speedynote-src

maintainer renataritter · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from source hosted on GitHub, which is the project's official repository, and installs only compiled binaries and static assets; the orphaned status change is administrative and does not imply malicious content.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source hosted on GitHub, which is the project's official repository, and installs only compiled binaries and static assets; the orphaned status change is administrative and does not imply malicious content.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Guashark <221940752+Guashark@users.noreply.github.com>
    
      2# Author: SpeedyNote Team <info@speedynote.org>
    
      3
    
      4# This is a user uploaded package.
    
      5pkgname=speedynote-src
    
      6pkgver=1.2.1
    
      7pkgrel=2
    
      8provides=("speedynote=$pkgver")
    
      9conflicts=('speedynote')
    
      10pkgdesc="A user uploaded package from official release source of SpeedyNote"
    
      11arch=('x86_64')
    
      12options=('!debug')
    
      13url="https://github.com/alpha-liu-01/SpeedyNote"
    
      14license=('GPLv3')
    
      15depends=('glibc' 'gcc-libs' 'qt6-base' 'qt6-svg' 'mupdf' 'mujs' 'tesseract-data-eng')
    
      16makedepends=('git' 'cmake' 'qt6-tools')
    
      17source=("SpeedyNote-$pkgver-2.tar.gz::https://github.com/alpha-liu-01/SpeedyNote/archive/refs/tags/v$pkgver-2.tar.gz"
    
      18        "LICENSE-$pkgver::https://raw.githubusercontent.com/alpha-liu-01/SpeedyNote/v$pkgver/LICENSE")
    
      19sha256sums=('23c4b26ff19a2baef6e80bd5a263ad8abb5ef61d4db830b1354ac6fc02355eb9'
    
      20            'b3fac2b0946e0676aaef25f841b1be51df3331289301520e9a0bf23da9f93f01')
    
      21
    
      22build() {
    
      23  cd "$srcdir/SpeedyNote-$pkgver-2"
    
      24  cmake -B build \
    
      25    -DCMAKE_INSTALL_PREFIX=/usr \
    
      26    -DCMAKE_BUILD_TYPE=Release
    
      27  cmake --build build
    
      28}
    
      29
    
      30package() {
    
      31  cd "$srcdir/SpeedyNote-$pkgver-2"
    
      32
    
      33  # 安装二进制文件 
    
      34  install -Dm755 "build/NoteApp" "$pkgdir/usr/bin/$pkgname"
    
      35
    
      36  # 安装图标
    
      37  install -Dm644 "resources/icons/mainicon.png" "$pkgdir/usr/share/pixmaps/$pkgname.png"
    
      38
    
      39  # 安装许可协议
    
      40  install -Dm644 "$srcdir/LICENSE-$pkgver" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      41
    
      42  # 安装桌面文件
    
      43  install -d "$pkgdir/usr/share/applications"
    
      44  echo "[Desktop Entry]
    
      45Name=SpeedyNote
    
      46Comment=A user uploaded package from official release source of SpeedyNote
    
      47Exec=$pkgname
    
      48Icon=$pkgname
    
      49Type=Application
    
      50Terminal=false
    
      51Categories=Utility;TextEditor;
    
      52Keywords=notes;markdown;" > "$pkgdir/usr/share/applications/$pkgname.desktop"
    
      53}
    
      54
    
      55

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 17:15:21	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0