sealantern-connect

maintainer Kercy · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads prebuilt .deb files from the project's official GitHub releases, which is a normal source for binaries; the files are verified with fixed, project-provided checksums, and the build process only extracts and installs them without executing remote code or introducing untrusted dependencies.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt .deb files from the project's official GitHub releases, which is a normal source for binaries; the files are verified with fixed, project-provided checksums, and the build process only extracts and installs them without executing remote code or introducing untrusted dependencies.

PKGBUILD

      1pkgname=sealantern-connect
    
      2pkgver=0.3.0
    
      3pkgrel=1
    
      4pkgdesc='Lightweight Minecraft Java Edition P2P multiplayer client powered by sculk'
    
      5arch=('x86_64' 'aarch64')
    
      6url='https://github.com/SeaLantern-Studio/SeaLantern-Connect'
    
      7license=('AGPL-3.0-only')
    
      8depends=('glibc' 'gcc-libs' 'webkit2gtk-4.1' 'gtk3' 'libayatana-appindicator' 'librsvg')
    
      9options=('!strip')
    
      10source_x86_64=('sealantern-connect-0.3.0-x86_64.deb::https://github.com/SeaLantern-Studio/SeaLantern-Connect/releases/download/v0.3.0/SeaLantern.Connect_0.3.0_amd64.deb')
    
      11source_aarch64=('sealantern-connect-0.3.0-aarch64.deb::https://github.com/SeaLantern-Studio/SeaLantern-Connect/releases/download/v0.3.0/SeaLantern.Connect_0.3.0_arm64.deb')
    
      12sha256sums_x86_64=('e90314475f29975357f7b1c981fd2e9f4d546a770807f111f5b38b91b4a1cd46')
    
      13sha256sums_aarch64=('1fbc144f472798115644cbd43bc4f82033571ebf1b09b62a92177fdeca6e70dc')
    
      14
    
      15package() {
    
      16  local deb
    
      17  case "${CARCH}" in
    
      18    x86_64) deb='sealantern-connect-0.3.0-x86_64.deb' ;;
    
      19    aarch64) deb='sealantern-connect-0.3.0-aarch64.deb' ;;
    
      20    *) return 1 ;;
    
      21  esac
    
      22
    
      23  local unpack_dir="${srcdir}/deb-data"
    
      24  rm -rf "${unpack_dir}"
    
      25  mkdir -p "${unpack_dir}"
    
      26  bsdtar -xf "${srcdir}/${deb}" -C "${unpack_dir}"
    
      27
    
      28  local data_tar
    
      29  data_tar="$(find "${unpack_dir}" -maxdepth 1 -type f -name 'data.tar.*' -print -quit)"
    
      30  if [[ -z "${data_tar}" ]]; then
    
      31    echo "failed to locate data.tar.* in ${deb}" >&2
    
      32    return 1
    
      33  fi
    
      34  bsdtar -xf "${data_tar}" -C "${pkgdir}"
    
      35}
    
      36

Changes since previous scan

--- PKGBUILD @ 2026-07-31 05:17
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,5 +1,5 @@
 pkgname=sealantern-connect
-pkgver=0.1.1
+pkgver=0.3.0
 pkgrel=1
 pkgdesc='Lightweight Minecraft Java Edition P2P multiplayer client powered by sculk'
 arch=('x86_64' 'aarch64')
@@ -7,16 +7,16 @@
 license=('AGPL-3.0-only')
 depends=('glibc' 'gcc-libs' 'webkit2gtk-4.1' 'gtk3' 'libayatana-appindicator' 'librsvg')
 options=('!strip')
-source_x86_64=('sealantern-connect-0.1.1-x86_64.deb::https://github.com/SeaLantern-Studio/SeaLantern-Connect/releases/download/v0.1.1/SeaLantern.Connect_0.1.1_amd64.deb')
-source_aarch64=('sealantern-connect-0.1.1-aarch64.deb::https://github.com/SeaLantern-Studio/SeaLantern-Connect/releases/download/v0.1.1/SeaLantern.Connect_0.1.1_arm64.deb')
-sha256sums_x86_64=('e53a5002463fbcff29aae21139045f7421bd9d1454d31d19ea92863d3adef415')
-sha256sums_aarch64=('ededfec3a5cf0a703aaa63741ccd26c73ed7edbead2a2b39bbcab12090ccb542')
+source_x86_64=('sealantern-connect-0.3.0-x86_64.deb::https://github.com/SeaLantern-Studio/SeaLantern-Connect/releases/download/v0.3.0/SeaLantern.Connect_0.3.0_amd64.deb')
+source_aarch64=('sealantern-connect-0.3.0-aarch64.deb::https://github.com/SeaLantern-Studio/SeaLantern-Connect/releases/download/v0.3.0/SeaLantern.Connect_0.3.0_arm64.deb')
+sha256sums_x86_64=('e90314475f29975357f7b1c981fd2e9f4d546a770807f111f5b38b91b4a1cd46')
+sha256sums_aarch64=('1fbc144f472798115644cbd43bc4f82033571ebf1b09b62a92177fdeca6e70dc')
 
 package() {
   local deb
   case "${CARCH}" in
-    x86_64) deb='sealantern-connect-0.1.1-x86_64.deb' ;;
-    aarch64) deb='sealantern-connect-0.1.1-aarch64.deb' ;;
+    x86_64) deb='sealantern-connect-0.3.0-x86_64.deb' ;;
+    aarch64) deb='sealantern-connect-0.3.0-aarch64.deb' ;;
     *) return 1 ;;
   esac
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 13:18:10	LOW	2
2026-07-31 05:17:13	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 19:16:23	LOW	2
2026-07-30 15:15:12	LOW	2