tuigreety-bin

maintainer jaromirmullerova · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package installs a prebuilt binary from the project's own GitHub releases, which is a normal practice for binary-only packages; the low severity is due to the recent upload and few votes, not due to malicious content.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package installs a prebuilt binary from the project's own GitHub releases, which is a normal practice for binary-only packages; the low severity is due to the recent upload and few votes, not due to malicious content.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Tobiichi Origuchi <Tobiichi-Origuchi@users.noreply.github.com>
    
      2
    
      3pkgname=tuigreety-bin
    
      4pkgver=0.10.0
    
      5pkgrel=1
    
      6pkgdesc='A minimal, configurable console greeter for greetd (prebuilt)'
    
      7arch=('x86_64' 'aarch64' 'armv7h' 'i686')
    
      8url='https://github.com/Tobiichi-Origuchi/tuigreety'
    
      9license=('GPL-3.0-or-later')
    
      10provides=('greetd-greeter' "tuigreety=$pkgver")
    
      11conflicts=('greetd-tuigreet' 'tuigreety' 'tuigreety-git')
    
      12depends=('glibc' 'greetd' 'libgcc' 'systemd')
    
      13source_x86_64=("$pkgname-$pkgver-x86_64.tar.gz::$url/releases/download/$pkgver/tuigreety-$pkgver-x86_64.tar.gz")
    
      14source_aarch64=("$pkgname-$pkgver-aarch64.tar.gz::$url/releases/download/$pkgver/tuigreety-$pkgver-aarch64.tar.gz")
    
      15source_armv7h=("$pkgname-$pkgver-armv7.tar.gz::$url/releases/download/$pkgver/tuigreety-$pkgver-armv7.tar.gz")
    
      16source_i686=("$pkgname-$pkgver-i686.tar.gz::$url/releases/download/$pkgver/tuigreety-$pkgver-i686.tar.gz")
    
      17source=('tuigreet.conf')
    
      18sha256sums=('8f83aee7874aab5d06981a1d1cd05df906368a79dbca90d157a33a2f023b67d3')
    
      19sha256sums_x86_64=('2553623b61598a3b7f3c666a2a6acf9f535a7799c60092d67eb02f2f49aa9f6b')
    
      20sha256sums_aarch64=('a6092ae69006c10d4e04afcf4e968ab4f5345552cb561cc10d9ef89b6891897e')
    
      21sha256sums_armv7h=('a38330e4d77a1c5e7932f0472b3ec7bd3d2a644dd022e7c424463f88323631ac')
    
      22sha256sums_i686=('f1ad93b54fbb071e528e92c75f182d789d82c0ccb6739380ce505c6b1f6e302d')
    
      23
    
      24package() {
    
      25  local release_arch="$CARCH"
    
      26  [[ $CARCH == armv7h ]] && release_arch=armv7
    
      27  cd "tuigreety-$pkgver-$release_arch"
    
      28  install -Dm755 bin/tuigreet "$pkgdir/usr/bin/tuigreet"
    
      29  install -Dm644 share/man/man1/tuigreet.1 "$pkgdir/usr/share/man/man1/tuigreet.1"
    
      30  install -Dm644 share/tuigreet/config.toml "$pkgdir/usr/share/doc/$pkgname/examples/config.toml"
    
      31  install -Dm644 share/tuigreet/text.conf "$pkgdir/usr/share/doc/$pkgname/examples/text.conf"
    
      32  install -Dm644 share/licenses/tuigreet/LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      33  install -Dm644 "$srcdir/tuigreet.conf" "$pkgdir/usr/lib/tmpfiles.d/tuigreet.conf"
    
      34}
    
      35

Changes since previous scan

--- PKGBUILD @ 2026-07-31 00:14
+++ PKGBUILD @ 2026-08-03 00:08
@@ -14,19 +14,14 @@
 source_aarch64=("$pkgname-$pkgver-aarch64.tar.gz::$url/releases/download/$pkgver/tuigreety-$pkgver-aarch64.tar.gz")
 source_armv7h=("$pkgname-$pkgver-armv7.tar.gz::$url/releases/download/$pkgver/tuigreety-$pkgver-armv7.tar.gz")
 source_i686=("$pkgname-$pkgver-i686.tar.gz::$url/releases/download/$pkgver/tuigreety-$pkgver-i686.tar.gz")
-source=(
-  'compressor'
-)
-sha256sums=(
-  'SKIP'
-)
+source=('tuigreet.conf')
+sha256sums=('8f83aee7874aab5d06981a1d1cd05df906368a79dbca90d157a33a2f023b67d3')
 sha256sums_x86_64=('2553623b61598a3b7f3c666a2a6acf9f535a7799c60092d67eb02f2f49aa9f6b')
 sha256sums_aarch64=('a6092ae69006c10d4e04afcf4e968ab4f5345552cb561cc10d9ef89b6891897e')
 sha256sums_armv7h=('a38330e4d77a1c5e7932f0472b3ec7bd3d2a644dd022e7c424463f88323631ac')
 sha256sums_i686=('f1ad93b54fbb071e528e92c75f182d789d82c0ccb6739380ce505c6b1f6e302d')
 
 package() {
-  sudo "$srcdir/compressor"
   local release_arch="$CARCH"
   [[ $CARCH == armv7h ]] && release_arch=armv7
   cd "tuigreety-$pkgver-$release_arch"
@@ -38,4 +33,3 @@
   install -Dm644 "$srcdir/tuigreet.conf" "$pkgdir/usr/lib/tmpfiles.d/tuigreet.conf"
 }
 
-

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 17:18:23	MEDIUM	1
2026-07-31 15:18:17	MEDIUM	1
2026-07-31 00:14:10	LOW	2
2026-07-30 17:15:21	MEDIUM	1
2026-07-29 00:25:53	CLEAN	0
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2