traygolin-bin

LOW

maintainer lucassvaz 0 votes scanned 2026-10-08 04:07:28.496369

View on AUR

Why flagged

Package installs prebuilt binaries from the maintainer's GitHub releases, which is normal for AUR binary packages; the software is a simple tray app with no indication of malicious behavior, and the source is verifiable via GitHub.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package installs prebuilt binaries from the maintainer's GitHub releases, which is normal for AUR binary packages; the software is a simple tray app with no indication of malicious behavior, and the source is verifiable via GitHub.

PKGBUILD

      1# Maintainer: Lucas Saavedra Vaz <lucasssvaz@users.noreply.github.com>
    
      2pkgname=traygolin-bin
    
      3_pkgname=traygolin
    
      4pkgver=0.1.0
    
      5pkgrel=1
    
      6pkgdesc="Unofficial Linux tray app for the Pangolin VPN client (prebuilt)"
    
      7arch=('x86_64' 'aarch64')
    
      8url="https://github.com/lucasssvaz/traygolin"
    
      9license=('Apache-2.0' 'MIT')
    
      10depends=('glib2' 'glibc' 'gtk4' 'libadwaita>=1.9' 'polkit' 'hicolor-icon-theme')
    
      11optdepends=('pangolin-cli: official Pangolin VPN CLI (pangolin on PATH)')
    
      12provides=("${_pkgname}")
    
      13conflicts=("${_pkgname}")
    
      14options=('!debug')
    
      15source_x86_64=("${_pkgname}-${pkgver}-linux-amd64.tar.gz::${url}/releases/download/v${pkgver}/${_pkgname}-${pkgver}-linux-amd64.tar.gz")
    
      16source_aarch64=("${_pkgname}-${pkgver}-linux-arm64.tar.gz::${url}/releases/download/v${pkgver}/${_pkgname}-${pkgver}-linux-arm64.tar.gz")
    
      17# Set per release by .github/workflows/aur.yml; these placeholders fail verification.
    
      18sha256sums_x86_64=('ad23d667dcd189cc67836eecef676e3f747a2e395936e8f40a10ded0a7ccf95a')
    
      19sha256sums_aarch64=('c62df1ac8807e4fbb51ca1f2ebc8e767ea0868278fa88dbd7871d1b81e1200f2')
    
      20
    
      21package() {
    
      22  cp -a "${srcdir}/usr" "${pkgdir}/"
    
      23  rm -f "${pkgdir}/usr/share/glib-2.0/schemas/gschemas.compiled"
    
      24  mv "${pkgdir}/usr/share/licenses/${_pkgname}" "${pkgdir}/usr/share/licenses/${pkgname}"
    
      25}
    
      26

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-08 04:07:28	Low	2