tangent

CLEAN

maintainer sachesi 0 votes scanned 2026-09-28 00:28:32.978392

View on AUR

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from the project's own GitHub source, uses a fixed sha256sum, and follows standard Rust packaging practices without executing untrusted remote code or introducing supply-chain risks.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: sachesi <xsachesi@pm.me>
    
      2
    
      3# pkgver and sha256sums are filled in by .github/workflows/aur.yml for each release.
    
      4pkgname=tangent
    
      5pkgver=0.1.0
    
      6pkgrel=1
    
      7pkgdesc='GPU-rendered terminal for GTK 4 and libadwaita'
    
      8arch=('x86_64' 'aarch64')
    
      9url='https://github.com/sachesi/tangent'
    
      10license=('GPL-3.0-or-later')
    
      11# libglvnd: libEGL is loaded at run time, so nothing links against it.
    
      12depends=('gtk4>=1:4.22' 'libadwaita>=1:1.9' 'glib2' 'cairo' 'pango' 'graphene' 'libglvnd'
    
      13         'hicolor-icon-theme' 'libgcc' 'glibc')
    
      14makedepends=('cargo' 'blueprint-compiler' 'just' 'gettext')
    
      15optdepends=('xdg-terminal-exec: open Tangent from launchers that ask for a terminal')
    
      16conflicts=('tangent-git')
    
      17source=("$pkgname-$pkgver.tar.gz::$url/archive/v$pkgver/$pkgname-$pkgver.tar.gz")
    
      18sha256sums=('16376e18e185b7637587a8e18c28cf703dc78623bbf8fae919d344c016b10d6d')
    
      19
    
      20prepare() {
    
      21  cd "$pkgname-$pkgver"
    
      22  export RUSTUP_TOOLCHAIN=stable
    
      23  cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      24}
    
      25
    
      26build() {
    
      27  cd "$pkgname-$pkgver"
    
      28  export RUSTUP_TOOLCHAIN=stable
    
      29  export CARGO_TARGET_DIR=target
    
      30  export TANGENT_LOCALEDIR=/usr/share/locale
    
      31  cargo build --frozen --release
    
      32}
    
      33
    
      34check() {
    
      35  cd "$pkgname-$pkgver"
    
      36  export RUSTUP_TOOLCHAIN=stable
    
      37  export CARGO_TARGET_DIR=target
    
      38  cargo test --frozen
    
      39}
    
      40
    
      41package() {
    
      42  cd "$pkgname-$pkgver"
    
      43  DESTDIR="$pkgdir" just prefix=/usr install
    
      44}
    
      45

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-28 00:28:32	Clean	2
2026-09-27 21:19:50	Low	1