teahouse-bin

LOW
maintainer czyt 0 votes scanned 2026-09-14 09:16:46.306722
View on AUR
Why flagged

The package installs a prebuilt Electron binary from the project's official GitHub releases, which is normal for AUR packages; the low severity is due to the binary nature of the source and recent upload with few votes, but it comes from a trusted project URL and has valid checksums.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt Electron binary from the project's official GitHub releases, which is normal for AUR packages; the low severity is due to the binary nature of the source and recent upload with few votes, but it comes from a trusted project URL and has valid checksums.

PKGBUILD

1# Maintainer: czyt <czytcn@gmail.com>
2
3pkgname=teahouse-bin
4pkgver=0.57.0
5pkgrel=1
6pkgdesc='LAN-only instant messaging and file transfer tool (茶话间)'
7arch=('x86_64' 'aarch64')
8url='https://github.com/skyjt/teahouse'
9license=('GPL-3.0-only')
10depends=('alsa-lib' 'at-spi2-core' 'cairo' 'dbus' 'expat' 'gcc-libs'
11 'glib2' 'glibc' 'gtk3' 'libcups' 'libdrm' 'libnotify' 'libx11'
12 'libxcb' 'libxcomposite' 'libxdamage' 'libxext' 'libxfixes'
13 'libxkbcommon' 'libxrandr' 'libxss' 'libxtst' 'mesa' 'nspr'
14 'nss' 'pango' 'util-linux-libs' 'xdg-utils')
15optdepends=('libappindicator-gtk3: system tray integration')
16provides=("teahouse=${pkgver}")
17conflicts=('teahouse')
18options=('!strip' '!debug')
19
20_deb_x86_64="Teahouse-${pkgver}-linux-amd64.deb"
21_deb_aarch64="Teahouse-${pkgver}-linux-arm64.deb"
22source_x86_64=("${url}/releases/download/v${pkgver}/${_deb_x86_64}")
23source_aarch64=("${url}/releases/download/v${pkgver}/${_deb_aarch64}")
24noextract=("${_deb_x86_64}" "${_deb_aarch64}")
25sha256sums_x86_64=('5b62657dedf54293ca860343b810d53f94227501e905e2fcdc89e3dec9aeb94e')
26sha256sums_aarch64=('35d9ccfe8561eed0ed33646f60bf238b212e355417bc598426a40120ea6dc687')
27
28package() {
29 local deb_var="_deb_${CARCH}"
30 local deb="${srcdir}/${!deb_var}"
31 local data_archive
32 data_archive=$(bsdtar -tf "$deb" | sed -n '/^data\.tar\($\|\.\)/p')
33 [[ -n "$data_archive" && "$data_archive" != *$'\n'* ]] || return 1
34 bsdtar -xOf "$deb" "$data_archive" |
35 bsdtar --no-same-owner -xf - -C "$pkgdir"
36
37 # electron-builder also bundled node-gyp's build-time Python interpreter.
38 rm -rf "${pkgdir}/opt/Teahouse/resources/app.asar.unpacked/node_modules/better-sqlite3/build/node_gyp_bins"
39
40 # Upstream still calls its executable pantry; expose the current product name.
41 install -dm755 "${pkgdir}/usr/bin"
42 ln -s /opt/Teahouse/pantry "${pkgdir}/usr/bin/teahouse"
43 mv "${pkgdir}/usr/share/applications/"{pantry,teahouse}.desktop
44 sed -i -e 's|^Exec=.*|Exec=teahouse %U|' -e 's/^Icon=pantry$/Icon=teahouse/' \
45 "${pkgdir}/usr/share/applications/teahouse.desktop"
46 local icon
47 for icon in "${pkgdir}"/usr/share/icons/hicolor/*/apps/pantry.png; do
48 mv "$icon" "${icon%pantry.png}teahouse.png"
49 done
50 mv "${pkgdir}/usr/share/doc/pantry" "${pkgdir}/usr/share/doc/${pkgname}"
51
52 # Match the upstream postinst sandbox setup without Debian maintainer scripts.
53 chmod 4755 "${pkgdir}/opt/Teahouse/chrome-sandbox"
54 install -Dm644 "${pkgdir}/opt/Teahouse/LICENSE.electron.txt" \
55 "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.electron.txt"
56 ln -s /opt/Teahouse/LICENSES.chromium.html \
57 "${pkgdir}/usr/share/licenses/${pkgname}/LICENSES.chromium.html"
58}
59

Scan history

Scanned at (UTC)SeverityRules
2026-09-14 09:16:46 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion