singularity-desktop-git

maintainer orphaned · 1 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package builds from source hosted on GitHub repositories owned by the project organization, with no remote code execution or untrusted prebuilt binaries; the low severity is due to skipped checksums and recent upload with few votes, but the build process itself is transparent and uses legitimate project sources.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on GitHub repositories owned by the project organization, with no remote code execution or untrusted prebuilt binaries; the low severity is due to skipped checksums and recent upload with few votes, but the build process itself is transparent and uses legitimate project sources.

PKGBUILD

      1_pkgname=singularity-desktop
    
      2pkgname="$_pkgname-git"
    
      3pkgver=0.1.0.r205.gf407e8d
    
      4pkgrel=1
    
      5pkgdesc='The Singularity Desktop Environment'
    
      6arch=('x86_64' 'aarch64')
    
      7url='https://github.com/singularityos-lab/singularity-desktop'
    
      8license=('GPL-3.0-or-later')
    
      9
    
      10depends=(
    
      11  at-spi2-core
    
      12  cairo
    
      13  fontconfig
    
      14  gdk-pixbuf2
    
      15  glib2
    
      16  gnome-online-accounts
    
      17  gstreamer
    
      18  gst-plugins-base-libs
    
      19  gtk4
    
      20  gtk4-layer-shell
    
      21  gtksourceview5
    
      22  json-glib
    
      23  libdrm
    
      24  libadwaita
    
      25  libdbusmenu-glib
    
      26  libgcrypt
    
      27  libgee
    
      28  libgudev
    
      29  libinput
    
      30  libnm
    
      31  libpeas-2
    
      32  libpng
    
      33  libpulse
    
      34  libsecret
    
      35  libsodium
    
      36  libsoup3
    
      37  librsvg
    
      38  libxcrypt
    
      39  libxml2
    
      40  libxcb
    
      41  libxkbcommon
    
      42  pango
    
      43  pam
    
      44  polkit
    
      45  poppler-glib
    
      46  tinysparql
    
      47  upower
    
      48  vte4
    
      49  wayland
    
      50  webkitgtk-6.0
    
      51)
    
      52
    
      53makedepends=(
    
      54  gettext
    
      55  git
    
      56  go
    
      57  gobject-introspection
    
      58  meson
    
      59  ninja
    
      60  python
    
      61  sassc
    
      62  scdoc
    
      63  vala
    
      64  wayland-protocols
    
      65)
    
      66
    
      67provides=("$_pkgname=$pkgver")
    
      68conflicts=(
    
      69  "$_pkgname"
    
      70  gnome-keyring
    
      71  labwc
    
      72)
    
      73replaces=(gnome-keyring)
    
      74
    
      75source=(
    
      76  "$_pkgname::git+https://github.com/singularityos-lab/singularity-desktop.git"
    
      77  'vetro::git+https://github.com/singularityos-lab/vetro.git#commit=0a7bd367676f67e1c15a304ba135fe6fecdbc604'
    
      78)
    
      79
    
      80sha256sums=('SKIP' 'SKIP')
    
      81
    
      82pkgver() {
    
      83  cd "$srcdir/$_pkgname"
    
      84
    
      85  if git describe --long --tags --abbrev=7 >/dev/null 2>&1; then
    
      86    git describe --long --tags --abbrev=7 |
    
      87      sed 's/^v//;s/([^-]*-g)/r\1/;s/-/./g'
    
      88  else
    
      89    printf "0.1.0.r%s.g%s" \
    
      90      "$(git rev-list --count HEAD)" \
    
      91      "$(git rev-parse --short=7 HEAD)"
    
      92  fi
    
      93}
    
      94
    
      95prepare() {
    
      96  cd "$srcdir/$_pkgname"
    
      97  git submodule update --init --recursive
    
      98}
    
      99
    
      100build() {
    
      101  mkdir -p "$srcdir/bin" "$srcdir/gopath"
    
      102
    
      103  cd "$srcdir/vetro"
    
      104  GOPATH="$srcdir/gopath" go build -trimpath -o "$srcdir/bin/vetro" .
    
      105
    
      106  cd "$srcdir/$_pkgname"
    
      107
    
      108  export PATH="$srcdir/bin:$PATH"
    
      109
    
      110  meson setup build \
    
      111    --prefix=/usr \
    
      112    --buildtype=release \
    
      113    --wrap-mode=nodownload \
    
      114    -Dinstaller=false
    
      115
    
      116  meson compile -C build
    
      117}
    
      118
    
      119package() {
    
      120  cd "$srcdir/$_pkgname"
    
      121
    
      122  DESTDIR="$pkgdir" meson install -C build
    
      123
    
      124  install -Dm644 /dev/stdin \
    
      125    "$pkgdir/usr/share/wayland-sessions/singularity.desktop" <<'EOF'
    
      126[Desktop Entry]
    
      127Name=Singularity
    
      128Comment=The Singularity Desktop Environment
    
      129Exec=/usr/bin/singularity-labwc-session
    
      130TryExec=/usr/bin/singularity-labwc-session
    
      131Type=Application
    
      132DesktopNames=Singularity
    
      133EOF
    
      134
    
      135  if [ -f LICENSE ]; then
    
      136    install -Dm644 LICENSE \
    
      137      "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      138  fi
    
      139}
    
      140

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 00:03:41	LOW	2
2026-08-13 00:17:07	LOW	2
2026-08-12 00:27:08	LOW	2
2026-08-11 17:21:34	LOW	2