tailscode

LOW

maintainer guitaripod 0 votes scanned 2026-08-24 11:22:50.619045

View on AUR

Why flagged

The package builds from a source tarball hosted on the project's own GitHub repository, which is a normal AUR practice; the only concern is the skipped checksum, but no untrusted remote code execution or malicious patterns are present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a source tarball hosted on the project's own GitHub repository, which is a normal AUR practice; the only concern is the skipped checksum, but no untrusted remote code execution or malicious patterns are present.

PKGBUILD

      1# Maintainer: Marcus Ordoñez <guitaripod@gmail.com>
    
      2pkgname=tailscode
    
      3pkgver=1.24
    
      4pkgrel=1
    
      5pkgdesc="Coding agents over Tailscale — a GTK4 client for Claude Code and opencode"
    
      6arch=('x86_64' 'aarch64')
    
      7url="https://github.com/guitaripod/Tailscode"
    
      8license=('GPL-3.0-or-later')
    
      9# Every optional pane is decided at build time by probing for its headers, so the libraries the
    
      10# terminal, video and browser slots need are real runtime dependencies of the binary this package
    
      11# produces rather than optdepends: the loader resolves them before main and the app never starts
    
      12# without them.
    
      13depends=('gtk4' 'libadwaita' 'glib2' 'gdk-pixbuf2' 'libepoxy' 'vte4' 'mpv' 'webkitgtk-6.0'
    
      14         'curl')
    
      15# swift-bin is the AUR toolchain; a swiftly install on PATH satisfies this too.
    
      16makedepends=('swift-bin' 'git')
    
      17optdepends=('tailscale: reach the machine your agent runs on')
    
      18source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz")
    
      19sha256sums=('SKIP')
    
      20
    
      21prepare() {
    
      22    # SwiftPM resolves over the network, which makepkg allows here and not in package().
    
      23    cd "$srcdir/Tailscode-$pkgver/TailscodeLinux"
    
      24    TAILSCODE_KIT_REMOTE=1 swift package resolve
    
      25}
    
      26
    
      27build() {
    
      28    cd "$srcdir/Tailscode-$pkgver"
    
      29    PREFIX=/usr scripts/package-linux.sh build
    
      30}
    
      31
    
      32package() {
    
      33    cd "$srcdir/Tailscode-$pkgver"
    
      34    PREFIX=/usr scripts/package-linux.sh install "$pkgdir"
    
      35}
    
      36

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-24 11:22:50	Low	2