sparkle-rolling-bin
The package installs prebuilt binaries from the project's official GitHub releases, which is normal for -bin packages; the low severity is due to the binary nature and unverifiable origin of the .deb files, but they are from the legitimate project source.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs prebuilt binaries from the project's official GitHub releases, which is normal for -bin packages; the low severity is due to the binary nature and unverifiable origin of the .deb files, but they are from the legitimate project source.
PKGBUILD
pkgname=sparkle-rolling-bin
_pkgname=sparkle
pkgver=1.26.8.r1279.a36c43e
_releasever=1.26.8-rolling-a36c43e
pkgrel=1
pkgdesc="Another Mihomo GUI (rolling binary release)"
arch=('x86_64' 'aarch64')
url="https://github.com/xishang0128/sparkle"
license=('GPL-3.0-only')
depends=('alsa-lib' 'at-spi2-core' 'cairo' 'dbus' 'expat' 'gcc-libs' 'glib2'
'glibc' 'gtk3' 'libcups' 'libx11' 'libxcb' 'libxcomposite' 'libxdamage'
'libxext' 'libxfixes' 'libxkbcommon' 'libxrandr' 'mesa' 'nspr' 'nss'
'pango' 'systemd-libs')
makedepends=('libarchive')
provides=("sparkle=${pkgver}")
conflicts=('sparkle' 'sparkle-bin' 'sparkle-git' 'sparkle-electron'
'sparkle-electron-bin' 'sparkle-electron-git')
install=${_pkgname}.install
source=("${_pkgname}.sh")
source_x86_64=("${_pkgname}-${_releasever}-x86_64.deb::${url}/releases/download/rolling/${_pkgname}-linux-${_releasever}-amd64.deb")
source_aarch64=("${_pkgname}-${_releasever}-aarch64.deb::${url}/releases/download/rolling/${_pkgname}-linux-${_releasever}-arm64.deb")
sha256sums=('68c3b948301007f29e4f0db9b1b413766c2bcacf7eaf5305c7e7b83f547df3b5')
sha256sums_x86_64=('b809bb755a18e353a622a625954f884caf6448116655d39ce5c8c938c2d0ee22')
sha256sums_aarch64=('66f80009df409d0a7285586e36b1487e012df7464a8c5a3e8e3548abd617e748')
package() {
bsdtar -xf data.tar.xz -C "$pkgdir"
chmod +x "$pkgdir/opt/sparkle/sparkle"
chmod +x "$pkgdir/opt/sparkle/resources/files/sparkle-service"
chmod +sx "$pkgdir/opt/sparkle/resources/sidecar/mihomo"
chmod +sx "$pkgdir/opt/sparkle/resources/sidecar/mihomo-alpha"
install -Dm755 "$srcdir/${_pkgname}.sh" "$pkgdir/usr/bin/${_pkgname}"
sed -i 's|^Exec=/opt/sparkle/sparkle|Exec=sparkle|' \
"$pkgdir/usr/share/applications/${_pkgname}.desktop"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 23:44:22 | Low | 2 |