plasma6-applets-ha-pages

CLEAN
maintainer winicius 0 votes scanned 2026-11-02 00:26:00.633185
View on AUR

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): Package builds from a legitimate source tarball hosted on the project's own GitHub repository, installs static plasmoid files which are non-executable data, and has no remote code execution or supply-chain risks.

1 higher static finding superseded - not the current verdict (shown for transparency)
Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

1# Maintainer: Winícius Cota <winicius.cota@gmail.com>
2pkgname=plasma6-applets-ha-pages
3_pkgname=plasma-ha-pages
4_appid=io.github.winiciuscota.hapages
5pkgver=1.0.0
6pkgrel=1
7pkgdesc="KDE Plasma 6 widget showing Home Assistant dashboard sections as pages, read live from Lovelace"
8arch=('any')
9url="https://github.com/winiciuscota/plasma-ha-pages"
10license=('GPL-3.0-or-later')
11depends=('plasma-workspace' 'qt6-websockets' 'kwallet')
12source=("$_pkgname-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz")
13sha256sums=('4dd4551154351bfa6b6d8e056231061a73f7d2a3c4ba2364b50953aeb4754854')
14
15package() {
16 cd "$srcdir/$_pkgname-$pkgver"
17 local _dest="$pkgdir/usr/share/plasma/plasmoids/$_appid"
18 install -dm755 "$_dest"
19 cp -r package/. "$_dest/"
20 find "$_dest" -type d -exec chmod 755 {} +
21 find "$_dest" -type f -exec chmod 644 {} +
22 install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
23 install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
24}
25

Scan history

Scanned at (UTC)SeverityRules
2026-11-02 00:26:00 Clean 2
2026-11-01 22:01:45 Low 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion