trovekit-bin

maintainer zxp19821005 · 0 votes · scanned 2026-08-18 09:39:35.720982

LOW

Why flagged The package downloads prebuilt RPMs from the project's official GitHub releases, which is a normal distribution method; the source is verifiable and checksummed, and the build process only extracts and installs files without executing untrusted code.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt RPMs from the project's official GitHub releases, which is a normal distribution method; the source is verifiable and checksummed, and the build process only extracts and installs files without executing untrusted code.

PKGBUILD

      1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
    
      2pkgname=trovekit-bin
    
      3_pkgname=TroveKit
    
      4pkgver=1.0.0
    
      5pkgrel=1
    
      6pkgdesc="An open-source, lightweight, fully offline, cross-platform toolbox.(Prebuilt version)"
    
      7arch=(
    
      8    'aarch64'
    
      9    'x86_64'
    
      10)
    
      11url="https://github.com/1595901624/TroveKit"
    
      12license=('MIT')
    
      13provides=("${pkgname%-bin}=${pkgver}")
    
      14conflicts=("${pkgname%-bin}")
    
      15depends=(
    
      16    'gtk3'
    
      17    'gdk-pixbuf2'
    
      18    'webkit2gtk-4.1'
    
      19)
    
      20source=("LICENSE-${pkgver}::https://raw.githubusercontent.com/1595901624/TroveKit/v${pkgver}/LICENSE")
    
      21source_aarch64=("${pkgname%-bin}-${pkgver}-aarch64.rpm::${url}/releases/download/v${pkgver}/${_pkgname}-${pkgver}-1.aarch64.rpm")
    
      22source_x86_64=("${pkgname%-bin}-${pkgver}-x86_64.rpm::${url}/releases/download/v${pkgver}/${_pkgname}-${pkgver}-1.x86_64.rpm")
    
      23sha256sums=('86d1a389dfd76a18037ccf9c2b8852a268f6b52e1400ccaf14f6bd1ee96c21b6')
    
      24sha256sums_aarch64=('811ccd0a0d86205528c377f2be2d63307ae2ca2f39f4a8f735acc88ecc3e3a9d')
    
      25sha256sums_x86_64=('34df41d9fe67f21a7ad65c68e55bb07549a81df317ffe0df7690e3917ab32388')
    
      26prepare() {
    
      27    sed -i "s/Categories=/Categories=Utility;/g" "${srcdir}/usr/share/applications/${_pkgname}.desktop"
    
      28}
    
      29package() {
    
      30    install -Dm755 "${srcdir}/usr/bin/${pkgname%-bin}" -t "${pkgdir}/usr/bin"
    
      31    find "${srcdir}" -type f \( -name "*.png" -o -name "*.svg" \) -path "*share/icons/*" | while read -r _i; do
    
      32		_extension="${_i##*.}"
    
      33		_icon_path="${_i#*share/icons/}"
    
      34		_target_dir="/usr/share/icons/$(dirname "${_icon_path}")"
    
      35		install -Dm644 "${_i}" "${pkgdir}${_target_dir}/${pkgname%-bin}.${_extension}"
    
      36	done
    
      37    install -Dm644 "${srcdir}/usr/share/applications/${_pkgname}.desktop" "${pkgdir}/usr/share/applications/${pkgname%-bin}.desktop"
    
      38    install -Dm644 "${srcdir}/LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      39}
    
      40

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 09:39:35	LOW	2