qrious-bin

LOW

maintainer satoki 0 votes scanned 2026-10-06 00:13:36.889724

View on AUR

Why flagged

The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal AUR practice; the low severity is due to the binary nature of the source and unverifiable checksum, but it comes from a trusted project host.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal AUR practice; the low severity is due to the binary nature of the source and unverifiable checksum, but it comes from a trusted project host.

PKGBUILD

      1# Maintainer: Sato Ki <satoki at em dot advant dot click>
    
      2
    
      3# Rendered by packaging/aur/render.sh in the Qrious repository; edit the template
    
      4# there, not this file.
    
      5
    
      6pkgname=qrious-bin
    
      7# The release name as tagged upstream, e.g. 2026.10.0 or 2026.10.0-preview.1.
    
      8_version=2026.10.1
    
      9# The same name without its hyphen, which pkgver may not contain. Glued rather than
    
      10# replaced with "_" so a prerelease sorts below its release in vercmp.
    
      11pkgver=2026.10.1
    
      12pkgrel=1
    
      13pkgdesc="Generate QR codes for WiFi, contacts, URLs, emails, and more"
    
      14arch=('x86_64')
    
      15url="https://github.com/Samwell9854/qrious"
    
      16license=('GPL-3.0-or-later')
    
      17depends=(
    
      18  'at-spi2-core'
    
      19  'cairo'
    
      20  'fontconfig'
    
      21  'gdk-pixbuf2'
    
      22  'glib2'
    
      23  'glibc'
    
      24  'gtk3'
    
      25  'harfbuzz'
    
      26  'hicolor-icon-theme'
    
      27  'libepoxy'
    
      28  'libgcc'
    
      29  'libstdc++'
    
      30  'pango'
    
      31  'zlib'
    
      32)
    
      33optdepends=(
    
      34  'wl-clipboard: copy the QR image on Wayland'
    
      35  'xclip: copy the QR image on X11'
    
      36)
    
      37provides=('qrious')
    
      38conflicts=('qrious')
    
      39# Per-architecture arrays, so another architecture is a second pair beside these.
    
      40_dist="qrious-${_version}-linux"
    
      41source_x86_64=("${_dist}-x86_64.tar.gz::${url}/releases/download/v${_version}/${_dist}-x86_64.tar.gz")
    
      42sha256sums_x86_64=('447f6af4a67ce58c2ac447c5186c7f7c1234fa51bce31db5c7873e45d450a2b4')
    
      43
    
      44package() {
    
      45  cd "${_dist}-${CARCH}"
    
      46
    
      47  # The Flutter bundle finds lib/ and data/ beside the real path of its executable,
    
      48  # so it stays whole under /usr/lib and /usr/bin gets a symlink.
    
      49  install -dm755 "${pkgdir}/usr/lib/qrious"
    
      50  cp -r --no-preserve=ownership bundle/. "${pkgdir}/usr/lib/qrious/"
    
      51  install -dm755 "${pkgdir}/usr/bin"
    
      52  ln -s /usr/lib/qrious/qrious "${pkgdir}/usr/bin/qrious"
    
      53
    
      54  # Desktop entry, AppStream metadata and icons, laid out as under /usr/share.
    
      55  install -dm755 "${pkgdir}/usr/share"
    
      56  cp -r --no-preserve=ownership share/. "${pkgdir}/usr/share/"
    
      57
    
      58  install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      59}
    
      60

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 00:13:36	Low	2
2026-10-05 23:40:58	Low	2