tronbrowser-bin

LOW
maintainer profullstack 0 votes scanned 2026-09-24 11:42:45.600377
View on AUR
Why flagged

Package downloads a release tarball from the project's official GitHub repository, which is a normal and expected practice for AUR packages; the low severity is due to few votes and recent upload, not due to any malicious or suspicious behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package downloads a release tarball from the project's official GitHub repository, which is a normal and expected practice for AUR packages; the low severity is due to few votes and recent upload, not due to any malicious or suspicious behavior.

PKGBUILD

1# Maintainer: Profullstack, Inc. <security@profullstack.com>
2# AUR binary package — consumes the GitHub release tarball.
3pkgname=tronbrowser-bin
4pkgver=0.1.0
5pkgrel=1
6pkgdesc="Open-source, privacy-first, AI-native browser (Ungoogled Chromium fork)"
7arch=('x86_64')
8url="https://tronbrowser.dev"
9license=('MIT')
10depends=('chromium')
11provides=('tronbrowser')
12conflicts=('tronbrowser')
13source=("tronbrowser-${pkgver}.tar.gz::https://github.com/profullstack/tronbrowser.dev/releases/download/v${pkgver}/tronbrowser-linux-x64.tar.gz")
14sha256sums=('d966a54a6369ec283203abd257f89e50844ff68551229a463f568dc638dcf4c7')
15
16package() {
17 install -dm755 "${pkgdir}/usr/lib/tronbrowser"
18 cp -r "${srcdir}/tronbrowser/." "${pkgdir}/usr/lib/tronbrowser/"
19 install -dm755 "${pkgdir}/usr/bin"
20 ln -s /usr/lib/tronbrowser/tronbrowser "${pkgdir}/usr/bin/tron"
21 ln -s /usr/lib/tronbrowser/tronbrowser "${pkgdir}/usr/bin/tronbrowser"
22 install -Dm644 "${srcdir}/tronbrowser/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
23}
24

Scan history

Scanned at (UTC)SeverityRules
2026-09-24 11:42:45 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion