steam-overlay-wayland-git

LOW

maintainer AstraLux 0 votes scanned 2026-08-23 11:20:29.798052

View on AUR

Why flagged

The package builds a Vulkan layer from a legitimate Git repository associated with the maintainer; the source is transparent and not obfuscated, though the unverifiable checksum and recent upload with few votes slightly increase supply-chain risk, but no malicious behavior is evident.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds a Vulkan layer from a legitimate Git repository associated with the maintainer; the source is transparent and not obfuscated, though the unverifiable checksum and recent upload with few votes slightly increase supply-chain risk, but no malicious behavior is evident.

PKGBUILD

      1# Maintainer: Roice Young <dekodx@proton.me>
    
      2_pkgname=steam-overlay-wayland
    
      3pkgname=$_pkgname-git
    
      4pkgver=4ca1566
    
      5pkgrel=1
    
      6pkgdesc='Vulkan layer that provides a bridge between wayland native applications and the steam overlay'
    
      7arch=('x86_64')
    
      8url='https://github.com/GloriousEggroll/proton-ge-custom/'
    
      9license=('BSD-3-Clause')
    
      10depends=('vkroots-git')
    
      11makedepends=('git' 'cmake' 'vulkan-headers')
    
      12source=("$_pkgname::git+https://github.com/DekoDX/ge-steam-overlay-wayland.git") # Avoid cloning all of proton-ge for convenience
    
      13sha512sums=('SKIP')
    
      14
    
      15pkgver() {
    
      16  cd "$_pkgname"
    
      17  git describe --always --long --tags | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
    
      18}
    
      19
    
      20build() {
    
      21    cd "$_pkgname"
    
      22    cmake \
    
      23        -DVKROOTS_INCLUDE_DIR="/usr/include" \
    
      24        -DVULKAN_HEADERS_INCLUDE_DIR="/usr/include" \
    
      25        -DCMAKE_INSTALL_PREFIX="$pkgdir/usr" \
    
      26        -B build
    
      27
    
      28    cmake --build build
    
      29}
    
      30
    
      31package() {
    
      32    cd "$_pkgname"
    
      33    cmake --install build
    
      34}
    
      35

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-23 11:20:29	Low	2