screen-lens-bin

LOW

maintainer komagata 0 votes scanned 2026-09-11 19:26:32.240845

View on AUR

Why flagged

All sources have SHA256 checksums; wheels come from official PyPI infrastructure and ONNX models from modelscope.cn match the RapidOCR project's official model repository — no obfuscation, exfiltration, or unverified executables, though bundling prebuilt wheels is slightly unusual packaging practice.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 75%): All sources have SHA256 checksums; wheels come from official PyPI infrastructure and ONNX models from modelscope.cn match the RapidOCR project's official model repository — no obfuscation, exfiltration, or unverified executables, though bundling prebuilt wheels is slightly unusual packaging practice.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:22 'https://www.modelscope.cn/models/RapidAI/RapidOCR/resolve/v3.9.2/onnx/PP-OCRv5/det/ch_PP-OCRv5_det_mobile.onnx'

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: komagata
    
      2pkgname=screen-lens-bin
    
      3pkgver=0.2.0
    
      4pkgrel=1
    
      5pkgdesc='Image-context desktop translation with an Omarchy panel'
    
      6arch=('x86_64')
    
      7url='https://github.com/komagata/screen-lens'
    
      8license=('MIT' 'Apache-2.0')
    
      9provides=('screen-lens')
    
      10conflicts=('screen-lens')
    
      11depends=('python>=3.14' 'python<3.15' 'python-numpy' 'python-opencv'
    
      12         'python-pillow' 'python-shapely' 'python-pyclipper' 'python-six'
    
      13         'python-omegaconf' 'python-requests' 'python-colorlog' 'python-tqdm'
    
      14         'python-flatbuffers' 'python-protobuf' 'python-packaging'
    
      15         'python-gobject' 'python-cairo' 'libsecret' 'noto-fonts-cjk'
    
      16         'quickshell' 'hyprland' 'grim' 'imagemagick' 'libnotify' 'libgcc')
    
      17options=('!strip' '!debug')
    
      18_commit=b0eabe7bf28ff8cdfd615b30e87dfdeb7b096dce
    
      19source=("screen-lens-$pkgver.tar.gz::$url/archive/$_commit.tar.gz"
    
      20        'ort.whl::https://files.pythonhosted.org/packages/65/54/9f197c578d3d3d7bea16971e233e5483981228eec73748585cf7b5933403/onnxruntime-1.29.0-cp314-cp314-manylinux_2_28_x86_64.whl'
    
      21        'rapid.whl::https://files.pythonhosted.org/packages/55/ed/0ee9b9281986974be9d2406ae0134c8d7c91d2fc613f16ffda9701eeda6f/rapidocr-3.9.2-py3-none-any.whl'
    
      22        'https://www.modelscope.cn/models/RapidAI/RapidOCR/resolve/v3.9.2/onnx/PP-OCRv5/det/ch_PP-OCRv5_det_mobile.onnx'
    
      23        'https://www.modelscope.cn/models/RapidAI/RapidOCR/resolve/v3.9.2/onnx/PP-OCRv6/rec/PP-OCRv6_rec_small.onnx'
    
      24        'https://www.modelscope.cn/models/RapidAI/RapidOCR/resolve/v3.9.2/onnx/PP-OCRv4/cls/ch_ppocr_mobile_v2.0_cls_mobile.onnx')
    
      25noextract=('ort.whl' 'rapid.whl')
    
      26sha256sums=('1090f90c10bf262f2719d54842774476d28a7565e44640fec0180d2dba47e206'
    
      27            '6c0c37b92f67ed68dd36221ce0403e1d9bd4f7efce724439978a2597848530e5'
    
      28            '04d6b8d151f823d930bd91910555f57bea897c0c44fa6794267b94cf9c1ef9a0'
    
      29            '4d97c44a20d30a81aad087d6a396b08f786c4635742afc391f6621f5c6ae78ae'
    
      30            '6f327246b50388f3c176ae304bd95767ea6dc0c9ae92153ef8cbe210b3c14884'
    
      31            'e47acedf663230f8863ff1ab0e64dd2d82b838fceb5957146dab185a89d6215c')
    
      32
    
      33package() {
    
      34  local app="$pkgdir/usr/lib/screen-lens"
    
      35  local tree="$srcdir/screen-lens-$_commit"
    
      36  install -d "$app/runtime" "$app/models" "$pkgdir/usr/bin"
    
      37  for file in "$tree"/*.py; do
    
      38    [[ ${file##*/} == test_* ]] || install -m644 "$file" "$app/"
    
      39  done
    
      40  install -m644 "$tree"/*.qml "$tree/manifest.json" "$app/"
    
      41  cp -r "$tree/panel" "$tree/assets" "$app/"
    
      42  bsdtar -xf "$srcdir/ort.whl" -C "$app/runtime"
    
      43  bsdtar --exclude 'rapidocr/models/*' -xf "$srcdir/rapid.whl" -C "$app/runtime"
    
      44  install -m644 "$srcdir"/*.onnx "$app/models/"
    
      45  printf '%s\n' '{"python":[3,14],"profile":"v5-v6"}' > "$app/runtime-manifest.json"
    
      46  touch "$app/system-package"
    
      47  install -m755 "$tree/packaging/arch/screen-lens" "$pkgdir/usr/bin/screen-lens"
    
      48  install -Dm644 "$tree/packaging/arch/screen-lens.desktop" "$pkgdir/usr/share/applications/screen-lens.desktop"
    
      49  install -Dm644 "$tree/assets/languages.svg" "$pkgdir/usr/share/icons/hicolor/scalable/apps/screen-lens.svg"
    
      50  install -Dm644 "$tree/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      51  install -Dm644 "$tree/README.md" "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      52  chmod -R go-w "$app"
    
      53}
    
      54

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-11 19:26:32	Low	3
2026-09-11 19:23:32	Medium	3