progress-sync-agent-bin

LOW

maintainer zxp19821005 0 votes scanned 2026-08-27 01:31:41.788738

View on AUR

Why flagged

The package installs a prebuilt RPM from the project's official GitHub releases, which is normal for binary packages; the source is verifiable and checksummed, and no malicious behavior or remote code execution is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt RPM from the project's official GitHub releases, which is normal for binary packages; the source is verifiable and checksummed, and no malicious behavior or remote code execution is present.

PKGBUILD

      1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
    
      2pkgname=progress-sync-agent-bin
    
      3pkgver=1.9.15
    
      4_electronversion=40
    
      5pkgrel=1
    
      6pkgdesc="A small application that runs on your computer and keeps your files in sync with the Nuclia cloud."
    
      7arch=("x86_64")
    
      8url="https://github.com/nuclia/sync-agent"
    
      9license=('MIT')
    
      10provides=("${pkgname%-bin}=${pkgver}")
    
      11conflicts=("${pkgname%-bin}")
    
      12depends=(
    
      13    "electron${_electronversion}"
    
      14)
    
      15source=(
    
      16    "${pkgname%-bin}-${pkgver}.rpm::${url}/releases/download/${pkgver}/${pkgname%-bin}-${pkgver}-1.${CARCH}.rpm"
    
      17    "${pkgname%-bin}.sh"
    
      18)
    
      19sha256sums=('d86c9abdc78584722c239a4633305f892b079473c6c54bbb567292aca506247f'
    
      20            'a774c2f54fbbeeaac3cefc0f7250796d30c86d27f0fd40b7eaf9c0fdb021623d')
    
      21_get_app_dir() {
    
      22    find "${srcdir}" -type f -name "resources.pak" -exec dirname {} + | head -n 1
    
      23}
    
      24_check_electron_version() {
    
      25    echo "Verifying Electron version..."
    
      26    local _main_exe=$(find "$(_get_app_dir)" -maxdepth 1 -type f -executable -printf '%s %p\n' | sort -nr | head -1 | cut -d' ' -f2-)
    
      27    [[ -z "${_main_exe}" ]] && echo -e "\033[1;33mNote: Could not find Electron binary.\033[0m" && return
    
      28    local _elec_ver=$(strings "${_main_exe}" | grep -oP 'Electron/\K[0-9]+' | head -1)
    
      29    [[ -z "${_elec_ver}" ]] && echo -e "\033[1;33mNote: Could not determine Electron version.\033[0m" && return
    
      30    [[ "${_elec_ver}" != "${_electronversion}" ]] &&
    
      31        echo -e "\033[1;31mWarning: Electron version mismatch! Detected: ${_elec_ver}, Expected: ${_electronversion}\033[0m" ||
    
      32        echo -e "Electron version verified: \033[1;31m${_elec_ver}\033[0m"
    
      33}
    
      34prepare() {
    
      35    sed -i -e "
    
      36        s/@electronversion@/${_electronversion}/g
    
      37        s/@appname@/${pkgname%-bin}/g
    
      38        s/@runname@/app.asar/g
    
      39        s/@cfgdirname@/${pkgname%-bin}/g
    
      40    " "${srcdir}/${pkgname%-bin}.sh"
    
      41    _check_electron_version
    
      42}
    
      43package() {
    
      44    install -Dm755 "${srcdir}/${pkgname%-bin}.sh" "${pkgdir}/usr/bin/${pkgname%-bin}"
    
      45    install -Dm755 -d "${pkgdir}/usr/lib/${pkgname%-bin}"
    
      46	local _app_dir=$(_get_app_dir)
    
      47	cp -a "${_app_dir}/resources/"* "${pkgdir}/usr/lib/${pkgname%-bin}/"
    
      48    install -Dm644 "${srcdir}/usr/share/applications/${pkgname%-bin}.desktop" -t "${pkgdir}/usr/share/applications"
    
      49    install -Dm644 "${srcdir}/usr/share/doc/${pkgname%-bin}/copyright" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      50    install -Dm644 "${srcdir}/usr/share/pixmaps/${pkgname%-bin}.png" -t "${pkgdir}/usr/share/pixmaps"
    
      51}

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-27 01:31:41	Low	2