synapse-shell
The package builds from source hosted on GitLab under the project's official repository, uses standard Rust build practices, and the only concerns are a skipped checksum and low votes/recent upload, which affect trust but not inherent safety.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on GitLab under the project's official repository, uses standard Rust build practices, and the only concerns are a skipped checksum and low votes/recent upload, which affect trust but not inherent safety.
PKGBUILD
pkgname=synapse-shell
pkgver=1.0.2
pkgrel=1
pkgdesc="A custom status bar indicator in GTK4 written in Rust"
arch=('x86_64')
url="https://gitlab.com/Maskrpone/synapse-gtk4"
license=('MIT')
depends=('gtk4' 'cairo' 'gtk4-layer-shell')
makedepends=('cargo')
source=("$pkgname-$pkgver.tar.gz::https://gitlab.com/Maskrpone/synapse-gtk4/-/archive/v$pkgver/synapse-gtk4-v$pkgver.tar.gz")
sha256sums=('SKIP')
_reponame="synapse-gtk4"
_binname="synapse_shell"
prepare() {
cd "$_reponame-v$pkgver"
# Fetches dependencies before the build phase to allow building offline later
cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
}
build() {
cd "$_reponame-v$pkgver"
cargo build --frozen --release --all-features
}
package() {
cd "$_reponame-v$pkgver"
install -Dm755 "target/release/$_binname" "$pkgdir/usr/bin/$_binname"
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-25 19:13:08 | Low | 2 |