restray

LOW

maintainer Celti 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

Package builds from source tarball hosted on tangled.org (a code forge) with a proper b2sum checksum; the non-standard host is plausibly the project's own forge, no prebuilt binaries are downloaded or executed, and the build process is straightforward Go compilation.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 80%): Package builds from source tarball hosted on tangled.org (a code forge) with a proper b2sum checksum; the non-standard host is plausibly the project's own forge, no prebuilt binaries are downloaded or executed, and the build process is straightforward Go compilation.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 source=("$pkgname-v$pkgver.tar.gz::https://tangled.org/devins.page/$pkgname/archive/refs/tags/v$pkgver.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Celti B. <celti@celti.name>
    
      2
    
      3pkgname=restray
    
      4pkgver=0.23.1
    
      5pkgrel=1
    
      6pkgdesc='powerful but friendly backup program that runs in your tray, powered by restic'
    
      7arch=('x86_64')
    
      8url='https://devins.page/restray'
    
      9license=('GPL-3.0-only')
    
      10depends=('glibc' 'hicolor-icon-theme' 'restic')
    
      11makedepends=('go' 'imagemagick')
    
      12source=("$pkgname-v$pkgver.tar.gz::https://tangled.org/devins.page/$pkgname/archive/refs/tags/v$pkgver.tar.gz")
    
      13b2sums=('b5fdbef863461838e92492418f7f7cab8ff58bc2c0795d8f2d5b95750c24c7bc9709b9afb377cd8581adb2bad10ce8017102d0efb2f6ba00ab6cd760892482d2')
    
      14
    
      15prepare() {
    
      16  cd "${pkgname}-v${pkgver}"
    
      17  export GOPATH="${srcdir}"
    
      18  go mod download -modcacherw
    
      19}
    
      20
    
      21build() {
    
      22  cd "$pkgname-v$pkgver"
    
      23  export CGO_CPPFLAGS="${CPPFLAGS}"
    
      24  export CGO_CFLAGS="${CFLAGS}"
    
      25  export CGO_CXXFLAGS="${CXXFLAGS}"
    
      26  export CGO_LDFLAGS="${LDFLAGS}"
    
      27  export GOPATH="${srcdir}"
    
      28  export GOFLAGS="-buildmode=pie -trimpath -ldflags=-linkmode=external -mod=readonly -modcacherw"
    
      29  go build -o build/ ./cmd/...
    
      30}
    
      31
    
      32check() {
    
      33  cd "$pkgname-v$pkgver"
    
      34  go test ./...
    
      35}
    
      36
    
      37package() {
    
      38  cd "$pkgname-v$pkgver"
    
      39  install -Dm755 build/$pkgname "$pkgdir"/usr/bin/$pkgname
    
      40  install -Dm644 packaging/linux/$pkgname-user.service "$pkgdir"/usr/lib/systemd/user/$pkgname.service
    
      41  install -Dm644 -t "$pkgdir"/usr/lib/systemd/system/ packaging/linux/$pkgname.service
    
      42  install -Dm644 -t "$pkgdir"/usr/share/applications/ packaging/linux/$pkgname.desktop
    
      43  install -Dm644 -t "$pkgdir"/usr/share/icons/hicolor/1024x1024/apps/ packaging/linux/$pkgname.png
    
      44
    
      45  for size in 16 24 32 48 64 128 256 512; do
    
      46    install -dm755 "$pkgdir"/usr/share/icons/hicolor/${size}x${size}/apps
    
      47    magick packaging/linux/$pkgname.png -resize ${size}x${size} \
    
      48      "$pkgdir"/usr/share/icons/hicolor/${size}x${size}/apps/$pkgname.png
    
      49  done
    
      50}
    
      51

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	3
2026-10-16 00:12:47	Low	3
2026-10-15 00:28:05	Low	3
2026-10-14 00:06:47	Low	3
2026-10-13 05:17:17	Low	3
2026-10-13 05:15:42	Medium	2