only-cn-private.dat"
    
      "https://github.com/Chocolate4U/Iran-v2ray-rules/releases/latest/download/geoip.dat"
    
      "https://github.com/Chocolate4U/Iran-v2ray-rules/releases/latest/download/geosite.dat"
    
      "https://github.com/2dust/sing-box-rules/raw/rule-set-geoip/geoip-cn.srs"
    
      "https://github.com/2dust/sing-box-rules/raw/rule-set-geoip/geoip-facebook.srs"
    
      "https://github.com/2dust/sing-box-rules/raw/rule-set-geoip/geoip-fastly.srs"
    
      "https://github.com/2dust/sing-box-rules/raw/rule-set-geoip/geoip-google.srs"
    
      "https://github.com/2dust/sing-box-rules/raw/rule-set-geoip/geoip-netflix.srs"
    
      "https://github.com/2dust/sing-box-rules/raw/rule-set-geoip/geoip-private.srs"
    
      "https://github.com/2dust/sing-box-rules/raw/rule-set-geoip/geoip-telegram.srs"
    
      "https://github.com/2dust/sing-box-rules/raw/rule-set-geoip/geoip-twitter.srs"
    
      "https://github.com/2dust/sing-box-rules/raw/rule-set-geosite/geosite-category-ads-all.srs"
    
      "https://github.com/2dust/sing-box-rules/raw/rule-set-geosite/geosite-cn.srs"
    
      "https://github.com/2dust/sing-box-rules/raw/rule-set-geosite/geosite-geolocation-cn.srs"
    
      "https://github.com/2dust/sing-box-rules/raw/rule-set-geosite/geosite-gfw.srs"
    
      "https://github.com/2dust/sing-box-rules/raw/rule-set-geosite/geosite-google.srs"
    
      "https://github.com/2dust/sing-box-rules/raw/rule-set-geosite/geosite-greatfire.srs"
    
      "https://github.com/2dust/sing-box-rules/raw/rule-set-geosite/geosite-private.srs"
    
      "https://github.com/Chocolate4U/Iran-sing-box-rules/raw/rule-set/geoip-ir.srs"
    
      "https://github.com/Chocolate4U/Iran-sing-box-rules/raw/rule-set/geosite-ir.srs"
    
      "${pkgname}.sh")
    
      38sha256sums=('462a60e1467341908801483a6544618f3d7ce77158e18d26ea1b9006a3495ba5'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'SKIP'
    
          'cb4f85e20ee206214cd93309f2574ae26ef2748a4b4ff54f737238d639deba5c')
    
      63
    
      64prepare() {
    
  cd "${_name}"
    
  git submodule init
    
  git config submodule.v2rayN/GlobalHotKeys.url "${srcdir}/GlobalHotKeys"
    
  git -c protocol.file.allow=always submodule update
    
      69
    
  cd "v2rayN"
    
  gendesk -f -n \
    
      --pkgname "${pkgname}" \
    
      --pkgdesc "${pkgdesc}" \
    
      --name "${_name}" \
    
      --icon "${_name}" \
    
      --categories 'Network'
    
      77}
    
      78
    
      79build() {
    
  cd "${_name}/v2rayN"
    
  local publish_args=(
    
      --configuration Release
    
      --output build
    
      --runtime linux-x64
    
      -p:PublishSingleFile=false
    
      -p:SelfContained=false
    
      -p:Version=${pkgver//.P/-P}
    
  )
    
  dotnet publish "${publish_args[@]}" v2rayN.Desktop/v2rayN.Desktop.csproj
    
      90}
    
      91
    
      92package() {
    
  cd "${_name}/v2rayN"
    
  install -d "${pkgdir}/usr/lib/${_name}/bin/srss"
    
  cp -r build/* "${pkgdir}/usr/lib/${_name}"
    
  install -Dm755 "${srcdir}/${pkgname}.sh" "${pkgdir}/usr/bin/${pkgname}"
    
  install -Dm644 "${pkgname}.desktop" -t "${pkgdir}/usr/share/applications"
    
  install -Dm644 v2rayN.Desktop/v2rayN.png "${pkgdir}/usr/share/pixmaps/${_name}.png"
    
      99
    
  # Create symlink
    
  install -d "${pkgdir}/usr/lib/${_name}/bin/xray"
    
  ln -s /usr/bin/xray -t "${pkgdir}/usr/lib/${_name}/bin/xray"
    
      103
    
  # Install geofiles
    
  cp "${srcdir}/"*.{dat,metadb,mmdb} "${pkgdir}/usr/lib/${_name}/bin"
    
  cp "${srcdir}/"*.srs "${pkgdir}/usr/lib/${_name}/bin/srss"
    
      107}
    
      108

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-26 19:30:41	Low	2