touchfish-v4

LOW

maintainer JohnChiao 0 votes scanned 2026-10-20 01:27:05.507443

View on AUR

Why flagged

Package builds from a legitimate project source on GitHub with no remote code execution or malicious payloads, but uses an unverifiable 'SKIP' checksum which reduces trust in source integrity.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package builds from a legitimate project source on GitHub with no remote code execution or malicious payloads, but uses an unverifiable 'SKIP' checksum which reduces trust in source integrity.

PKGBUILD

      1# Maintainer: TouchFish Community <johnchiao@outlook.com>
    
      2pkgname=touchfish-v4
    
      3pkgver=4.11.0
    
      4pkgrel=1
    
      5pkgdesc="FOSS multi-distribution LAN chatting tool"
    
      6arch=('any')
    
      7url="https://github.com/touchfish-devs/TouchFish-AUR"
    
      8license=('MIT')
    
      9depends=('python')                 # 仅需 Python 标准库，无第三方依赖
    
      10makedepends=()
    
      11optdepends=()
    
      12source=("$pkgname-$pkgver.tar.gz::https://github.com/touchfish-devs/TouchFish-AUR/archive/refs/tags/v$pkgver.tar.gz")
    
      13sha256sums=('SKIP')
    
      14provides=('touchfish')
    
      15
    
      16prepare() {
    
      17    cd "$srcdir/TouchFish-AUR-$pkgver"
    
      18    cat > "$pkgname.desktop" << EOF
    
      19[Desktop Entry]
    
      20Type=Application
    
      21Name=TouchFish
    
      22Comment=$pkgdesc
    
      23Exec=/usr/bin/$pkgname
    
      24Icon=/usr/share/pixmaps/$pkgname.ico
    
      25Terminal=true
    
      26Categories=Network;InstantMessaging;
    
      27EOF
    
      28}
    
      29
    
      30build() {
    
      31    true
    
      32}
    
      33
    
      34package() {
    
      35    cd "$srcdir/TouchFish-AUR-$pkgver"
    
      36
    
      37    # 安装主程序
    
      38    install -Dm755 LTS.py "$pkgdir/usr/bin/$pkgname"
    
      39
    
      40    # 安装图标
    
      41    install -Dm644 TouchFish.ico "$pkgdir/usr/share/pixmaps/$pkgname.ico"
    
      42
    
      43    # 安装 .desktop 文件
    
      44    install -Dm644 "$pkgname.desktop" "$pkgdir/usr/share/applications/$pkgname.desktop"
    
      45
    
      46    # 安装文档和许可证
    
      47    install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      48    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      49}
    
      50

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-20 01:27:05	Low	2