tomato-todo-bin

LOW

maintainer kisaragifuurin 0 votes scanned 2026-10-17 03:16:27.273275

View on AUR

Why flagged

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Kisaragi Fuurin <NicoleSandwich@outlook.com>
    
      2# Template rendered by scripts/publish-aur.mjs, which downloads each release and
    
      3# fills in the real hashes. Do not hand-edit the generated PKGBUILD in the AUR
    
      4# repository: change this file and re-run the script.
    
      5#
    
      6# Upstream publishes a self-contained tarball (Tauri binary + bundled Node/Pi
    
      7# agent runtime), so this is a -bin package; there is no source build here.
    
      8pkgname=tomato-todo-bin
    
      9pkgver=0.9.5
    
      10pkgrel=1
    
      11pkgdesc='任务与番茄钟，一个安静的专注空间'
    
      12arch=('x86_64')
    
      13url='https://github.com/AntheaLaffy/tomato-todo'
    
      14license=('MIT')
    
      15depends=('gtk3' 'webkit2gtk-4.1' 'libayatana-appindicator' 'hicolor-icon-theme' 'libpulse' 'gst-plugins-bad')
    
      16provides=('tomato-todo')
    
      17conflicts=('tomato-todo')
    
      18options=('!strip' '!debug')
    
      19source=("https://github.com/AntheaLaffy/tomato-todo/releases/download/v$pkgver/tomato-todo-$pkgver-$CARCH-linux.tar.gz"
    
      20        'tomato-todo.desktop'
    
      21        'LICENSE')
    
      22sha256sums=('9d66328f1b9ffe30b623f4c16a3ff5003b85ab7e7ea716b186afad2360de8eac'
    
      23            '27016ccfec6a99754468979a18484c1d342dfb1d1727e118e2cf9037b0825ff5'
    
      24            '35ac48fb83d92346f4ea881dac8304e85111c7352aaf214b2fd9bb9169dcd001')
    
      25
    
      26package() {
    
      27  install -Dm755 "$srcdir/tomato-todo" "$pkgdir/usr/bin/tomato-todo"
    
      28
    
      29  # Tauri resolves bundled resources from /usr/lib/<product name>, and the
    
      30  # product name is "Tomato Todo" (a space, not the Cargo package name).
    
      31  install -d "$pkgdir/usr/lib/Tomato Todo"
    
      32  cp -a "$srcdir/agent" "$pkgdir/usr/lib/Tomato Todo/agent"
    
      33  cp -a "$srcdir/desktop-integrations" "$pkgdir/usr/lib/Tomato Todo/desktop-integrations"
    
      34  install -Dm644 "$srcdir/install-desktop-integration.py" "$pkgdir/usr/lib/Tomato Todo/install-desktop-integration.py"
    
      35
    
      36  # Releases before the bundle stopped shipping npm's absolute .bin shims carry
    
      37  # dangling links to the CI runner; drop them if present. Harmless once the
    
      38  # bundle is built by scripts/build-agent.mjs, which removes the directory.
    
      39  rm -rf "$pkgdir/usr/lib/Tomato Todo/agent/node_modules/.bin"
    
      40
    
      41  install -Dm644 "$srcdir/icons/32x32.png"       "$pkgdir/usr/share/icons/hicolor/32x32/apps/tomato-todo.png"
    
      42  install -Dm644 "$srcdir/icons/128x128.png"     "$pkgdir/usr/share/icons/hicolor/128x128/apps/tomato-todo.png"
    
      43  install -Dm644 "$srcdir/icons/128x128@2x.png"  "$pkgdir/usr/share/icons/hicolor/256x256/apps/tomato-todo.png"
    
      44
    
      45  install -Dm644 "$srcdir/tomato-todo.desktop" "$pkgdir/usr/share/applications/tomato-todo.desktop"
    
      46  install -Dm644 "$srcdir/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      47}
    
      48

Changes since previous scan

--- PKGBUILD @ 2026-10-16 03:14
+++ PKGBUILD @ 2026-10-17 03:16
@@ -6,7 +6,7 @@
 # Upstream publishes a self-contained tarball (Tauri binary + bundled Node/Pi
 # agent runtime), so this is a -bin package; there is no source build here.
 pkgname=tomato-todo-bin
-pkgver=0.9.0
+pkgver=0.9.5
 pkgrel=1
 pkgdesc='任务与番茄钟，一个安静的专注空间'
 arch=('x86_64')
@@ -19,7 +19,7 @@
 source=("https://github.com/AntheaLaffy/tomato-todo/releases/download/v$pkgver/tomato-todo-$pkgver-$CARCH-linux.tar.gz"
         'tomato-todo.desktop'
         'LICENSE')
-sha256sums=('18148b0f85e9d78708f3c848ec2f0b36061e9c02b60487a1e6f7ab54b1a3b50d'
+sha256sums=('9d66328f1b9ffe30b623f4c16a3ff5003b85ab7e7ea716b186afad2360de8eac'
             '27016ccfec6a99754468979a18484c1d342dfb1d1727e118e2cf9037b0825ff5'
             '35ac48fb83d92346f4ea881dac8304e85111c7352aaf214b2fd9bb9169dcd001')
 
@@ -30,6 +30,8 @@
   # product name is "Tomato Todo" (a space, not the Cargo package name).
   install -d "$pkgdir/usr/lib/Tomato Todo"
   cp -a "$srcdir/agent" "$pkgdir/usr/lib/Tomato Todo/agent"
+  cp -a "$srcdir/desktop-integrations" "$pkgdir/usr/lib/Tomato Todo/desktop-integrations"
+  install -Dm644 "$srcdir/install-desktop-integration.py" "$pkgdir/usr/lib/Tomato Todo/install-desktop-integration.py"
 
   # Releases before the bundle stopped shipping npm's absolute .bin shims carry
   # dangling links to the CI runner; drop them if present. Harmless once the

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 03:16:27	Low	1
2026-10-17 00:21:55	Clean	2
2026-10-16 09:15:55	Low	1
2026-10-16 03:14:05	Low	1
2026-10-14 00:06:47	Clean	2
2026-10-13 15:17:00	Low	1
2026-10-13 05:15:42	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 13:13:52	Low	2