pgpony-bin
LOW
maintainer norsehorse
0 votes
scanned 2026-08-20 07:10:50.301025
Why flagged
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
PKGBUILD
1
# Maintainer: Kevin Stewart <kgstew96@gmail.com>
2
#
3
# pgpony-bin installs the prebuilt portable tarball attached to each GitHub release, so there is
4
# no JDK dependency: the app ships its own jlink runtime.
5
#
6
# pkgver must name a tag whose release assets include PGPony-linux-x86_64.tar.gz and
7
# PGPony-linux-aarch64.tar.gz. PGPony's releases open as DRAFTS and are published by hand after
8
# the dmg is notarized and everything is signed, so a tag existing is NOT enough — push to the
9
# AUR only once the release is public, or every user's makepkg gets a 404.
10
pkgname=pgpony-bin
11
pkgver=2.1.0
12
pkgrel=1
13
pkgdesc="OpenPGP on the desktop - encrypt, decrypt, sign, verify, manage keys (prebuilt)"
14
arch=('x86_64' 'aarch64')
15
url="https://pgpony.app"
16
license=('Apache-2.0')
17
# fontconfig is Skiko's; pcsclite is NOT optional garnish. javax.smartcardio dlopens
18
# libpcsclite at runtime and every hardware-key feature is dead without it — the same reasoning
19
# that puts pcscd,libpcsclite1 in the .deb's Depends via --linux-package-deps. RelayPony's
20
# PKGBUILD needs only fontconfig; copying it verbatim here would ship a package that installs
21
# cleanly and silently cannot see a security key.
22
depends=('fontconfig' 'pcsclite')
23
# The daemon is in pcsclite, but the USB CCID driver it talks to is a separate package, and
24
# without it pcscd runs and enumerates nothing.
25
optdepends=('ccid: USB smart-card reader driver, required for OpenPGP hardware keys')
26
provides=('pgpony')
27
conflicts=('pgpony')
28
# The bundled runtime's .so files are already stripped, and strip corrupts the jlink image's
29
# integrity when it walks them again.
30
options=(!strip)
31
source=(
32
"pgpony.desktop::https://raw.githubusercontent.com/norsehorse-dev/PGPonyDesktop/v$pkgver/packaging/aur/pgpony.desktop"
33
"pgpony.png::https://raw.githubusercontent.com/norsehorse-dev/PGPonyDesktop/v$pkgver/packaging/pgpony.png"
34
)
35
source_x86_64=("$pkgname-$pkgver-x86_64.tar.gz::https://github.com/norsehorse-dev/PGPonyDesktop/releases/download/v$pkgver/PGPony-linux-x86_64.tar.gz")
36
source_aarch64=("$pkgname-$pkgver-aarch64.tar.gz::https://github.com/norsehorse-dev/PGPonyDesktop/releases/download/v$pkgver/PGPony-linux-aarch64.tar.gz")
37
sha256sums=('91f9803d60a09b6e61527feb80a80d1c0b2f5807130906fe275d4edf1da23e7e'
38
'8fa9b7b80a7061f68a96d9516c8b02ea56e7a2333410d64695c9b7eb4acb8c77')
39
sha256sums_x86_64=('f24999d91f652ce8965c06fc5a10aa9fcc81775290fecdeddb6f77ca18254db4')
40
sha256sums_aarch64=('5d86b83ef8936fd8780f8f62b4b0e054a2677aa56023302065ecb8c8edd8e86b')
41
42
package() {
43
install -dm755 "$pkgdir/opt/pgpony"
44
cp -a "$srcdir/PGPony/." "$pkgdir/opt/pgpony/"
45
install -dm755 "$pkgdir/usr/bin"
46
ln -s /opt/pgpony/bin/PGPony "$pkgdir/usr/bin/pgpony"
47
# The .desktop carries MimeType so a double-clicked .pgpony/.asc/.gpg opens PGPony, matching
48
# what the .deb registers. The tarball and AppImage cannot do this — nothing installs a
49
# desktop entry for them — so the AUR package and the .deb are the two Linux paths where file
50
# associations actually work.
51
install -Dm644 "$srcdir/pgpony.desktop" "$pkgdir/usr/share/applications/pgpony.desktop"
52
install -Dm644 "$srcdir/pgpony.png" "$pkgdir/usr/share/pixmaps/pgpony.png"
53
}
54
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-20 07:10:50 | Low | 1 |