remotrix-git

LOW
maintainer zxp19821005 0 votes scanned 2026-10-17 00:21:55.226236
View on AUR
Why flagged

The package builds from source via git from the project's official GitHub repository, which is normal for AUR packages; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source via git from the project's official GitHub repository, which is normal for AUR packages; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
2pkgname=remotrix-git
3_pkgname=Remotrix
4pkgver=0.6.0.beta.4.r0.g97823a1
5pkgrel=1
6pkgdesc="A Rust-native desktop download manager inspired by Motrix, built with the iced GUI framework."
7arch=('x86_64')
8url="https://github.com/lazy1104/Remotrix"
9license=('MIT')
10provides=("${pkgname%-git}")
11conflicts=("${pkgname%-git}")
12depends=(
13 'glibc'
14 'gtk3'
15)
16makedepends=(
17 'git'
18 'rustup'
19 'gendesk'
20)
21source=("${pkgname//-/.}::git+${url}.git")
22sha256sums=('SKIP')
23_get_project_dir() {
24 local d
25 while IFS= read -r d; do
26 [ -f "$d/Cargo.toml" ] && [ -d "$d/src" ] && { echo "$d"; return; }
27 done < <(find "${srcdir}" -maxdepth 1 -mindepth 1 -type d ! -name '.*')
28}
29pkgver() {
30 cd "$(_get_project_dir)"
31 set -o pipefail
32 git describe --long --tags --abbrev=7 | sed 's/\([^-]*-g\)/r\1/;s/-/./g;s/v//g' ||
33 printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
34}
35_set_build_env() {
36 export HOME="${srcdir}/.home"
37 export CARGO_HOME="${HOME}/.cargo"
38 export CARGO_NET_GIT_FETCH_WITH_CLI=true
39 export CARGO_NET_RETRY=5
40 export CARGO_HTTP_MULTIPLEXING=false
41 export CARGO_INCREMENTAL=0
42 export CARGO_TERM_COLOR=never
43 export CARGO_PROFILE_RELEASE_STRIP=symbols
44 mkdir -p "${HOME}" "${CARGO_HOME}"
45}
46build() {
47 cd "$(_get_project_dir)"
48 _set_build_env
49 gendesk -q -f -n \
50 --pkgname="${pkgname%-git}" \
51 --pkgdesc="${pkgdesc}" \
52 --categories="Network" \
53 --name="${_pkgname}" \
54 --exec="${pkgname%-git} %U"
55 rustup toolchain install stable
56 rustup default stable
57 cargo build --profile dist --locked
58}
59package() {
60 install -Dm755 "$(_get_project_dir)/target/dist/${pkgname%-git}" -t "${pkgdir}/usr/bin"
61 install -Dm755 "$(_get_project_dir)/assets/icon.png" -t "${pkgdir}/usr/share/icons/hicolor/256x256/apps/${pkgname%-git}.png"
62 install -Dm755 "$(_get_project_dir)/${pkgname%-git}.desktop" -t "${pkgdir}/usr/share/applications/"
63 install -Dm644 "$(_get_project_dir)/LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}"
64}

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 01:21:20 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion