tronbrowser-bin
Package downloads a release tarball from the project's official GitHub repository, which is a normal and expected practice for AUR packages; the low severity is due to few votes and recent upload, not due to any malicious or suspicious behavior.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package downloads a release tarball from the project's official GitHub repository, which is a normal and expected practice for AUR packages; the low severity is due to few votes and recent upload, not due to any malicious or suspicious behavior.
PKGBUILD
# Maintainer: Profullstack, Inc. <security@profullstack.com>
# AUR binary package — consumes the GitHub release tarball.
pkgname=tronbrowser-bin
pkgver=0.1.0
pkgrel=1
pkgdesc="Open-source, privacy-first, AI-native browser (Ungoogled Chromium fork)"
arch=('x86_64')
url="https://tronbrowser.dev"
license=('MIT')
depends=('chromium')
provides=('tronbrowser')
conflicts=('tronbrowser')
source=("tronbrowser-${pkgver}.tar.gz::https://github.com/profullstack/tronbrowser.dev/releases/download/v${pkgver}/tronbrowser-linux-x64.tar.gz")
sha256sums=('d966a54a6369ec283203abd257f89e50844ff68551229a463f568dc638dcf4c7')
package() {
install -dm755 "${pkgdir}/usr/lib/tronbrowser"
cp -r "${srcdir}/tronbrowser/." "${pkgdir}/usr/lib/tronbrowser/"
install -dm755 "${pkgdir}/usr/bin"
ln -s /usr/lib/tronbrowser/tronbrowser "${pkgdir}/usr/bin/tron"
ln -s /usr/lib/tronbrowser/tronbrowser "${pkgdir}/usr/bin/tronbrowser"
install -Dm644 "${srcdir}/tronbrowser/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-24 11:42:45 | Low | 2 |