proton-drive-for-linux-bin

LOW

maintainer Narl 1 votes scanned 2026-09-21 11:34:50.247705

View on AUR

Why flagged

Package bundles prebuilt binaries from the project's own GitHub release, which is a normal distribution method for unofficial clients; the source is plausibly owned by the maintainer and checksums are provided, but the binaries are not built from source, representing a typical supply-chain risk for AUR binary packages.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package bundles prebuilt binaries from the project's own GitHub release, which is a normal distribution method for unofficial clients; the source is plausibly owned by the maintainer and checksums are provided, but the binaries are not built from source, representing a typical supply-chain risk for AUR binary packages.

PKGBUILD

      1# Maintainer: Nils Pukropp <contact@narl.io>
    
      2
    
      3pkgname=proton-drive-for-linux-bin
    
      4pkgver=1.11.1
    
      5pkgrel=1
    
      6pkgdesc="Unofficial Proton Drive client: FUSE files-on-demand mount, CLI, GTK4 app, tray (binaries)"
    
      7arch=('x86_64')
    
      8url="https://github.com/narrrl/proton-drive-linux"
    
      9license=('MIT')
    
      10depends=('fuse3' 'gtk4' 'libadwaita' 'webkitgtk-6.0' 'dbus' 'gcc-libs' 'glibc'
    
      11         'hicolor-icon-theme')
    
      12optdepends=('perl-image-exiftool: thumbnails for camera RAW files'
    
      13            'gnome-keyring: credential storage over the Secret Service API'
    
      14            'kwallet: credential storage over the Secret Service API'
    
      15            'xdg-utils: "Open folder" action in the tray menu'
    
      16            'fzf: search-as-you-type launcher (pdfs-prompt --fzf)'
    
      17            'foot: terminal that hosts pdfs-prompt --fzf when started from a keybinding')
    
      18provides=("${pkgname%-bin}=$pkgver" "proton-drive-linux=$pkgver" 'pdfs')
    
      19conflicts=('proton-drive-linux' 'proton-drive-for-linux' 'proton-drive-for-linux-git')
    
      20# Upstream ships the binaries already built on Ubuntu 24.04; do not rewrite them.
    
      21options=('!strip' '!debug')
    
      22_tag="v$pkgver"
    
      23_raw="https://raw.githubusercontent.com/narrrl/proton-drive-linux/$_tag"
    
      24# The release tarball holds the four binaries only, so the desktop integration
    
      25# files come straight from the tagged tree.
    
      26source=("proton-drive-linux-$pkgver-x86_64.tar.gz::$url/releases/download/$_tag/proton-drive-linux-$pkgver-x86_64.tar.gz"
    
      27        "io.narl.proton-drive-linux.desktop::$_raw/packaging/io.narl.proton-drive-linux.desktop"
    
      28        "io.narl.proton-drive-linux-tray.desktop::$_raw/packaging/io.narl.proton-drive-linux-tray.desktop"
    
      29        "io.narl.proton-drive-linux.svg::$_raw/packaging/io.narl.proton-drive-linux.svg"
    
      30        "proton-drive.service::$_raw/packaging/proton-drive.service"
    
      31        "LICENSE-$pkgver::$_raw/LICENSE")
    
      32sha256sums=('5fa20a17c0068ad1d74c51eb081b7e36c24b6bf18c4cb0e0b90d2e1c1d40c56f'
    
      33            '034083fd2f77b0b69ae638fdaba2bd772209ca325a78ca17d050f221cab9650b'
    
      34            '5c369d689926cbbd64803b55a9a6010ad59aded6c7bcfb3e8bd005c95ac10cc8'
    
      35            '2bfdef503b4ac02f047adb022e02e81099970589f9d776c821b7751f1be6c12a'
    
      36            '25fa3bd9ba52df534be9d8bc66f77d7502fe1423177237d0d14b673dedeb1b60'
    
      37            '02c419e7f9af08dda720e4f852f3e57cf5a69e192605440f750e9d244fa2817c')
    
      38
    
      39package() {
    
      40  install -Dm755 "$srcdir/pdfs"        "$pkgdir/usr/bin/pdfs"
    
      41  install -Dm755 "$srcdir/pdfs-tray"   "$pkgdir/usr/bin/pdfs-tray"
    
      42  install -Dm755 "$srcdir/pdfs-app"    "$pkgdir/usr/bin/pdfs-app"
    
      43  install -Dm755 "$srcdir/pdfs-prompt" "$pkgdir/usr/bin/pdfs-prompt"
    
      44
    
      45  install -Dm644 "$srcdir/io.narl.proton-drive-linux.desktop" \
    
      46    "$pkgdir/usr/share/applications/io.narl.proton-drive-linux.desktop"
    
      47  install -Dm644 "$srcdir/io.narl.proton-drive-linux-tray.desktop" \
    
      48    "$pkgdir/etc/xdg/autostart/io.narl.proton-drive-linux-tray.desktop"
    
      49  install -Dm644 "$srcdir/io.narl.proton-drive-linux.svg" \
    
      50    "$pkgdir/usr/share/icons/hicolor/scalable/apps/io.narl.proton-drive-linux.svg"
    
      51
    
      52  # systemd user unit for the auto-mount daemon; enabled per user, not by pacman.
    
      53  install -Dm644 "$srcdir/proton-drive.service" \
    
      54    "$pkgdir/usr/lib/systemd/user/proton-drive.service"
    
      55
    
      56  install -Dm644 "$srcdir/LICENSE-$pkgver" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      57}
    
      58

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-21 11:34:50	Low	2