skwd-deck-steamworks-bin

LOW

maintainer liixini 0 votes scanned 2026-09-07 03:13:17.703764

View on AUR

Why flagged

Package downloads a prebuilt Arch package from a GitHub release, extracts it, and installs files; while the host is not a standard upstream, it is the project's own repository, and the content is a standard package format, making it a low-risk supply-chain concern despite unverifiable origin.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package downloads a prebuilt Arch package from a GitHub release, extracts it, and installs files; while the host is not a standard upstream, it is the project's own repository, and the content is a standard package format, making it a low-risk supply-chain concern despite unverifiable origin.

PKGBUILD

      1pkgname=skwd-deck-steamworks-bin
    
      2pkgver=1.0.0_beta.9
    
      3pkgrel=1
    
      4pkgdesc='Prebuilt optional Steam Client Workshop backend for Skwd Deck'
    
      5arch=(x86_64)
    
      6url='https://github.com/liixini/skwd-wall'
    
      7license=(LicenseRef-Proprietary)
    
      8options=(!debug !strip)
    
      9depends=(gcc-libs glibc skwd-deck)
    
      10optdepends=('steam: running Steam client used by the backend')
    
      11provides=("skwd-deck-steamworks=$pkgver")
    
      12conflicts=(skwd-deck-steamworks)
    
      13source_x86_64=(
    
      14  'skwd-deck-steamworks-1.0.0_beta.9-1-x86_64.pkg.tar.zst::https://github.com/liixini/skwd-wall/releases/download/v1.0.0-beta.9/skwd-deck-steamworks-1.0.0_beta.9-1-x86_64.pkg.tar.zst'
    
      15)
    
      16noextract=('skwd-deck-steamworks-1.0.0_beta.9-1-x86_64.pkg.tar.zst')
    
      17sha256sums_x86_64=('011cc4d790552bc3b016b27d9e66cbc9716606cc9bc5436b7eea3b8b04550c28')
    
      18
    
      19prepare() {
    
      20  mkdir -p "$srcdir/steamworks"
    
      21  bsdtar -xf "$srcdir/skwd-deck-steamworks-1.0.0_beta.9-1-x86_64.pkg.tar.zst" -C "$srcdir/steamworks" \
    
      22    --exclude .BUILDINFO --exclude .MTREE --exclude .PKGINFO
    
      23}
    
      24
    
      25package() {
    
      26  mkdir -p "$pkgdir/usr"
    
      27  cp -a --no-preserve=ownership "$srcdir/steamworks/usr/." "$pkgdir/usr/"
    
      28}
    
      29

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-07 03:13:17	Low	2