splatmoji-kaomojiya

LOW

maintainer pokemonpasta 0 votes scanned 2026-09-08 00:18:08.377257

View on AUR

Why flagged

The package builds from a legitimate project source (GitHub) and installs data (a TSV file) to a user directory; the only issue is a SKIP'd checksum and writing to ~/.local/share, but no untrusted remote code execution or malicious payload is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a legitimate project source (GitHub) and installs data (a TSV file) to a user directory; the only issue is a SKIP'd checksum and writing to ~/.local/share, but no untrusted remote code execution or malicious payload is present.

PKGBUILD

      1# WARNING: This PKGBUILD writes to ~/.local/share!!!
    
      2#		   I know this is frowned upon but upstream is archived and even though it says it reads from /usr/share
    
      3#		   there's a bug and it just doesn't. If you're not okay with this, don't install.
    
      4
    
      5# Maintainer: pokemonpasta
    
      6_pkgbase=kaomoji-collection
    
      7pkgname=splatmoji-kaomojiya
    
      8pkgdesc="Splatmoji-formatted version of the Kaomojiya kaomoji collection"
    
      9pkgver=r1.2ca1b39
    
      10pkgrel=2
    
      11
    
      12arch=(x86_64)
    
      13url="https://github.com/kaomojiya-collection/kaomoji-collection"
    
      14license=("MIT")
    
      15depends=(
    
      16	splatmoji
    
      17)
    
      18makedepends=(
    
      19	jq
    
      20)
    
      21
    
      22options=(!strip !debug)
    
      23
    
      24source=("$_pkgbase::git+$url.git")
    
      25sha256sums=('SKIP')
    
      26
    
      27_tsv=$pkgname.tsv
    
      28
    
      29pkgver(){
    
      30	cd "$srcdir/$_pkgbase"
    
      31	printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      32}
    
      33
    
      34package(){
    
      35	cd "$srcdir"
    
      36	# Converts from JSON format of {keyword: [kao1,kao2,...]} to splatmoji TSV: kao<tab>key1,key2
    
      37	jq -r 'to_entries[] | .value[] as $kao | [$kao, .key] | @tsv' "$_pkgbase/kaomoji.json" > "$_tsv"
    
      38	
    
      39	install -dm700 "$pkgdir/$HOME"
    
      40	install -Dm644 "$_tsv"  "$pkgdir/$HOME/.local/share/splatmoji/data/aur/$_tsv"
    
      41}
    
      42

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-08 00:18:08	Low	2
2026-09-07 23:15:20	Low	2