scribe-bin

LOW

maintainer somepaulo 0 votes scanned 2026-10-24 19:41:06.850237

View on AUR

Why flagged

The package installs a prebuilt binary from the project's official GitHub release, which is a normal AUR pattern; the only concern is a low-vote, recent upload, but the source is trustworthy and no malicious behavior is evident.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub release, which is a normal AUR pattern; the only concern is a low-vote, recent upload, but the source is trustworthy and no malicious behavior is evident.

PKGBUILD

      1# Maintainer: Paulo Fino <somepaulo@duck.com>
    
      2
    
      3pkgname=scribe-bin
    
      4pkgver=0.3.20
    
      5pkgrel=1
    
      6pkgdesc='A native GNOME Markdown editor that renders your document as you type (upstream binary)'
    
      7arch=('x86_64')
    
      8url='https://github.com/gnacho/scribe'
    
      9license=('AGPL-3.0-or-later')
    
      10depends=(
    
      11  'cairo'
    
      12  'enchant'
    
      13  'gdk-pixbuf2'
    
      14  'glib2'
    
      15  'glibc>=2.34'
    
      16  'graphene'
    
      17  'gtk4>=4.14'
    
      18  'gtksourceview5>=5.10'
    
      19  'hicolor-icon-theme'
    
      20  'libadwaita>=1.5'
    
      21  'libgcc'
    
      22  'pango'
    
      23)
    
      24provides=("scribe=$pkgver")
    
      25conflicts=('scribe' 'scribe-git')
    
      26options=('!strip' '!debug')
    
      27
    
      28_debrel=1
    
      29_debfile="scribe_${pkgver}-${_debrel}_amd64.deb"
    
      30source=(
    
      31  "https://github.com/gnacho/scribe/releases/download/v${pkgver}/${_debfile}"
    
      32  # The 0.3.20 .deb omits the new symbolic application icon.
    
      33  "scribe-${pkgver}-symbolic.svg::https://raw.githubusercontent.com/gnacho/scribe/v${pkgver}/data/icons/hicolor/symbolic/apps/io.github.gnacho.Scribe-symbolic.svg"
    
      34)
    
      35noextract=("$_debfile")
    
      36sha256sums=(
    
      37  'ba778a65eda0ecd186dffedf126e38f3581dc8c7c8abe6cb6d9fac2f88b2e54c'
    
      38  '4c2870aeb700ce429d98e6e9a17229517d1bdf676c5a6043e76c4cecfc26e4eb'
    
      39)
    
      40
    
      41package() {
    
      42  bsdtar -xf "$srcdir/$_debfile" -C "$srcdir" data.tar.xz
    
      43  bsdtar -xf "$srcdir/data.tar.xz" -C "$pkgdir"
    
      44
    
      45  install -Dm644 "$srcdir/scribe-${pkgver}-symbolic.svg" \
    
      46    "$pkgdir/usr/share/icons/hicolor/symbolic/apps/io.github.gnacho.Scribe-symbolic.svg"
    
      47
    
      48  install -d "$pkgdir/usr/share/licenses"
    
      49  mv "$pkgdir/usr/share/doc/scribe" "$pkgdir/usr/share/licenses/$pkgname"
    
      50  rmdir "$pkgdir/usr/share/doc"
    
      51}
    
      52

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-24 19:41:06	Low	2