plasma6-applet-quicklaunch
The package builds from a public Git repository with a SKIP'd checksum, but the source is from a plausible project-owned GitHub repo; no remote code execution or malicious payloads are present, and it follows standard AUR build practices for Plasma applets.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but the source is from a plausible project-owned GitHub repo; no remote code execution or malicious payloads are present, and it follows standard AUR build practices for Plasma applets.
PKGBUILD
# Maintainer: CxOrg <clx.org@cloud-org.uk>
#
# Plasma 6 Quicklaunch applet - a customizable updated quicklaunch widget for KDE Plasma 6 panels.
pkgname=plasma6-applet-quicklaunch
pkgver=6.5.80
pkgrel=1
pkgdesc="Customizable quicklaunch widget for KDE Plasma 6 panels"
arch=(x86_64)
url="https://github.com/ixnewton/org.kde.plasma.quicklaunch"
license=(GPL-2.0-only GPL-3.0-only LicenseRef-KDE-Accepted-GPL)
depends=(qt6-base
qt6-declarative
kf6-config
kf6-coreaddons
kf6-ki18n
kf6-kio
kf6-service
kf6-iconthemes
kf6-jobwidgets
plasma-activities)
makedepends=(extra-cmake-modules
cmake
git)
provides=(org.kde.plasma.quicklaunch)
conflicts=(org.kde.plasma.quicklaunch)
source=("git+https://github.com/ixnewton/org.kde.plasma.quicklaunch.git#branch=main")
sha256sums=('SKIP')
build() {
cd "$srcdir/org.kde.plasma.quicklaunch"
cmake -B build \
-DCMAKE_BUILD_TYPE=Release \
-DCMAKE_INSTALL_PREFIX=/usr \
-DKDE_INSTALL_LIBDIR=lib \
-DBUILD_TESTING=OFF
make -C build -j"$(nproc)"
}
package() {
cd "$srcdir/org.kde.plasma.quicklaunch"
make -C build DESTDIR="$pkgdir" install
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-04 19:58:38 | Low | 2 |