triproxy-bin

LOW

maintainer zxp19821005 0 votes scanned 2026-11-02 04:02:15.556644

View on AUR

Why flagged

Package installs a prebuilt binary from a GitHub release, which is a supply-chain risk if the source is compromised, but it's from a project-owned repository and the binary is not executed remotely or via obfuscated means.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package installs a prebuilt binary from a GitHub release, which is a supply-chain risk if the source is compromised, but it's from a project-owned repository and the binary is not executed remotely or via obfuscated means.

PKGBUILD

      1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
    
      2pkgname=triproxy-bin
    
      3_pkgname=TriProxy
    
      4pkgver=0.2.2
    
      5pkgrel=1
    
      6pkgdesc="A modern multi-core proxy client: unified lifecycle management for Mihomo, sing-box and Xray."
    
      7arch=('x86_64')
    
      8url="https://github.com/luoqingciya/TriProxy"
    
      9license=('GPL-3.0-or-later')
    
      10provides=("${pkgname%-bin}=${pkgver}")
    
      11conflicts=("${pkgname%-bin}")
    
      12depends=(
    
      13    'gtk3'
    
      14    'gdk-pixbuf2'
    
      15    'webkit2gtk-4.1'
    
      16    'libayatana-indicator'
    
      17    'libappindicator'
    
      18    'mihomo'
    
      19    'xray'
    
      20    'sing-box'
    
      21)
    
      22source=("${pkgname%-bin}-${pkgver}.deb::${url}/releases/download/v${pkgver}/${_pkgname}_${pkgver}_amd64-full.deb")
    
      23sha256sums=('48c118d53e06954bfaf54e0a44308f6a736967f74b393d6015480db01088819e')
    
      24_install_icons() {
    
      25	local _src="${1:-${srcdir}}" _name="${pkgname%-bin}" _icon _ext _size _dest
    
      26	while IFS= read -r -d '' _icon; do
    
      27		_ext="${_icon##*.}"
    
      28		_size=$(echo "${_icon%/*}" | grep -oE '[0-9]+x[0-9]+|scalable' | head -1)
    
      29		[[ -z "${_size}" ]] && _size=$([[ "${_ext}" == svg ]] && echo scalable || od -An -tu1 -j16 -N8 "${_icon}" 2>/dev/null | awk '{printf "%dx%d",$1*16777216+$2*65536+$3*256+$4,$5*16777216+$6*65536+$7*256+$8}')
    
      30		[[ "${_size}" =~ ^[0-9]+x[0-9]+$ ]] || _size=scalable
    
      31		_dest=$([[ "${_icon}" == */share/pixmaps/* ]] && echo pixmaps || echo "icons/hicolor/${_size}/apps")
    
      32		install -Dm644 "${_icon}" "${pkgdir}/usr/share/${_dest}/${_name}.${_ext}"
    
      33	done < <(find "${_src}" \( -path '*/share/icons/*' -o -path '*/share/pixmaps/*' -o -path '*entries/icons/*' \) -type f \( -name '*.png' -o -name '*.svg' \) -print0 2>/dev/null)
    
      34}
    
      35prepare() {
    
      36    bsdtar -xf "${srcdir}/data."*
    
      37    sed -i -e "
    
      38        s/Exec=${pkgname%-bin}-app/Exec=${pkgname%-bin}/g
    
      39        s/Icon=${pkgname%-bin}-app/Icon=${pkgname%-bin}/g
    
      40    " "${srcdir}/usr/share/applications/${_pkgname}.desktop"
    
      41    ln -sf "/usr/bin/mihomo" "${srcdir}/usr/lib/${_pkgname}/cores/xray"
    
      42    ln -sf "/usr/bin/xray" "${srcdir}/usr/lib/${_pkgname}/cores/xray"
    
      43    ln -sf "/usr/bin/sing-box" "${srcdir}/usr/lib/${_pkgname}/cores/sing-box"
    
      44}
    
      45package() {
    
      46    install -Dm755 "${srcdir}/usr/bin/${pkgname%-bin}-app" "${pkgdir}/usr/bin/${pkgname%-bin}"
    
      47    [ -d "${srcdir}/usr/lib" ] && cp -a "${srcdir}/usr/lib" "${pkgdir}/usr/"
    
      48    _install_icons
    
      49    install -Dm644 "${srcdir}/usr/share/applications/${_pkgname}.desktop" "${pkgdir}/usr/share/applications/${pkgname%-bin}.desktop"
    
      50}
    
      51

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-02 04:02:15	Low	2