purrtop

LOW

maintainer sizzlebop 0 votes scanned 2026-10-20 19:28:13.414480

View on AUR

Why flagged

The package builds from source hosted on the maintainer's own GitHub repository, which is normal for AUR packages; the only concern is a SKIP'd checksum and few recent votes, but no evidence of malicious behavior or untrusted prebuilt binaries.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package builds from source hosted on the maintainer's own GitHub repository, which is normal for AUR packages; the only concern is a SKIP'd checksum and few recent votes, but no evidence of malicious behavior or untrusted prebuilt binaries.

PKGBUILD

      1# Maintainer: Pink Pixel <admin@pinkpixel.dev>
    
      2
    
      3pkgname=purrtop
    
      4pkgver=1.0.0
    
      5pkgrel=1
    
      6pkgdesc='A colorful system monitor and task manager for Linux'
    
      7arch=('x86_64')
    
      8url='https://github.com/pinkpixel-dev/purrtop'
    
      9license=('Apache-2.0')
    
      10depends=(
    
      11  'freetype2'
    
      12  'glibc'
    
      13  'hicolor-icon-theme'
    
      14  'libgcc'
    
      15  'libglvnd'
    
      16  'libxcb'
    
      17  'libxkbcommon'
    
      18  'libxkbcommon-x11'
    
      19  'polkit'
    
      20  'systemd'
    
      21  'vulkan-driver'
    
      22  'vulkan-icd-loader'
    
      23  'wayland'
    
      24)
    
      25makedepends=('cargo' 'git')
    
      26# makepkg's C LTO breaks wayland-backend's C shim (undefined wl_log_trampoline_to_rust_client).
    
      27options=('!lto')
    
      28optdepends=(
    
      29  'elfutils: create process samples (eu-stack)'
    
      30  'glib2: Move to Trash on the Disk Space page (gio)'
    
      31  'hwdata: GPU names'
    
      32  'iproute2: find hidden port owners (ss)'
    
      33  'iw: Wi-Fi details on System Info'
    
      34  'nvidia-utils: NVIDIA details (NVML)'
    
      35)
    
      36source=("git+https://github.com/pinkpixel-dev/purrtop.git#tag=v$pkgver")
    
      37sha256sums=('SKIP')
    
      38
    
      39prepare() {
    
      40  cd "$pkgname"
    
      41  export RUSTUP_TOOLCHAIN=stable
    
      42  cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      43}
    
      44
    
      45build() {
    
      46  cd "$pkgname"
    
      47  export RUSTUP_TOOLCHAIN=stable
    
      48  export CARGO_TARGET_DIR=target
    
      49  cargo build --frozen --release
    
      50}
    
      51
    
      52package() {
    
      53  cd "$pkgname"
    
      54  install -Dm755 target/release/purrtop "$pkgdir/usr/bin/purrtop"
    
      55  install -Dm755 target/release/purrtop-helper "$pkgdir/usr/lib/purrtop/purrtop-helper"
    
      56  install -Dm644 data/dev.pinkpixel.purrtop.policy "$pkgdir/usr/share/polkit-1/actions/dev.pinkpixel.purrtop.policy"
    
      57  install -Dm644 data/dev.pinkpixel.Purrtop.desktop "$pkgdir/usr/share/applications/dev.pinkpixel.Purrtop.desktop"
    
      58  for icon in data/icons/hicolor/*/apps/dev.pinkpixel.Purrtop.png; do
    
      59    install -Dm644 "$icon" "$pkgdir/usr/share/icons/${icon#data/icons/}"
    
      60  done
    
      61  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      62}
    
      63

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-20 19:28:13	Low	2