synara-beta

LOW
maintainer horizzon 0 votes scanned 2026-10-17 00:21:55.226236
View on AUR
Why flagged

The package downloads a prebuilt AppImage from the project's official GitHub releases, which is then extracted and installed; while the source is not built from scratch, it comes from a trusted project host and installs only static assets and binaries under isolated paths, posing minimal risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt AppImage from the project's official GitHub releases, which is then extracted and installed; while the source is not built from scratch, it comes from a trusted project host and installs only static assets and binaries under isolated paths, posing minimal risk.

PKGBUILD

1# Maintainer: horizzon3507 <148660626+horizzon3507@users.noreply.github.com>
2# Unofficial AUR packaging of upstream Synara beta (prerelease) AppImage builds.
3# Upstream: https://github.com/Emanuele-web04/synara
4#
5# Co-installable with the "synara" stable package: everything lives under
6# /opt/synara-beta and /usr/bin/synara-beta, so both channels can be installed
7# side by side.
8#
9# The AppImage is only a transport format: we extract it at package time and
10# install the real Electron tree under /opt/synara-beta so AppImageLauncher/
11# Gear Lever never intercept execution.
12
13pkgname=synara-beta
14pkgver=1.0.6_beta.1
15pkgrel=1
16pkgdesc="Minimal desktop GUI for coding agents (beta channel)"
17arch=('x86_64')
18url="https://trysynara.com"
19license=('MIT')
20depends=('zlib' 'glibc' 'hicolor-icon-theme')
21conflicts=('synara-bin')
22options=('!strip' '!debug')
23
24# AUR pkgver cannot contain a dash, so the upstream tag keeps its dash here
25# instead: v1.0.6-beta.1 -> pkgver 1.0.6_beta.1.
26_upstream_ver="${pkgver/_beta./-beta.}"
27
28source=(
29 "Synara-Beta-${_upstream_ver}-x86_64.AppImage::https://github.com/Emanuele-web04/synara/releases/download/v${_upstream_ver}/Synara-Beta-${_upstream_ver}-x86_64.AppImage"
30 "synara-beta.desktop"
31 "synara-beta.svg"
32 "LICENSE::https://raw.githubusercontent.com/Emanuele-web04/synara/v${_upstream_ver}/LICENSE"
33)
34sha256sums=(
35 'e8207324c27fa65b1d4e5a6232655bd8cf431caa215d1060f25838dbacda29d2'
36 'c9bc19ef9bbcf3768f9006c855d1aa50aa19882c192939f36bba25bc9b3740e9'
37 '426cd0c3bacd826957099cb20609c6aeb62445c8203b515924b998623a646fad'
38 '305724dd050ca7ded99c662de813d755bc4ec3887c4543a37159c6662ca36d1b'
39)
40
41prepare() {
42 chmod +x "Synara-Beta-${_upstream_ver}-x86_64.AppImage"
43 "./Synara-Beta-${_upstream_ver}-x86_64.AppImage" --appimage-extract
44}
45
46package() {
47 install -d "${pkgdir}/opt/${pkgname}"
48 cp -a squashfs-root/. "${pkgdir}/opt/${pkgname}/"
49
50 # Drop AppImage launcher metadata; we ship our own desktop entry.
51 rm -f "${pkgdir}/opt/${pkgname}/AppRun"
52 rm -f "${pkgdir}/opt/${pkgname}"/*.desktop
53 rm -f "${pkgdir}/opt/${pkgname}/.DirIcon"
54
55 # AppImage extract uses mode 700 trees; open them for normal users.
56 chmod -R u=rwX,go=rX "${pkgdir}/opt/${pkgname}"
57
58 # Electron sandbox helper expects setuid when not using --no-sandbox.
59 if [[ -f "${pkgdir}/opt/${pkgname}/chrome-sandbox" ]]; then
60 chmod 4755 "${pkgdir}/opt/${pkgname}/chrome-sandbox"
61 fi
62
63 install -Dm755 /dev/stdin "${pkgdir}/usr/bin/${pkgname}" <<'EOF'
64#!/bin/sh
65exec /opt/synara-beta/synara-beta "$@"
66EOF
67
68 install -Dm644 synara-beta.desktop \
69 "${pkgdir}/usr/share/applications/synara-beta.desktop"
70 install -Dm644 synara-beta.svg \
71 "${pkgdir}/usr/share/icons/hicolor/scalable/apps/synara-beta.svg"
72 install -Dm644 synara-beta.svg \
73 "${pkgdir}/usr/share/pixmaps/synara-beta.svg"
74 install -Dm644 LICENSE \
75 "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
76}
77

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 00:21:55 Low 2
2026-10-16 05:14:45 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion