shorin-dux-niri-git

LOW

maintainer shorin 0 votes scanned 2026-10-27 13:48:00.041465

View on AUR

Why flagged

The package builds from a public Git repository with a SKIP'd checksum, but only installs dotfiles and a shell script; no untrusted prebuilt binaries or remote code execution.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package builds from a public Git repository with a SKIP'd checksum, but only installs dotfiles and a shell script; no untrusted prebuilt binaries or remote code execution.

PKGBUILD

      1# Maintainer: shorin <2433516202@qq.com>
    
      2pkgname=shorin-dux-niri-git
    
      3pkgver=r147.abb38cb
    
      4pkgrel=1
    
      5pkgdesc="Shorin Dux Shell (DMS) Niri desktop environment (Core Configs & Installer)"
    
      6arch=('any')
    
      7url="https://github.com/SHORiN-KiWATA/shorin-dux-niri"
    
      8license=('GPL')
    
      9provides=('shorin-dms-niri-git' 'shorin-dms-niri-meta' 'shorin-dms-niri-dotfiles-git')
    
      10conflicts=('shorin-dms-niri-git' 'shorin-dms-niri-meta' 'shorin-dms-niri-dotfiles-git')
    
      11replaces=('shorin-dms-niri-git')
    
      12
    
      13# 核心底线依赖：桌面环境能够成功启动的必需品
    
      14depends=(
    
      15    'bash' 'dux-shell' 'niri' 'xdg-desktop-portal-gnome' 'xwayland-satellite'
    
      16    'libnotify' 'power-profiles-daemon' 'wl-clipboard' 'cliphist' 'cava'
    
      17    'dgop' 'dsearch' 'qt5-multimedia' 'cups-pk-helper' 'kimageformats' 
    
      18)
    
      19
    
      20# 可选依赖：仅作为展示和 pacman 的参考。实际安装由 shorindms 脚本接管
    
      21optdepends=(
    
      22    'satty: Screenshot editor' 'slurp: Region selector' 'imv: Image viewer' 'mpv: Video player' 'firefox: Web browser'
    
      23    'noto-fonts: Fonts' 'noto-fonts-cjk: CJK fonts' 'noto-fonts-emoji: Emoji fonts'
    
      24    'ffmpegthumbnailer: Thumbnails' 'gvfs-smb: SMB support' 'nautilus-open-any-terminal: Nautilus extension'
    
      25    'icoextract: exe thumbnailer'
    
      26    'file-roller: Archive manager' 'gnome-keyring: Keyring service' 'gst-plugins-base: GStreamer'
    
      27    'gst-plugins-good: GStreamer' 'gst-libav: GStreamer' 'nautilus: File manager'
    
      28    'xdg-desktop-portal-gtk: GTK portal' 'thunar: File manager' 'tumbler: Thumbnail service'
    
      29    'poppler-glib: PDF rendering' 'thunar-archive-plugin: Thunar plugin' 'thunar-volman: Thunar volume manager'
    
      30    'gvfs-mtp: MTP support' 'gvfs-gphoto2: PTP support' 'webp-pixbuf-loader: WebP support' 'libgsf: File format support'
    
      31    'kitty: Terminal emulator' 'xdg-terminal-exec: XDG terminal' 'bat: Cat clone' 'fuzzel: App launcher'
    
      32    'wf-recorder: Screen recorder' 'wl-screenrec-git: Screen recorder' 'ttf-jetbrains-maple-mono-nf-xx-xx: Custom font'
    
      33    'eza: ls replacement' 'zoxide: cd replacement' 'starship: Shell prompt' 'jq: JSON processor' 'fish: Shell'
    
      34    'timg: Image viewer in terminal' 'imagemagick: Image manipulation' 'shorin-contrib-git: Shorin tools'
    
      35    'fastfetch: System info' 'gdu: Disk usage' 'btop: Resource monitor'
    
      36    'shorin-screenrec-menu-git: Screen record menu' 'flatpak: Package management' 'bazaar: Flatpak app store'
    
      37    'matugen: Material You colors' 'adw-gtk-theme: GTK theme' 'python-pywalfox: Firefox theme tool'
    
      38    'nwg-look: GTK settings' 'breeze-cursors: Cursor theme' 'fcitx5: Input method framework' 'rime-wanxiang-gram-zh-hans: better ime model'
    
      39    'fcitx5-configtool: Fcitx5 GUI' 'fcitx5-gtk: Fcitx5 GTK' 'fcitx5-qt: Fcitx5 QT' 'fcitx5-rime: Fcitx5 Rime'
    
      40    'rime-ice-git: Rime dict' 'rime-wubi: Rime Wubi'
    
      41)
    
      42
    
      43makedepends=('git')
    
      44
    
      45# 修改点 1：增加 gram 文件直链
    
      46source=(
    
      47    "git+https://github.com/SHORiN-KiWATA/shorin-dux-niri.git"
    
      48)
    
      49
    
      50# 修改点 2：为新加的 gram 文件增加 SKIP
    
      51sha256sums=('SKIP')
    
      52
    
      53pkgver() {
    
      54    cd "$srcdir/shorin-dux-niri"
    
      55    printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      56}
    
      57
    
      58package() {
    
      59    cd "$srcdir/shorin-dux-niri"
    
      60
    
      61    local target_dir="$pkgdir/usr/share/shorin-dux-niri"
    
      62    install -dm755 "$target_dir"
    
      63    
    
      64    # 拷贝 dotfiles
    
      65    if [[ -d "dotfiles" ]]; then
    
      66        cp -a dotfiles/. "$target_dir/"
    
      67    else
    
      68        echo "Error: 'dotfiles' directory not found in the git repository."
    
      69        exit 1
    
      70    fi
    
      71
    
      72    # 安装 shorindms CLI 工具
    
      73    if [[ -f "shorindms" ]]; then
    
      74        install -Dm755 shorindms "$pkgdir/usr/bin/shorindms"
    
      75    else
    
      76        echo "Error: 'shorindms' script not found."
    
      77        exit 1
    
      78    fi
    
      79
    
      80    if [[ -f "README-DMS.md" ]]; then
    
      81        install -Dm644 "README-DMS.md" "$pkgdir/usr/share/doc/shorin-dux-niri/README-DMS.md"
    
      82    fi
    
      83}
    
      84

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-27 13:48:00	Low	2