quran-reader-bin

maintainer ahmad_sk · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package installs a prebuilt binary from the project's official GitHub release, which is a normal distribution method for Tauri apps; while the host is not whitelisted, it is plausibly the project's own source, and no malicious behavior or code execution beyond standard packaging is present.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub release, which is a normal distribution method for Tauri apps; while the host is not whitelisted, it is plausibly the project's own source, and no malicious behavior or code execution beyond standard packaging is present.

PKGBUILD

      1# Maintainer: Ahmad bin Marakkar <ahmadshabeerk786@gmail.com>
    
      2
    
      3pkgname=quran-reader-bin
    
      4_pkgname=quran-reader
    
      5pkgver=0.1.6
    
      6pkgrel=1
    
      7pkgdesc='A beautiful, fast, offline-first Quran reader'
    
      8arch=('x86_64')
    
      9url='https://github.com/ask-786/quran-reader'
    
      10license=('MIT')
    
      11depends=('webkit2gtk-4.1' 'gtk3' 'hicolor-icon-theme')
    
      12optdepends=('xdg-utils: open external links in a browser')
    
      13provides=("$_pkgname=$pkgver")
    
      14conflicts=("$_pkgname")
    
      15# Prebuilt and already stripped upstream; nothing for makepkg to do to it.
    
      16options=('!strip' '!debug')
    
      17source=("$pkgname-$pkgver.deb::$url/releases/download/v$pkgver/Quran.Reader_${pkgver}_amd64.deb"
    
      18        "LICENSE-$pkgver::https://raw.githubusercontent.com/ask-786/$_pkgname/v$pkgver/LICENSE"
    
      19        "$_pkgname.desktop")
    
      20sha256sums=('a44388e7a4805ec46c9a5bdfa8d0cb20d780e67634ee35e3b6a8dda1c916967d'
    
      21            '7ac4a8c2a9f051e95d1b4aaf77fab3c616837769b82871d37f94a91345df1e34'
    
      22            '3117e16cd8e62a5eb824deb896fc2af63a4703b1af81974435504b40b0908ad5')
    
      23
    
      24package() {
    
      25  # The .deb carries only the binary, a .desktop and three icons — no libraries.
    
      26  bsdtar -xf data.tar.gz -C "$pkgdir"
    
      27
    
      28  # Tauri emits its own .desktop with a space in the filename and an empty
    
      29  # Categories= line — replace it rather than ship it.
    
      30  rm -f "$pkgdir/usr/share/applications/Quran Reader.desktop"
    
      31
    
      32  # Tauri writes the largest icon to "256x256@2", which is not a hicolor size,
    
      33  # so nothing ever reads it. The image itself is 256px; file it as such.
    
      34  local _icons="$pkgdir/usr/share/icons/hicolor"
    
      35  install -dm755 "$_icons/256x256/apps"
    
      36  mv "$_icons/256x256@2/apps/quran-reader.png" "$_icons/256x256/apps/quran-reader.png"
    
      37  rm -rf "$_icons/256x256@2"
    
      38
    
      39  install -Dm644 "$srcdir/$_pkgname.desktop" \
    
      40    "$pkgdir/usr/share/applications/$_pkgname.desktop"
    
      41  install -Dm644 "$srcdir/LICENSE-$pkgver" \
    
      42    "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      43
    
      44  chmod 755 "$pkgdir/usr/bin/quran-reader"
    
      45}
    
      46

Changes since previous scan

--- PKGBUILD @ 2026-08-01 00:11
+++ PKGBUILD @ 2026-08-03 00:08
@@ -2,7 +2,7 @@
 
 pkgname=quran-reader-bin
 _pkgname=quran-reader
-pkgver=0.1.5
+pkgver=0.1.6
 pkgrel=1
 pkgdesc='A beautiful, fast, offline-first Quran reader'
 arch=('x86_64')
@@ -17,7 +17,7 @@
 source=("$pkgname-$pkgver.deb::$url/releases/download/v$pkgver/Quran.Reader_${pkgver}_amd64.deb"
         "LICENSE-$pkgver::https://raw.githubusercontent.com/ask-786/$_pkgname/v$pkgver/LICENSE"
         "$_pkgname.desktop")
-sha256sums=('4c718a0f0d737eb7ca93b036e451b84c3174ceb5736824ac48a1a87b8e246cbf'
+sha256sums=('a44388e7a4805ec46c9a5bdfa8d0cb20d780e67634ee35e3b6a8dda1c916967d'
             '7ac4a8c2a9f051e95d1b4aaf77fab3c616837769b82871d37f94a91345df1e34'
             '3117e16cd8e62a5eb824deb896fc2af63a4703b1af81974435504b40b0908ad5')
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 09:20:18	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 15:12:02	LOW	2
2026-07-29 00:25:53	MEDIUM	2
2026-07-28 11:38:42	MEDIUM	2
2026-07-28 05:37:03	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 19:35:21	LOW	2
2026-07-27 17:35:03	LOW	2