super-paste-git

LOW

maintainer teddyzhu15 0 votes scanned 2026-10-21 09:31:11.007953

View on AUR

Why flagged

The package builds from a Git repository with a SKIP'd checksum, but it is the project's own source; the build process uses standard, expected steps for an Electron app and does not execute untrusted remote code.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a Git repository with a SKIP'd checksum, but it is the project's own source; the build process uses standard, expected steps for an Electron app and does not execute untrusted remote code.

PKGBUILD

      1# Maintainer: Teddy Zhu <teddyzhu15@gmail.com>
    
      2pkgname=super-paste-git
    
      3pkgver=1.0.0.r98.gf927451
    
      4pkgrel=1
    
      5pkgdesc='Clipboard manager with local OCR and synchronization (Git version)'
    
      6arch=('x86_64')
    
      7url='https://github.com/Teddy-Zhu/super_paste_app'
    
      8license=('MIT')
    
      9depends=('electron44' 'libx11' 'cairo' 'pango' 'libjpeg-turbo' 'giflib' 'librsvg' 'xdg-utils')
    
      10makedepends=('git' 'nodejs>=22.14.0' 'pnpm>=11.4.0' 'python' 'rust>=1.88' 'pkgconf')
    
      11optdepends=('kwin: active-window detection on KDE Plasma 6 Wayland'
    
      12            'xorg-xwayland: panel positioning on Wayland'
    
      13            'xdg-desktop-portal: global shortcuts on Wayland'
    
      14            'libappindicator-gtk3: tray integration on supported desktops')
    
      15provides=("super-paste=${pkgver}")
    
      16conflicts=('super-paste' 'super_paste_app' 'super-paste-app')
    
      17options=('!debug')
    
      18source=("${pkgname}::git+${url}.git")
    
      19sha256sums=('SKIP')
    
      20
    
      21pkgver() {
    
      22  cd "${srcdir}/${pkgname}"
    
      23  printf '%s.r%s.g%s' "$(node --input-type=module -e "import { archVersion } from './scripts/prepare-aur.mjs'; console.log(archVersion())")" \
    
      24    "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      25}
    
      26
    
      27prepare() {
    
      28  cd "${srcdir}/${pkgname}"
    
      29  export ELECTRON_SKIP_BINARY_DOWNLOAD=1
    
      30  # 单独准备构建工具和原生模块，避免项目 postinstall 下载另一份 Electron。
    
      31  pnpm install --frozen-lockfile --ignore-scripts
    
      32  pnpm rebuild esbuild
    
      33}
    
      34
    
      35build() {
    
      36  cd "${srcdir}/${pkgname}"
    
      37  local electron_version
    
      38  electron_version=$(cat /usr/lib/electron44/version)
    
      39  pnpm exec electron-rebuild --force --build-from-source --version "$electron_version" \
    
      40    --only 'better-sqlite3,canvas,@paymoapp/active-window'
    
      41  pnpm run build
    
      42  pnpm exec electron-builder --linux dir \
    
      43    --config.electronDist=/usr/lib/electron44 \
    
      44    --config.electronVersion="$electron_version" \
    
      45    --config.npmRebuild=false
    
      46}
    
      47
    
      48package() {
    
      49  cd "${srcdir}/${pkgname}"
    
      50  install -dm755 "${pkgdir}/usr/lib/super-paste"
    
      51  cp -a dist/linux-unpacked/resources/. "${pkgdir}/usr/lib/super-paste/"
    
      52  install -Dm755 packaging/arch/super-paste "${pkgdir}/usr/bin/super-paste"
    
      53  install -Dm644 packaging/arch/super-paste.desktop \
    
      54    "${pkgdir}/usr/share/applications/com.v2dawn.sp.desktop"
    
      55  local size
    
      56  for size in 16 24 32 48 64 128 256 512; do
    
      57    install -Dm644 "build/icon/icons/${size}x${size}.png" \
    
      58      "${pkgdir}/usr/share/icons/hicolor/${size}x${size}/apps/com.v2dawn.sp.png"
    
      59  done
    
      60  install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      61}
    
      62

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-21 09:31:11	Low	2