tde-session-bin
The package is a prebuilt binary from a GitHub release, which is a common practice, but has few votes and was recently uploaded, increasing supply-chain risk slightly; however, the source is verifiable and from the project's official repository.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package is a prebuilt binary from a GitHub release, which is a common practice, but has few votes and was recently uploaded, increasing supply-chain risk slightly; however, the source is verifiable and from the project's official repository.
PKGBUILD
# Maintainer: Zan Skamljic <zan.skamljic@gmail.com>
_pkgname=tde-session
pkgname=tde-session-bin
pkgver=0.3.3
pkgrel=1
pkgdesc='The TDE desktop session: a wlroots compositor, overview, bar, lock screen and settings'
arch=(x86_64)
url='https://github.com/zskamljic/tde-session'
license=(GPL-3.0-or-later)
depends=(
glibc
layer-shell-qt
libcanberra
libgcc
libinput
libpulse
libsecret
libstdc++
'libtde>=0.3.0'
libxkbcommon
lua
openssh
pam
pango
pixman
polkit-qt6
qt6-base
qt6-wayland
sound-theme-freedesktop
systemd
wayland
wlroots0.20
xdg-desktop-portal
xdg-desktop-portal-gtk
xdg-desktop-portal-wlr
)
optdepends=(
'tde-ariadne: the file manager, which picks files for other programs too'
'xorg-xwayland: X11 programs'
'networkmanager: networks and Wi-Fi in the bar and the settings'
'bluez: Bluetooth in the bar and the settings'
'upower: the battery, and suspending sooner on it'
'power-profiles-daemon: the power mode'
'pipewire-pulse: sound, with its volume in the bar'
'gnome-keyring: remembering the passphrases of SSH keys'
'fprintd: unlocking the screen with a finger'
'brightnessctl: the keyboard light keys, where the keyboard does not change it itself'
)
provides=("$_pkgname=$pkgver")
conflicts=("$_pkgname")
# Built by the release workflow of the sources' repository, from the tag.
source=("$_pkgname-$pkgver-x86_64.tar.zst::$url/releases/download/v$pkgver/$_pkgname-$pkgver-x86_64.tar.zst")
noextract=("$_pkgname-$pkgver-x86_64.tar.zst")
sha256sums=('107a1a33fab11d844f40d0c656f8cef11d58cf454f552fe3a1e99cdb6f1741a5')
package() {
bsdtar -xf "$_pkgname-$pkgver-x86_64.tar.zst" -C "$pkgdir"
}
Changes since previous scan
--- PKGBUILD @ 2026-10-17 00:21+++ PKGBUILD @ 2026-10-19 11:25@@ -2,7 +2,7 @@ _pkgname=tde-session pkgname=tde-session-bin-pkgver=0.3.2+pkgver=0.3.3 pkgrel=1 pkgdesc='The TDE desktop session: a wlroots compositor, overview, bar, lock screen and settings' arch=(x86_64)@@ -52,7 +52,7 @@ # Built by the release workflow of the sources' repository, from the tag. source=("$_pkgname-$pkgver-x86_64.tar.zst::$url/releases/download/v$pkgver/$_pkgname-$pkgver-x86_64.tar.zst") noextract=("$_pkgname-$pkgver-x86_64.tar.zst")-sha256sums=('9d9bb4da8319cb0e283f4c893b639a684392d6ea62c39177237639d5d53cf3af')+sha256sums=('107a1a33fab11d844f40d0c656f8cef11d58cf454f552fe3a1e99cdb6f1741a5') package() { bsdtar -xf "$_pkgname-$pkgver-x86_64.tar.zst" -C "$pkgdir"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-19 11:25:12 | Low | 2 |
| 2026-10-19 09:25:06 | Low | 2 |
| 2026-10-17 00:21:55 | Clean | 2 |
| 2026-10-16 07:15:06 | Low | 1 |
| 2026-10-14 00:06:47 | Clean | 2 |
| 2026-10-13 15:17:00 | Low | 1 |
| 2026-10-13 00:23:45 | Clean | 2 |
| 2026-10-12 19:14:29 | Low | 1 |