shorin-niri-gitee-git
LOW
maintainer jxc
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package sources code from a non-whitelisted but plausibly project-maintained Gitee repository; it builds and installs dotfiles, scripts, and wallpapers without executing remote code or introducing unverifiable binaries, resulting in low risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package sources code from a non-whitelisted but plausibly project-maintained Gitee repository; it builds and installs dotfiles, scripts, and wallpapers without executing remote code or introducing unverifiable binaries, resulting in low risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:49
"git+https://gitee.com/jxc20120414/shorin-niri.git"
PKGBUILD
1 offending line(s) highlighted
1
#我经过shorin本人同意后，把本aur包需要的源代码上传至gitee，并且修改 了源代码获取的地址，把2个aur依赖需要的源代码上传至gitee，并且修改了依赖名为我上传的aur包，其他无改动，我的邮箱：3824280949@qq.com
2
# Maintainer: shorin <2433516202@qq.com>
3
pkgname=shorin-niri-gitee-git
4
pkgver=r1.1234567
5
pkgrel=29
6
pkgdesc="Shorin Niri Desktop Environment"
7
arch=('any')
8
url="https://github.com/SHORiN-KiWATA/shorin-niri"
9
license=('GPL')
10
11
# 核心依赖：桌面能够成功运行的底线包，以及脚本执行必须的工具
12
depends=(
13
'bash' 'curl'
14
'niri' 'nirius' 'mako' 'polkit-gnome' 'xdg-desktop-portal-gnome' 'xwayland-satellite' 'swayidle'
15
'fuzzel-ime-gitee-git' 'libnotify' 'brightnessctl' 'cava' 'cliphist' 'wl-clipboard'
16
'grim' 'slurp' 'hyprlock' 'hyprpicker' 'swayosd' 'awww' 'waybar' 'matugen' 'cliphist-tui-gitee-git'
17
)
18
19
# 可选依赖：仅供 pacman 和网页展示参考，实际由 shorinniri 脚本全自动比对安装
20
optdepends=(
21
'breeze-cursors: Cursor theme' 'mpv: Media player'
22
'noto-fonts: Base fonts' 'noto-fonts-cjk: CJK fonts' 'noto-fonts-emoji: Emoji fonts'
23
'ttf-jetbrains-mono-nerd: Nerd fonts' 'ttf-jetbrains-maple-mono-nf-xx-xx: Custom font' 'ttf-lxgw-wenkai-screen: Chinese font'
24
'nautilus: File manager' 'thunar: Alternative file manager' 'file-roller: Archive manager'
25
'icoextract: exe thumbnailer'
26
'gvfs-smb: SMB support' 'gvfs-mtp: MTP support' 'gvfs-gphoto2: PTP support'
27
'nautilus-open-any-terminal: Nautilus terminal extension' 'gnome-keyring: Keyring service'
28
'tumbler: Thumbnail service' 'poppler-glib: PDF rendering' 'ffmpegthumbnailer: Video thumbnails'
29
'webp-pixbuf-loader: WebP support' 'libgsf: File format support' 'xdg-desktop-portal-gtk: GTK portal'
30
'gst-plugins-base: GStreamer' 'gst-plugins-good: GStreamer' 'gst-libav: GStreamer'
31
'thunar-archive-plugin: Thunar plugin' 'thunar-volman: Thunar volume manager'
32
'bat: Cat clone' 'bazaar: Version control' 'bluetui: Bluetooth TUI' 'clipnotify: Clipboard notify'
33
'xclip: X11 clipboard' 'eza: ls replacement' 'fish: Shell' 'starship: Shell prompt' 'zoxide: cd replacement'
34
'satty: Screenshot editor' 'wf-recorder: Screen recorder' 'wl-screenrec-git: Screen recorder'
35
'chafa: Terminal image viewer' 'timg: Terminal image viewer' 'imv: Image viewer' 'imagemagick: Image tools'
36
'waifu2x-ncnn-vulkan: Image upscaler' 'jq: JSON processor' 'nwg-look: GTK settings' 'pacman-contrib: Pacman tools'
37
'wlsunset: Gamma adjustment' 'pavucontrol: Audio control' 'downgrade: Package downgrade'
38
'strace: System call tracer' 'xdg-terminal-exec: XDG terminal' 'kitty: Terminal emulator' 'firefox: Web browser'
39
'fastfetch: System info' 'btop: Resource monitor' 'gdu: Disk usage' 'opencode: Code opener'
40
'shorin-contrib-git: Shorin tools' 'clipsync-git: Clipboard sync' 'ddcutil-service: DDC util'
41
'python-pywalfox: Firefox theming' 'waypaper-git: Wallpaper setter' 'niri-sidebar-git: Sidebar'
42
'wl-longshot-git: Screenshot tool' 'shorin-screenrec-menu-git: Screen record menu'
43
'fcitx5: Input method' 'rime-wanxiang-gram-zh-hans: better ime model' 'fcitx5-configtool: Fcitx5 config' 'fcitx5-gtk: Fcitx5 GTK' 'fcitx5-qt: Fcitx5 QT'
44
'fcitx5-rime: Fcitx5 Rime' 'rime-ice-git: Rime dict' 'rime-wubi: Rime wubi'
45
)
46
makedepends=('git')
47
48
source=(
49
"git+https://gitee.com/jxc20120414/shorin-niri.git"
50
)
51
sha256sums=('SKIP')
52
53
pkgver() {
54
cd "$srcdir/shorin-niri"
55
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
56
}
57
58
package() {
59
cd "$srcdir/shorin-niri"
60
61
local target_dir="$pkgdir/usr/share/shorin-niri"
62
install -dm755 "$target_dir"
63
64
# 拷贝 dotfiles
65
if [[ -d "dotfiles" ]]; then
66
cp -a dotfiles/. "$target_dir/"
67
else
68
echo "Error: 'dotfiles' directory not found in the git repository."
69
exit 1
70
fi
71
72
# 拷贝 Wallpapers 到独立的共享目录
73
local wp_dir="$pkgdir/usr/share/shorin-niri-wallpapers"
74
install -dm755 "$wp_dir"
75
if [[ -d "Wallpapers" ]]; then
76
cp -a Wallpapers/. "$wp_dir/"
77
else
78
echo "Warning: 'Wallpapers' directory not found in the git repository, skipping..."
79
fi
80
81
# 安装配套的 CLI 脚本
82
if [[ -f "shorinniri" ]]; then
83
install -Dm755 shorinniri "$pkgdir/usr/bin/shorinniri"
84
else
85
echo "Error: 'shorinniri' script not found."
86
exit 1
87
fi
88
89
if [[ -f "README-Niri.txt" ]]; then
90
install -Dm644 "README-Niri.txt" "$pkgdir/usr/share/doc/shorin-niri/README-Niri.txt"
91
fi
92
}
93
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |