razer-control-revived-bin
MEDIUM
maintainer eslamallam
0 votes
scanned 2026-09-09 17:19:54.604292
Why flagged
The package downloads a prebuilt .deb binary from a GitHub release, which is an unverifiable executable from a potentially swappable host, creating a supply-chain risk if the source is compromised.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Medium
AI review of an ambiguous pattern
llm_review
The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 95%): The package downloads a prebuilt .deb binary from a GitHub release, which is an unverifiable executable from a potentially swappable host, creating a supply-chain risk if the source is compromised.
PKGBUILD
1
# Maintainer: Eslam Allam eslamallam73@gmail.com
2
_pkgname=razer-control-revived
3
pkgname=${_pkgname}-bin
4
conflicts=()
5
pkgver=0.3.5
6
pkgrel=1
7
pkgdesc="revived version of an old software to support 2025 Razer Blade 16 with newer UI etc... (Experiemental but works)"
8
arch=('x86_64')
9
url="https://github.com/encomjp/razer-control-revived"
10
license=('GPL-2.0') # Change as needed
11
depends=('rust' 'gtk4' 'libadwaita' 'hidapi')
12
source=("${_pkgname}-${pkgver}.deb::${url}/releases/download/v${pkgver}/razercontrol-revived_${pkgver}_amd64.deb" "${_pkgname}.install")
13
sha256sums=('d4302b4f58b90d4bf6a7f976a69be380229b12cbce287e86f1ef515e22b85dc9' '36fa36453407cc44fd8ad1b86b3ddeae8ce87955dc89891e18ac5a8edebe2877')
14
install="${_pkgname}.install"
15
package() {
16
bsdtar -xOf "$srcdir/${_pkgname}-${pkgver}.deb" data.tar.zst | bsdtar -C "$pkgdir" -xv
17
ln -s "$pkgdir/usr/bin/razer-daemon" "$pkgdir/usr/share/razercontrol/daemon"
18
}
19
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-09 17:19:54 | Medium | 2 |