seraph-git

LOW

maintainer raphamzn 0 votes scanned 2026-08-30 03:41:10.150702

View on AUR

Why flagged

The package builds from source using git repositories with SKIP'd checksums, but all sources are from legitimate project and contributor GitHub accounts; no remote code execution or malicious payloads are present, though checksums should be added for better integrity.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source using git repositories with SKIP'd checksums, but all sources are from legitimate project and contributor GitHub accounts; no remote code execution or malicious payloads are present, though checksums should be added for better integrity.

PKGBUILD

      1# Maintainer: Raphael <raphamzn@gmail.com>
    
      2pkgname=seraph-git
    
      3pkgver=r319.gc112121
    
      4pkgrel=1
    
      5pkgdesc="A lightweight Qt6/QML file manager for Hyprland"
    
      6arch=('x86_64' 'aarch64')
    
      7url="https://github.com/raphamzn/seraph"
    
      8license=('MIT')
    
      9depends=(
    
      10    'glib2'
    
      11    'kwindowsystem'
    
      12    'qt6-base'
    
      13    'qt6-declarative'
    
      14    'qt6-svg'
    
      15    'qt6-wayland'
    
      16    'fd'
    
      17    'xdg-utils'
    
      18)
    
      19makedepends=(
    
      20    'cmake'
    
      21    'ninja'
    
      22    'git'
    
      23)
    
      24optdepends=(
    
      25    'wl-clipboard: clipboard support via wl-copy and wl-paste'
    
      26    'bat: syntax-highlighted text previews'
    
      27    'gvfs: remote filesystem support via gio/gvfs (sftp, ftp, dav, etc.)'
    
      28    'gvfs-smb: SMB/CIFS remote browsing support'
    
      29    'ffmpeg: video thumbnails and audio/video metadata (via ffprobe)'
    
      30    'poppler: PDF thumbnails, previews, and metadata (via pdftoppm/pdfinfo)'
    
      31    'perl-image-exiftool: EXIF metadata for images (via exiftool)'
    
      32    'udisks2: mount/unmount devices from sidebar'
    
      33)
    
      34provides=("seraph=${pkgver}")
    
      35conflicts=('seraph')
    
      36source=(
    
      37    "${pkgname}::git+https://github.com/raphamzn/seraph.git"
    
      38    "quill-icons::git+https://github.com/soyeb-jim285/quill-icons.git"
    
      39    "quill::git+https://github.com/soyeb-jim285/quill.git"
    
      40)
    
      41sha256sums=('SKIP' 'SKIP' 'SKIP')
    
      42
    
      43pkgver() {
    
      44    cd "${pkgname}"
    
      45    printf "r%s.g%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      46}
    
      47
    
      48prepare() {
    
      49    cd "${pkgname}"
    
      50    git submodule init
    
      51    git config submodule.src/qml/icons.url "${srcdir}/quill-icons"
    
      52    git config submodule.src/qml/Quill.url "${srcdir}/quill"
    
      53    git -c protocol.file.allow=always submodule update
    
      54}
    
      55
    
      56build() {
    
      57    cmake -B build -S "${pkgname}" -G Ninja \
    
      58        -DCMAKE_BUILD_TYPE=Release \
    
      59        -DCMAKE_INSTALL_PREFIX=/usr \
    
      60        -DBUILD_TESTS=OFF \
    
      61        -DSERAPH_DATA_DIR=/usr/share/seraph
    
      62    cmake --build build --parallel
    
      63}
    
      64
    
      65package() {
    
      66    # Install the compiled binary
    
      67    install -Dm755 "build/src/seraph" "${pkgdir}/usr/bin/seraph"
    
      68
    
      69    # Install themes — loaded via applicationDirPath()/../themes → /usr/share/seraph/themes
    
      70    install -dm755 "${pkgdir}/usr/share/seraph/themes"
    
      71    install -Dm644 "${pkgname}/themes/"*.toml \
    
      72        -t "${pkgdir}/usr/share/seraph/themes/"
    
      73
    
      74    # Install QML module metadata (needed for loadFromModule to find Seraph)
    
      75    install -Dm644 "build/src/Seraph/qmldir" \
    
      76        "${pkgdir}/usr/share/seraph/Seraph/qmldir"
    
      77    install -Dm644 "build/src/Seraph/seraph.qmltypes" \
    
      78        "${pkgdir}/usr/share/seraph/Seraph/seraph.qmltypes" 2>/dev/null || true
    
      79
    
      80    # Install QML sources for Quill module
    
      81    install -dm755 "${pkgdir}/usr/share/seraph/src"
    
      82    cp -r "${pkgname}/src/qml" "${pkgdir}/usr/share/seraph/src/qml"
    
      83
    
      84    # Quill's standalone demo imports Quickshell, which Seraph does not use and
    
      85    # does not depend on. It is not registered in Quill's qmldir, so dropping it
    
      86    # keeps namcap from reporting a missing quickshell dependency.
    
      87    rm -rf "${pkgdir}/usr/share/seraph/src/qml/Quill/Showcase.qml" \
    
      88           "${pkgdir}/usr/share/seraph/src/qml/Quill/showcase"
    
      89
    
      90    # Install desktop entry, icon and AppStream metainfo
    
      91    install -Dm644 "${pkgname}/dist/io.github.raphamzn.Seraph.desktop" \
    
      92        "${pkgdir}/usr/share/applications/io.github.raphamzn.Seraph.desktop"
    
      93    install -Dm644 "${pkgname}/dist/io.github.raphamzn.Seraph.svg" \
    
      94        "${pkgdir}/usr/share/icons/hicolor/scalable/apps/io.github.raphamzn.Seraph.svg"
    
      95    install -Dm644 "${pkgname}/dist/io.github.raphamzn.Seraph.metainfo.xml" \
    
      96        "${pkgdir}/usr/share/metainfo/io.github.raphamzn.Seraph.metainfo.xml"
    
      97
    
      98    # Install license
    
      99    install -Dm644 "${pkgname}/LICENSE" \
    
      100        "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      101}
    
      102

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-30 03:41:10	Low	2