rozelynx-bin

LOW

maintainer burningserenity 0 votes scanned 2026-10-09 00:10:12.535420

View on AUR

Why flagged

The package installs a prebuilt binary from the project's official GitHub releases, which is a common and legitimate practice; the only concern is a low-vote, recently uploaded AUR package, but the source is verifiable and the install script safely sets capabilities without executing remote code.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a common and legitimate practice; the only concern is a low-vote, recently uploaded AUR package, but the source is verifiable and the install script safely sets capabilities without executing remote code.

PKGBUILD

      1# Maintainer: burningserenity <burningserenity@novo-ordo.com>
    
      2
    
      3# RozeLynx from the precompiled release tarballs published upstream: the
    
      4# same dist/rozelynx-<ver>-<arch>.tar.xz the build script's --tarball stage
    
      5# produces, i.e. a complete staged /usr tree built against glibc.
    
      6
    
      7pkgname=rozelynx-bin
    
      8pkgver=156.0.1
    
      9pkgrel=1
    
      10pkgdesc='RozeLynx Web Browser: Firefox fork with LibreWolf privacy patches and per-tab network interface binding (binary release; Wayland-only builds - build rozelynx-git for X11/XWayland)'
    
      11arch=(x86_64)
    
      12url='https://bytewheel.org/rozelynx'
    
      13license=('MPL-2.0' 'GPL-2.0-only' 'LGPL-2.1-only')
    
      14depends=(
    
      15  alsa-lib
    
      16  aom
    
      17  at-spi2-core
    
      18  cairo
    
      19  dav1d
    
      20  dbus
    
      21  ffmpeg
    
      22  fontconfig
    
      23  freetype2
    
      24  gdk-pixbuf2
    
      25  glib2
    
      26  gtk3
    
      27  harfbuzz
    
      28  'icu>=78.1'
    
      29  libdrm
    
      30  libepoxy
    
      31  libevent
    
      32  libjpeg-turbo
    
      33  libpulse
    
      34  libvpx
    
      35  libwebp
    
      36  libx11
    
      37  libxcb
    
      38  libxcomposite
    
      39  libxdamage
    
      40  libxext
    
      41  libxfixes
    
      42  libxrandr
    
      43  mesa
    
      44  'nspr>=4.39'
    
      45  'nss>=3.125'
    
      46  pango
    
      47  pixman
    
      48  zlib
    
      49)
    
      50optdepends=(
    
      51  'libva: VAAPI hardware video decoding'
    
      52  'networkmanager: geolocation via nearby Wi-Fi networks (necko-wifi)'
    
      53  'vulkan-icd-loader: Vulkan rendering (hwaccel vulkantest)'
    
      54)
    
      55provides=("rozelynx=${pkgver}")
    
      56conflicts=(rozelynx)
    
      57install=rozelynx-bin.install
    
      58_tag="v${pkgver}"
    
      59source=("https://github.com/Bytewheel/RozeLynx/releases/download/${_tag}/rozelynx-${pkgver}-${CARCH}.tar.xz")
    
      60sha256sums=('69f9a26c7b86e98e9a3d55f611d2dec24f0d03c0253c8b638957da209d4ad100')
    
      61
    
      62package() {
    
      63  # the tarball contains a complete staged usr/ tree
    
      64  cp -a "${srcdir}/usr" "${pkgdir}/"
    
      65}

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-09 00:10:12	Low	2