routine-notify-bin

LOW

maintainer kurojs 0 votes scanned 2026-11-06 06:11:22.019786

View on AUR

Why flagged

The package installs a prebuilt Electron app from a GitHub release, which is a common but unverifiable binary distribution method; however, it comes from the project's official repository and installs no remote code or scripts, limiting risk to the binary itself.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt Electron app from a GitHub release, which is a common but unverifiable binary distribution method; however, it comes from the project's official repository and installs no remote code or scripts, limiting risk to the binary itself.

PKGBUILD

      1# Maintainer: Kuro <kurojs@github>
    
      2
    
      3pkgname=routine-notify-bin
    
      4_pkgname=routine-notify
    
      5pkgver=2.1.0
    
      6pkgrel=2
    
      7pkgdesc="Daily routine notification manager with scheduled reminders, AI messages and voice"
    
      8arch=('x86_64')
    
      9url="https://github.com/kurojs/RoutineNotify"
    
      10license=('MIT')
    
      11depends=('gtk3' 'libnotify' 'nss' 'libxss' 'libxtst' 'xdg-utils' 'at-spi2-core' 'util-linux-libs' 'libsecret')
    
      12optdepends=('libappindicator-gtk3: system tray icon support')
    
      13provides=("${_pkgname}")
    
      14conflicts=("${_pkgname}")
    
      15options=('!strip' '!debug')
    
      16noextract=("${_pkgname}_${pkgver}_amd64.deb")
    
      17source=("${_pkgname}_${pkgver}_amd64.deb::${url}/releases/download/v${pkgver}/${_pkgname}_${pkgver}_amd64.deb"
    
      18        "LICENSE-${pkgver}::https://raw.githubusercontent.com/kurojs/RoutineNotify/v${pkgver}/LICENSE")
    
      19sha256sums=('3bab3847318f9f352483e08a33f2e06e72961b7dcd2c7739e88bd9bb98310683'
    
      20            '0245351174201391368c8b9ab56925b0f66f5042d0e606ab638f2a1247dbd6ed')
    
      21
    
      22package() {
    
      23  bsdtar -xOf "${srcdir}/${_pkgname}_${pkgver}_amd64.deb" data.tar.xz \
    
      24    | bsdtar -xf - -C "${pkgdir}" --no-same-owner
    
      25
    
      26  # Electron's SUID sandbox helper
    
      27  chmod 4755 "${pkgdir}/opt/RoutineNotify/chrome-sandbox"
    
      28
    
      29  # Launcher in PATH
    
      30  install -dm755 "${pkgdir}/usr/bin"
    
      31  ln -s /opt/RoutineNotify/routine-notify "${pkgdir}/usr/bin/${_pkgname}"
    
      32
    
      33  # Debian-specific changelog is not needed
    
      34  rm -rf "${pkgdir}/usr/share/doc"
    
      35
    
      36  install -Dm644 "${srcdir}/LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      37}
    
      38

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-06 06:11:22	Low	2