satur8-bin

LOW

maintainer nasir91 1 votes scanned 2026-11-06 00:21:40.447623

View on AUR

Why flagged

The package installs prebuilt binaries from a GitHub release by the maintainer, which is a supply-chain risk if the host is compromised, but the source is transparent and the binaries are not executed remotely or obfuscated.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs prebuilt binaries from a GitHub release by the maintainer, which is a supply-chain risk if the host is compromised, but the source is transparent and the binaries are not executed remotely or obfuscated.

PKGBUILD

      1# Maintainer: Nasir A. <112448715+NasirA1991@users.noreply.github.com>
    
      2#
    
      3# Prebuilt binaries from GitHub Actions (Arch container) published as a GitHub
    
      4# Release in NasirA1991/satur8-aur. The .github/workflows/build-bin.yml workflow
    
      5# updates pkgver/pkgrel/sha256sums and publishes this file to the AUR.
    
      6pkgname=satur8-bin
    
      7pkgver=0.3.3
    
      8pkgrel=2
    
      9pkgdesc="Per-game digital vibrance for Linux (prebuilt binaries)"
    
      10arch=('x86_64')
    
      11url="https://github.com/NtrpyDev/satur8"
    
      12license=('GPL-3.0-or-later')
    
      13depends=('fontconfig' 'gcc-libs' 'glibc' 'hicolor-icon-theme')
    
      14optdepends=('kwin: KDE Plasma Wayland backend (saturation effect)'
    
      15            'gnome-shell: GNOME Wayland backend (Shell extension)'
    
      16            'gamescope: universal fallback backend for niche compositors'
    
      17            'nvidia-settings: NVIDIA X11 Digital Vibrance backend')
    
      18provides=('satur8')
    
      19conflicts=('satur8')
    
      20options=('!strip' '!debug')
    
      21source=("$pkgname-v$pkgver-$pkgrel-x86_64.tar.gz::https://github.com/NasirA1991/satur8-aur/releases/download/satur8-bin-v$pkgver-$pkgrel/$pkgname-v$pkgver-$pkgrel-x86_64.tar.gz")
    
      22# Replaced by the build-bin workflow with the checksum of the released tarball.
    
      23sha256sums=('dfb637c6773e71b174f2f3068c39a013c42d8bd8d3083f26994761c19aee9794')
    
      24
    
      25package() {
    
      26    cp -a --no-preserve=ownership usr "$pkgdir/"
    
      27}
    
      28

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-06 00:21:40	Low	2
2026-11-06 00:11:05	Low	2