serein-bin

LOW

maintainer lapsus 0 votes scanned 2026-10-18 01:20:44.235951

View on AUR

Why flagged

The package repackages a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR; the low severity is due to the binary not being built from source and relying on an external release, but it comes from a legitimate and plausibly maintained project source.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package repackages a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR; the low severity is due to the binary not being built from source and relying on an external release, but it comes from a legitimate and plausibly maintained project source.

PKGBUILD

      1# Maintainer: Yakov Till <yakov.till@gmail.com>
    
      2
    
      3_upver='1.0.0-nightly.20261014.58'
    
      4pkgname=serein-bin
    
      5pkgver="${_upver/-/pre.}"
    
      6pkgrel=1
    
      7pkgdesc='Unofficial native Discord client (prebuilt binary)'
    
      8arch=('x86_64')
    
      9url='https://github.com/ViceVerse-cz/Serein'
    
      10license=('MIT' 'Apache-2.0')
    
      11# namcap calls dbus, the gst plugins, libxkbcommon-x11 and xdg-desktop-portal unneeded because
    
      12# they are dlopen'd at runtime: they carry voice, screen sharing and X11 input.
    
      13depends=('alsa-lib' 'dbus' 'glib2' 'glibc' 'gst-plugin-pipewire' 'gst-plugins-base'
    
      14         'gst-plugins-base-libs' 'gst-plugins-good' 'gstreamer' 'gtk4' 'hicolor-icon-theme'
    
      15         'libgcc' 'libpulse' 'libsoup3' 'libstdc++' 'libxkbcommon-x11' 'webkitgtk-6.0'
    
      16         'xdg-desktop-portal')
    
      17optdepends=(
    
      18    'gnome-keyring: Secret Service credential provider'
    
      19    'gst-libav: inline video'
    
      20    'gst-plugins-bad: hardware screen encoding'
    
      21    'xdg-desktop-portal-gtk: screen sharing and global shortcuts on GTK desktops'
    
      22    'xdg-desktop-portal-kde: screen sharing and global shortcuts on KDE Plasma'
    
      23)
    
      24provides=("${pkgname%-bin}")
    
      25conflicts=("${pkgname%-bin}")
    
      26# Upstream's binary ships stripped; !strip keeps it byte-identical, since
    
      27# makepkg's strip rewrites it regardless.
    
      28options=('!strip' '!debug')
    
      29
    
      30# Upstream ships a ready Arch package per nightly; repack it instead of rebuilding.
    
      31_asset="serein-v${_upver}-Linux-arch-serein-${pkgver}-1-${CARCH}.pkg.tar.zst"
    
      32source=("serein-${pkgver}-${CARCH}.pkg.tar.zst::${url}/releases/download/v${_upver}/${_asset}")
    
      33sha256sums=('df7ea65d5e047adcd3c9cdc7555b78c84a5c85f6aa312eeaf2a36864f1157a0d')
    
      34
    
      35latestver() {
    
      36    gh api repos/ViceVerse-cz/Serein/releases?per_page=10 \
    
      37        --jq '[.[].assets[].name | select(test("-Linux-arch-"))][0]' |
    
      38    sed -nE 's/.*-Linux-arch-serein-(.+)-[0-9]+-[^.]+\.pkg\.tar\.zst$/\1/p'
    
      39}
    
      40
    
      41package() {
    
      42    cp -a --no-preserve=ownership usr "$pkgdir/"
    
      43
    
      44    install -Dm644 usr/share/doc/serein/LICENSE-MIT "$pkgdir/usr/share/licenses/$pkgname/LICENSE-MIT"
    
      45}
    
      46

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-18 01:20:44	Low	2