tutabridge-desktop-bin

LOW

maintainer anth0mk 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package installs a prebuilt binary from the project's official GitHub release, which is a normal practice for AUR bin packages; the source host is trustworthy and the payload is not obfuscated or executed remotely.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub release, which is a normal practice for AUR bin packages; the source host is trustworthy and the payload is not obfuscated or executed remotely.

PKGBUILD

      1# Maintainer: spartanz51 <a.m@tuta.com>
    
      2#
    
      3# Prebuilt TutaBridge desktop app (the Tauri GUI, bridge included): installs
    
      4# the files of the .deb published with the GitHub release, no build. The
    
      5# headless daemon is tutabridge-bin / tutabridge-git: it can be installed
    
      6# next to this one (different binaries, same configuration), just not run
    
      7# at the same time. For a build-from-source VCS package, see
    
      8# tutabridge-desktop-git.
    
      9pkgname=tutabridge-desktop-bin
    
      10pkgver=0.1.0rc13
    
      11pkgrel=1
    
      12pkgdesc="Local IMAP/SMTP bridge for Tuta encrypted email (prebuilt desktop app)"
    
      13arch=('x86_64')
    
      14url="https://github.com/spartanz51/tutabridge"
    
      15license=('GPL-3.0-or-later')
    
      16depends=('webkit2gtk-4.1' 'gtk3' 'dbus')
    
      17optdepends=('gnome-keyring: persist the Tuta session across reboots (Secret Service)'
    
      18            'kwallet: alternative Secret Service provider')
    
      19provides=('tutabridge-desktop')
    
      20conflicts=('tutabridge-desktop')
    
      21_tag=v0.1.0-rc.13
    
      22source=("TutaBridge-$pkgver.deb::$url/releases/download/$_tag/TutaBridge-Linux.deb"
    
      23        "LICENSE::https://raw.githubusercontent.com/spartanz51/tutabridge/$_tag/LICENSE")
    
      24noextract=("TutaBridge-$pkgver.deb")
    
      25sha256sums=('3e3f5fe4fd10f7a6a41e966de9e89fefa5ced2ae8b23c1853b7c395ed4711ba2'
    
      26            '947215ddc328843b76022d5b77e1ca3b1152301778d33e24491e5064e92fc6cf')
    
      27
    
      28package() {
    
      29	# The .deb carries /usr/bin/tutabridge-gui, the desktop file and the icons.
    
      30	bsdtar -xOf "TutaBridge-$pkgver.deb" data.tar.gz | bsdtar -xf - -C "$pkgdir"
    
      31	install -Dm644 "LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      32}
    
      33

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 00:11:52	Low	2
2026-10-09 12:11:09	Low	2