sub-store-front-end-bin

LOW

maintainer ChenPi11 0 votes scanned 2026-09-21 13:34:51.671275

View on AUR

Why flagged

The package downloads a prebuilt frontend web app (non-executable assets) from the project's official GitHub releases; worst case is content tampering, not code execution.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt frontend web app (non-executable assets) from the project's official GitHub releases; worst case is content tampering, not code execution.

PKGBUILD

      1# Maintainer: chenpi11 <chenpi11@users.noreply.github.com>
    
      2pkgname=sub-store-front-end-bin
    
      3pkgver=2.32.2
    
      4pkgrel=1
    
      5pkgdesc='Sub-Store Progressive Web App'
    
      6arch=('any')
    
      7url='https://github.com/sub-store-org/Sub-Store-Front-End'
    
      8license=('GPL-3.0-only')
    
      9depends=()
    
      10makedepends=()
    
      11provides=('sub-store-front-end')
    
      12conflicts=('sub-store-front-end' 'sub-store-front-end-git')
    
      13source=("$url/releases/download/$pkgver/dist.zip"
    
      14        "$url/raw/$pkgver/LICENSE")
    
      15sha256sums=('5caa2dbcef7506bf67753adc1665da5ac8bd847f9769c4a7472d95ab0cb92057'
    
      16            'SKIP')
    
      17
    
      18package() {
    
      19    # Install web app files
    
      20    install -dm755 "$pkgdir/usr/share/sub-store-front-end"
    
      21    cp -r "$srcdir/dist"/* "$pkgdir/usr/share/sub-store-front-end/"
    
      22
    
      23    # Install LICENSE
    
      24    install -Dm644 "$srcdir/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      25}
    
      26
    
      27post_install() {
    
      28    echo '==> Sub-Store Front-End has been installed!'
    
      29    echo '==> Web app files are located at: /usr/share/sub-store-front-end/'
    
      30    echo '==> You can serve these files with any web server (nginx, apache, etc.)'
    
      31    echo '==> Backend: https://github.com/sub-store-org/Sub-Store'
    
      32}
    
      33

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-21 13:34:51	Low	2