rowboat-bin

LOW

maintainer jaytau 0 votes scanned 2026-08-26 15:30:31.793073

View on AUR

Why flagged

The package installs a prebuilt binary from the project's official GitHub release page, which is a common and generally trusted practice; while the host is not whitelisted, the source is verifiable and matches the project's official distribution, reducing supply-chain risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub release page, which is a common and generally trusted practice; while the host is not whitelisted, the source is verifiable and matches the project's official distribution, reducing supply-chain risk.

PKGBUILD

      1# SPDX-License-Identifier: 0BSD
    
      2# Maintainer: Joel Tony <github@jaytau.com>
    
      3
    
      4pkgname=rowboat-bin
    
      5pkgver=0.8.9
    
      6pkgrel=1
    
      7pkgdesc='AI coworker with memory'
    
      8arch=('x86_64')
    
      9url='https://www.rowboatlabs.com/'
    
      10license=('Apache-2.0')
    
      11provides=("rowboat=${pkgver}")
    
      12conflicts=('rowboat')
    
      13depends=(
    
      14  'alsa-lib' 'at-spi2-core' 'cairo' 'dbus' 'expat' 'gcc-libs' 'glib2'
    
      15  'gtk3' 'libcups' 'libdrm' 'libnotify' 'libpulse' 'libx11' 'libxcb'
    
      16  'libxcomposite' 'libxdamage' 'libxext' 'libxfixes' 'libxkbcommon'
    
      17  'libxrandr' 'libxt' 'libxtst' 'mesa' 'nspr' 'nss' 'pango' 'systemd-libs'
    
      18  'xdg-utils'
    
      19)
    
      20options=('!debug' '!strip')
    
      21source=("rowboat-linux_${pkgver}_amd64.deb::https://github.com/rowboatlabs/rowboat/releases/download/v${pkgver}/rowboat-linux_${pkgver}_amd64.deb")
    
      22sha256sums=('629747f6109a2bd56d8a76dd3478cf3482ffb0899f9f79c6d534de1ae0fb7187')
    
      23noextract=("rowboat-linux_${pkgver}_amd64.deb")
    
      24
    
      25package() {
    
      26  bsdtar -xOf "$srcdir/rowboat-linux_${pkgver}_amd64.deb" data.tar.zst |
    
      27    bsdtar --no-same-owner -xf - -C "$pkgdir"
    
      28  rm -rf "$pkgdir/usr/share/lintian"
    
      29  chmod 4755 "$pkgdir/usr/lib/rowboat-linux/chrome-sandbox"
    
      30  ln -s rowboat-linux "$pkgdir/usr/bin/rowboat"
    
      31}
    
      32

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-26 15:30:31	Low	2