uad-ng

maintainer taxin · 1 votes · scanned 2026-08-18 00:03:42.021799

MEDIUM

Why flagged The package downloads a prebuilt binary from a GitHub release, which is not whitelisted and has a skipped checksum for the desktop and icon files; while the main binary has a valid checksum, the skipped checks on some sources reduce verifiability, posing a moderate supply-chain risk.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

MEDIUM AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 85%): The package downloads a prebuilt binary from a GitHub release, which is not whitelisted and has a skipped checksum for the desktop and icon files; while the main binary has a valid checksum, the skipped checks on some sources reduce verifiability, posing a moderate supply-chain risk.

PKGBUILD

      1# Maintainer: taxin <taxin404@duck.com>
    
      2
    
      3pkgname=uad-ng
    
      4pkgver=1.2.0
    
      5pkgrel=1
    
      6pkgdesc="Cross-platform GUI written in Rust using ADB to debloat non-rooted Android devices (next generation)"
    
      7arch=('x86_64')
    
      8url="https://github.com/Universal-Debloater-Alliance/universal-android-debloater-next-generation"
    
      9license=('GPL3')
    
      10depends=('android-tools' 'fontconfig' 'vulkan-icd-loader')
    
      11provides=('universal-android-debloater' 'uad-ng')
    
      12conflicts=('universal-android-debloater' 'universal-android-debloater-bin' 'universal-android-debloater-git')
    
      13source=("$pkgname-$pkgver::$url/releases/download/v$pkgver/uad-ng-noselfupdate-linux"
    
      14        "uad-ng.png::$url/raw/main/resources/assets/logo-light.png"
    
      15        "uad-ng.desktop")
    
      16sha256sums=('bae9ca2a31730dcf6c47d16915a23972690938213fb1705caaebd6d9d8794a34'
    
      17            'SKIP'
    
      18            'SKIP')
    
      19
    
      20package(){
    
      21    install -D -m 755 "$pkgname-$pkgver" "$pkgdir/usr/bin/uad-ng"
    
      22    install -D -m 644 "uad-ng.desktop" -t "$pkgdir/usr/share/applications"
    
      23    install -D -m 644 "uad-ng.png"     -t "$pkgdir/usr/share/pixmaps"
    
      24}
    
      25

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	MEDIUM	2
2026-08-17 00:18:29	MEDIUM	2
2026-08-16 00:03:42	MEDIUM	2
2026-08-15 00:26:13	MEDIUM	2
2026-08-14 00:03:41	MEDIUM	2
2026-08-13 00:17:07	MEDIUM	2
2026-08-12 17:24:46	MEDIUM	2