podium-bin

LOW

maintainer lucasion 0 votes scanned 2026-09-25 13:11:58.025550

View on AUR

Why flagged

The package installs a prebuilt binary from the project's own GitHub releases, which is normal for Electron apps; the source is verifiable and the checksum is provided, making it low risk despite the untrusted host pattern.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's own GitHub releases, which is normal for Electron apps; the source is verifiable and the checksum is provided, making it low risk despite the untrusted host pattern.

PKGBUILD

      1# Maintainer: Lucasion <ion@ionnet.dev>
    
      2pkgname=podium-bin
    
      3_pkgname=podium
    
      4pkgver=0.1.1
    
      5pkgrel=1
    
      6pkgdesc='Open-source, local-first game clipping: an instant replay buffer, global hotkeys and a clip library (prebuilt)'
    
      7arch=('x86_64')
    
      8url='https://github.com/LucasionGS/podium'
    
      9license=('GPL-3.0-or-later')
    
      10# Electron's runtime libraries (as in electron-builder.yml); gpu-screen-recorder does the capturing.
    
      11depends=('gtk3' 'nss' 'libxss' 'libnotify' 'alsa-lib' 'at-spi2-core' 'libxkbcommon' 'mesa' 'libcups'
    
      12  'gpu-screen-recorder')
    
      13provides=("$_pkgname")
    
      14conflicts=("$_pkgname")
    
      15# Electron ships prebuilt, already-stripped binaries.
    
      16options=('!strip' '!debug')
    
      17# The pacman package the release workflow builds with electron-builder.
    
      18source=("$_pkgname-$pkgver.pacman::$url/releases/download/v$pkgver/$_pkgname-$pkgver.pacman")
    
      19noextract=("$_pkgname-$pkgver.pacman")
    
      20# publish.sh fills in the checksum of each release.
    
      21sha256sums=('5ae303861eb9992c319e4889190100ee47567aa10c0f95a8e24ebf1f3f5f17bb')
    
      22
    
      23package() {
    
      24  # Install its files, minus its pacman metadata; this PKGBUILD provides its own.
    
      25  bsdtar -xf "$_pkgname-$pkgver.pacman" -C "$pkgdir" \
    
      26    --exclude .PKGINFO --exclude .MTREE --exclude .INSTALL --exclude .BUILDINFO
    
      27  # electron-builder's install script creates this link at install time; ship it in the package instead.
    
      28  install -d "$pkgdir/usr/bin"
    
      29  ln -s "/opt/Podium/$_pkgname" "$pkgdir/usr/bin/$_pkgname"
    
      30}
    
      31

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-25 13:11:58	Low	2