token-monitor-bin

LOW

maintainer MatrixC7 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package installs a prebuilt AppImage from the project's official GitHub releases, which is normal for Electron apps; the source is verifiable and the build process is transparent, though the low vote count and recent upload warrant mild caution.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt AppImage from the project's official GitHub releases, which is normal for Electron apps; the source is verifiable and the build process is transparent, though the low vote count and recent upload warrant mild caution.

PKGBUILD

      1# Maintainer: Fangru Shao <matrixc7p@gmail.com>
    
      2pkgname=token-monitor-bin
    
      3_pkgname=token-monitor
    
      4pkgver=0.72.0
    
      5pkgrel=1
    
      6pkgdesc="Real-time token, cost, and AI limits widget with multi-device sync for Claude Code, Codex, OpenCode and more"
    
      7arch=('x86_64')
    
      8url="https://github.com/Javis603/token-monitor"
    
      9license=('MIT')
    
      10depends=(
    
      11    'alsa-lib'
    
      12    'at-spi2-core'
    
      13    'cairo'
    
      14    'dbus'
    
      15    'expat'
    
      16    'gcc-libs'
    
      17    'glib2'
    
      18    'glibc'
    
      19    'gtk3'
    
      20    'hicolor-icon-theme'
    
      21    'libcups'
    
      22    'libdrm'
    
      23    'libx11'
    
      24    'libxcb'
    
      25    'libxcomposite'
    
      26    'libxdamage'
    
      27    'libxext'
    
      28    'libxfixes'
    
      29    'libxkbcommon'
    
      30    'libxrandr'
    
      31    'mesa'
    
      32    'nspr'
    
      33    'nss'
    
      34    'pango'
    
      35)
    
      36provides=("${_pkgname}")
    
      37conflicts=("${_pkgname}")
    
      38options=('!strip' '!debug')
    
      39source=("https://github.com/Javis603/token-monitor/releases/download/v${pkgver}/Token-Monitor-${pkgver}.AppImage")
    
      40noextract=("Token-Monitor-${pkgver}.AppImage")
    
      41sha256sums=('c6e61565c0e1b7354c1627a9623599f2c131acc51097d29a2965206da570a525')
    
      42
    
      43prepare() {
    
      44    chmod +x "Token-Monitor-${pkgver}.AppImage"
    
      45    rm -rf squashfs-root
    
      46    "./Token-Monitor-${pkgver}.AppImage" --appimage-extract >/dev/null
    
      47    sed -i "s|^Exec=.*|Exec=/usr/bin/${_pkgname} %U|" "squashfs-root/${_pkgname}.desktop"
    
      48}
    
      49
    
      50package() {
    
      51    install -dm755 "${pkgdir}/opt/${_pkgname}"
    
      52    cp -r squashfs-root/* "${pkgdir}/opt/${_pkgname}/"
    
      53
    
      54    # Clean up redundant AppImage-specific files inside /opt/token-monitor
    
      55    rm -rf "${pkgdir}/opt/${_pkgname}/usr/share/icons" \
    
      56           "${pkgdir}/opt/${_pkgname}/${_pkgname}.desktop" \
    
      57           "${pkgdir}/opt/${_pkgname}/${_pkgname}.png" \
    
      58           "${pkgdir}/opt/${_pkgname}/.DirIcon"
    
      59
    
      60    # Fix permissions
    
      61    find "${pkgdir}/opt/${_pkgname}" -type d -exec chmod 755 {} +
    
      62    chmod 755 "${pkgdir}/opt/${_pkgname}/${_pkgname}"
    
      63    chmod 755 "${pkgdir}/opt/${_pkgname}/AppRun"
    
      64    chmod 4755 "${pkgdir}/opt/${_pkgname}/chrome-sandbox"
    
      65
    
      66    # Launcher wrapper
    
      67    install -dm755 "${pkgdir}/usr/bin"
    
      68    ln -s "/opt/${_pkgname}/AppRun" "${pkgdir}/usr/bin/${_pkgname}"
    
      69
    
      70    # Desktop entry and icon
    
      71    install -Dm644 "squashfs-root/${_pkgname}.desktop" "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
    
      72    install -Dm644 "squashfs-root/usr/share/icons/hicolor/1024x1024/apps/${_pkgname}.png" \
    
      73        "${pkgdir}/usr/share/icons/hicolor/512x512/apps/${_pkgname}.png"
    
      74    install -Dm644 "squashfs-root/usr/share/icons/hicolor/1024x1024/apps/${_pkgname}.png" \
    
      75        "${pkgdir}/usr/share/pixmaps/${_pkgname}.png"
    
      76
    
      77    # Licenses
    
      78    install -Dm644 squashfs-root/LICENSE.electron.txt "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.electron.txt"
    
      79    install -Dm644 squashfs-root/LICENSES.chromium.html "${pkgdir}/usr/share/licenses/${pkgname}/LICENSES.chromium.html"
    
      80}
    
      81

Changes since previous scan

--- PKGBUILD @ 2026-10-15 00:28
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,7 +1,7 @@
 # Maintainer: Fangru Shao <matrixc7p@gmail.com>
 pkgname=token-monitor-bin
 _pkgname=token-monitor
-pkgver=0.71.0
+pkgver=0.72.0
 pkgrel=1
 pkgdesc="Real-time token, cost, and AI limits widget with multi-device sync for Claude Code, Codex, OpenCode and more"
 arch=('x86_64')
@@ -38,7 +38,7 @@
 options=('!strip' '!debug')
 source=("https://github.com/Javis603/token-monitor/releases/download/v${pkgver}/Token-Monitor-${pkgver}.AppImage")
 noextract=("Token-Monitor-${pkgver}.AppImage")
-sha256sums=('e719e7a2d8d9045bdb71243014dba6f301e6172f200573384b66ddcdad660004')
+sha256sums=('c6e61565c0e1b7354c1627a9623599f2c131acc51097d29a2965206da570a525')
 
 prepare() {
     chmod +x "Token-Monitor-${pkgver}.AppImage"

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 21:16:13	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 21:13:25	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 21:20:28	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 17:17:20	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 03:12:20	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 18:15:18	Low	2