penguin-engine-git

LOW
maintainer ArjixWasTaken 0 votes scanned 2026-10-25 00:20:48.567348
View on AUR
Why flagged

The package builds from a public Git repository with a SKIP'd checksum, but it is the project's own source code and not an unverifiable prebuilt binary; the low severity is due to limited votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but it is the project's own source code and not an unverifiable prebuilt binary; the low severity is due to limited votes and recent upload, not malicious content.

PKGBUILD

1# Maintainer: ArjixWasTaken <me@arjix.dev>
2
3pkgname=penguin-engine-git
4_pkgname=penguin-engine
5pkgver=0.1.0.r78.g1ef35dd
6pkgrel=1
7pkgdesc="Animated desktop wallpapers for Wayland: plays Wallpaper Engine wallpapers"
8arch=('x86_64')
9url="https://github.com/ArjixWasTaken/penguin-engine"
10license=('GPL-2.0-only')
11depends=(
12 'alsa-lib'
13 'cairo'
14 'dbus'
15 'fontconfig'
16 'gdk-pixbuf2'
17 'glib2'
18 'glibc'
19 'gst-plugins-bad-libs'
20 'gst-plugins-base-libs'
21 'gstreamer'
22 'gtk3'
23 'libgcc'
24 'libglvnd'
25 'libpulse'
26 'libsoup3'
27 'libstdc++'
28 'mpv'
29 'vulkan-icd-loader'
30 'wayland'
31 'webkit2gtk-4.1'
32 'zlib'
33)
34makedepends=('cargo' 'clang' 'git' 'nodejs' 'pnpm' 'python')
35optdepends=(
36 'steam: Wallpaper Engine, whose assets and workshop wallpapers are played'
37 'vulkan-driver: GPU rendering'
38 'mesa: video and web frames handed to the GPU without a copy (EGL)'
39)
40provides=("$_pkgname")
41conflicts=("$_pkgname")
42options=('!lto')
43source=("git+$url.git")
44sha256sums=('SKIP')
45
46pkgver() {
47 cd "$_pkgname"
48 local version
49 version=$(sed -n 's/^version = "\(.*\)"/\1/p' Cargo.toml | head -n1)
50 printf '%s.r%s.g%s' "$version" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
51}
52
53prepare() {
54 cd "$_pkgname"
55 export RUSTUP_TOOLCHAIN=stable
56 cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
57 pnpm -C apps/penguin-engine/ui install --frozen-lockfile
58}
59
60build() {
61 cd "$_pkgname"
62 export RUSTUP_TOOLCHAIN=stable
63 export CARGO_TARGET_DIR=target
64 pnpm -C apps/penguin-engine/ui build
65 cargo build --frozen --release -p penguind -p penguinctl -p penguin-engine
66}
67
68check() {
69 cd "$_pkgname"
70 export RUSTUP_TOOLCHAIN=stable
71 export CARGO_TARGET_DIR=target
72 cargo test --frozen --release -p wpe-ipc -p penguinctl
73}
74
75package() {
76 cd "$_pkgname"
77 install -Dm755 target/release/{penguind,penguinctl,penguin-engine} -t "$pkgdir/usr/bin/"
78 install -Dm644 systemd/penguin-engine.{service,socket} -t "$pkgdir/usr/lib/systemd/user/"
79 sed -i 's|^ExecStart=.*|ExecStart=/usr/bin/penguind|' \
80 "$pkgdir/usr/lib/systemd/user/penguin-engine.service"
81 install -Dm644 packaging/dev.arjix.penguin-engine.desktop -t "$pkgdir/usr/share/applications/"
82 install -Dm644 apps/penguin-engine/icons/icon.png \
83 "$pkgdir/usr/share/icons/hicolor/256x256/apps/dev.arjix.penguin-engine.png"
84 install -Dm644 README.md -t "$pkgdir/usr/share/doc/$pkgname/"
85}
86

Scan history

Scanned at (UTC)SeverityRules
2026-10-25 00:20:48 Low 2
2026-10-24 23:41:29 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion