shorin-niri-gitee-git

maintainer jxc · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package sources code from a non-whitelisted but plausibly project-maintained Gitee repository; it builds and installs dotfiles, scripts, and wallpapers without executing remote code or introducing unverifiable binaries, resulting in low risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package sources code from a non-whitelisted but plausibly project-maintained Gitee repository; it builds and installs dotfiles, scripts, and wallpapers without executing remote code or introducing unverifiable binaries, resulting in low risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:49 "git+https://gitee.com/jxc20120414/shorin-niri.git"

PKGBUILD

1 offending line(s) highlighted
1#我经过shorin本人同意后,把本aur包需要的源代码上传至gitee,并且修改 了源代码获取的地址,把2个aur依赖需要的源代码上传至gitee,并且修改了依赖名为我上传的aur包,其他无改动,我的邮箱:3824280949@qq.com
2# Maintainer: shorin <2433516202@qq.com>
3pkgname=shorin-niri-gitee-git
4pkgver=r1.1234567
5pkgrel=29
6pkgdesc="Shorin Niri Desktop Environment"
7arch=('any')
8url="https://github.com/SHORiN-KiWATA/shorin-niri"
9license=('GPL')
10
11# 核心依赖:桌面能够成功运行的底线包,以及脚本执行必须的工具
12depends=(
13 'bash' 'curl'
14 'niri' 'nirius' 'mako' 'polkit-gnome' 'xdg-desktop-portal-gnome' 'xwayland-satellite' 'swayidle'
15 'fuzzel-ime-gitee-git' 'libnotify' 'brightnessctl' 'cava' 'cliphist' 'wl-clipboard'
16 'grim' 'slurp' 'hyprlock' 'hyprpicker' 'swayosd' 'awww' 'waybar' 'matugen' 'cliphist-tui-gitee-git'
17)
18
19# 可选依赖:仅供 pacman 和网页展示参考,实际由 shorinniri 脚本全自动比对安装
20optdepends=(
21 'breeze-cursors: Cursor theme' 'mpv: Media player'
22 'noto-fonts: Base fonts' 'noto-fonts-cjk: CJK fonts' 'noto-fonts-emoji: Emoji fonts'
23 'ttf-jetbrains-mono-nerd: Nerd fonts' 'ttf-jetbrains-maple-mono-nf-xx-xx: Custom font' 'ttf-lxgw-wenkai-screen: Chinese font'
24 'nautilus: File manager' 'thunar: Alternative file manager' 'file-roller: Archive manager'
25 'icoextract: exe thumbnailer'
26 'gvfs-smb: SMB support' 'gvfs-mtp: MTP support' 'gvfs-gphoto2: PTP support'
27 'nautilus-open-any-terminal: Nautilus terminal extension' 'gnome-keyring: Keyring service'
28 'tumbler: Thumbnail service' 'poppler-glib: PDF rendering' 'ffmpegthumbnailer: Video thumbnails'
29 'webp-pixbuf-loader: WebP support' 'libgsf: File format support' 'xdg-desktop-portal-gtk: GTK portal'
30 'gst-plugins-base: GStreamer' 'gst-plugins-good: GStreamer' 'gst-libav: GStreamer'
31 'thunar-archive-plugin: Thunar plugin' 'thunar-volman: Thunar volume manager'
32 'bat: Cat clone' 'bazaar: Version control' 'bluetui: Bluetooth TUI' 'clipnotify: Clipboard notify'
33 'xclip: X11 clipboard' 'eza: ls replacement' 'fish: Shell' 'starship: Shell prompt' 'zoxide: cd replacement'
34 'satty: Screenshot editor' 'wf-recorder: Screen recorder' 'wl-screenrec-git: Screen recorder'
35 'chafa: Terminal image viewer' 'timg: Terminal image viewer' 'imv: Image viewer' 'imagemagick: Image tools'
36 'waifu2x-ncnn-vulkan: Image upscaler' 'jq: JSON processor' 'nwg-look: GTK settings' 'pacman-contrib: Pacman tools'
37 'wlsunset: Gamma adjustment' 'pavucontrol: Audio control' 'downgrade: Package downgrade'
38 'strace: System call tracer' 'xdg-terminal-exec: XDG terminal' 'kitty: Terminal emulator' 'firefox: Web browser'
39 'fastfetch: System info' 'btop: Resource monitor' 'gdu: Disk usage' 'opencode: Code opener'
40 'shorin-contrib-git: Shorin tools' 'clipsync-git: Clipboard sync' 'ddcutil-service: DDC util'
41 'python-pywalfox: Firefox theming' 'waypaper-git: Wallpaper setter' 'niri-sidebar-git: Sidebar'
42 'wl-longshot-git: Screenshot tool' 'shorin-screenrec-menu-git: Screen record menu'
43 'fcitx5: Input method' 'rime-wanxiang-gram-zh-hans: better ime model' 'fcitx5-configtool: Fcitx5 config' 'fcitx5-gtk: Fcitx5 GTK' 'fcitx5-qt: Fcitx5 QT'
44 'fcitx5-rime: Fcitx5 Rime' 'rime-ice-git: Rime dict' 'rime-wubi: Rime wubi'
45)
46makedepends=('git')
47
48source=(
49 "git+https://gitee.com/jxc20120414/shorin-niri.git"
50)
51sha256sums=('SKIP')
52
53pkgver() {
54 cd "$srcdir/shorin-niri"
55 printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
56}
57
58package() {
59 cd "$srcdir/shorin-niri"
60
61 local target_dir="$pkgdir/usr/share/shorin-niri"
62 install -dm755 "$target_dir"
63
64 # 拷贝 dotfiles
65 if [[ -d "dotfiles" ]]; then
66 cp -a dotfiles/. "$target_dir/"
67 else
68 echo "Error: 'dotfiles' directory not found in the git repository."
69 exit 1
70 fi
71
72 # 拷贝 Wallpapers 到独立的共享目录
73 local wp_dir="$pkgdir/usr/share/shorin-niri-wallpapers"
74 install -dm755 "$wp_dir"
75 if [[ -d "Wallpapers" ]]; then
76 cp -a Wallpapers/. "$wp_dir/"
77 else
78 echo "Warning: 'Wallpapers' directory not found in the git repository, skipping..."
79 fi
80
81 # 安装配套的 CLI 脚本
82 if [[ -f "shorinniri" ]]; then
83 install -Dm755 shorinniri "$pkgdir/usr/bin/shorinniri"
84 else
85 echo "Error: 'shorinniri' script not found."
86 exit 1
87 fi
88
89 if [[ -f "README-Niri.txt" ]]; then
90 install -Dm644 "README-Niri.txt" "$pkgdir/usr/share/doc/shorin-niri/README-Niri.txt"
91 fi
92}
93

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion