qimgv-gtk-bin

LOW

maintainer TheElevatedOne 0 votes scanned 2026-11-01 12:00:25.775195

View on AUR

Why flagged

The package installs a prebuilt binary from the project's own GitHub releases, which is normal for -bin packages; the source is verifiable and matches the project, but has few votes and is recently uploaded, slightly increasing supply-chain risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's own GitHub releases, which is normal for -bin packages; the source is verifiable and matches the project, but has few votes and is recently uploaded, slightly increasing supply-chain risk.

PKGBUILD

      1# Maintainer: TheElevatedOne <adam.mlady@elevated.ovh>
    
      2
    
      3pkgname=qimgv-gtk-bin
    
      4_pkgname=qimgv-gtk
    
      5pkgver=0.1.0
    
      6pkgrel=1
    
      7pkgdesc='Fast and easy to use image viewer, GTK 3 rewrite of qimgv with JPEG XL, AVIF, HEIF, APNG and RAW support (prebuilt)'
    
      8arch=('x86_64')
    
      9url='https://github.com/TheElevatedOne/qimgv-gtk'
    
      10license=('GPL-3.0-or-later')
    
      11depends=('gcc-libs' 'glibc' 'glib2' 'gtk3' 'cairo' 'pango' 'gdk-pixbuf2' 'libjpeg-turbo' 'libpng' 'libwebp'
    
      12         'libjxl' 'libavif' 'libheif' 'libraw' 'exiv2' 'giflib' 'zlib')
    
      13provides=("$_pkgname=$pkgver" 'qimgv')
    
      14conflicts=("$_pkgname" 'qimgv')
    
      15# The release binary is built on Arch Linux by the GitHub workflow and already stripped.
    
      16options=('!debug' '!strip')
    
      17# Release tags have no "v" prefix.
    
      18source_x86_64=("$url/releases/download/$pkgver/$_pkgname-$pkgver-linux-x86_64.tar.gz")
    
      19sha256sums_x86_64=('6e9d4231dc679b83913246be7ee11f41d525e17e79595871f49ea9dc75ea5460')
    
      20
    
      21package() {
    
      22  cd "$_pkgname-$pkgver-linux-$CARCH"
    
      23  install -Dm755 bin/qimgv -t "$pkgdir/usr/bin"
    
      24  find share -type f -exec install -Dm644 {} "$pkgdir/usr/{}" \;
    
      25  install -Dm644 README.md CHANGELOG.md -t "$pkgdir/usr/share/doc/$_pkgname"
    
      26  install -Dm644 LICENSE -t "$pkgdir/usr/share/licenses/$pkgname"
    
      27}
    
      28

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-01 12:00:25	Low	2