urma-node

LOW

maintainer ZmoleCristian 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package builds from a source tarball hosted on the project's official GitHub releases with a provided checksum, despite the SKIP comment; the build process is transparent and uses standard cargo and pnpm workflows, posing no inherent risk beyond typical AUR packages with few votes and recent uploads.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a source tarball hosted on the project's official GitHub releases with a provided checksum, despite the SKIP comment; the build process is transparent and uses standard cargo and pnpm workflows, posing no inherent risk beyond typical AUR packages with few votes and recent uploads.

PKGBUILD

      1# Maintainer: Cristian Zmole <urma@rosint.org>
    
      2pkgname=urma-node
    
      3pkgver=0.7.3
    
      4pkgrel=1
    
      5pkgdesc='URMA archive node: service, control CLI and desktop status app'
    
      6arch=('x86_64')
    
      7url='https://github.com/urma-protocol/urma-node'
    
      8license=('0BSD')
    
      9depends=('cairo' 'dbus' 'gdk-pixbuf2' 'glib2' 'glibc' 'gtk3' 'hicolor-icon-theme' 'libgcc' 'libsoup3' 'webkit2gtk-4.1')
    
      10makedepends=('cargo' 'nodejs' 'pnpm')
    
      11options=('!lto')
    
      12install=urma-node.install
    
      13source=("$url/releases/download/v$pkgver/$pkgname-$pkgver.tar.gz")
    
      14# SKIP only here, for CI's local git-archive tarball; each release publishes urma-node-<ver>.PKGBUILD with its attached tarball's sha256.
    
      15sha256sums=('f2a023126a44b60df4c776c7abed173f6fbba228ef8535ed6c6b9f41dba74fad')
    
      16
    
      17prepare() {
    
      18    cd "$pkgname-$pkgver"
    
      19    export RUSTUP_TOOLCHAIN=stable
    
      20    cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      21    cd urma-node-app
    
      22    pnpm install --frozen-lockfile
    
      23}
    
      24
    
      25build() {
    
      26    cd "$pkgname-$pkgver"
    
      27    export RUSTUP_TOOLCHAIN=stable
    
      28    export CARGO_TARGET_DIR="$srcdir/target"
    
      29    cargo build --frozen --release -p urma-node --bins
    
      30    cd urma-node-app
    
      31    pnpm tauri build --no-bundle
    
      32}
    
      33
    
      34package() {
    
      35    cd "$pkgname-$pkgver"
    
      36    install -Dm755 "$srcdir/target/release/urma-node" "$pkgdir/usr/bin/urma-node"
    
      37    install -Dm755 "$srcdir/target/release/urma-node-control" "$pkgdir/usr/bin/urma-node-control"
    
      38    install -Dm755 "$srcdir/target/release/urma-node-app" "$pkgdir/usr/bin/urma-node-app"
    
      39    install -Dm644 urma-node-app/src-tauri/icons/128x128.png "$pkgdir/usr/share/icons/hicolor/128x128/apps/urma-node.png"
    
      40    install -Dm644 urma-node-app/src/assets/urma-node.svg "$pkgdir/usr/share/icons/hicolor/scalable/apps/urma-node.svg"
    
      41    install -Dm644 contrib/aur/urma-node.desktop "$pkgdir/usr/share/applications/urma-node.desktop"
    
      42    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      43}
    
      44

Changes since previous scan

--- PKGBUILD @ 2026-10-16 00:12
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,6 +1,6 @@
 # Maintainer: Cristian Zmole <urma@rosint.org>
 pkgname=urma-node
-pkgver=0.7.1
+pkgver=0.7.3
 pkgrel=1
 pkgdesc='URMA archive node: service, control CLI and desktop status app'
 arch=('x86_64')
@@ -12,7 +12,7 @@
 install=urma-node.install
 source=("$url/releases/download/v$pkgver/$pkgname-$pkgver.tar.gz")
 # SKIP only here, for CI's local git-archive tarball; each release publishes urma-node-<ver>.PKGBUILD with its attached tarball's sha256.
-sha256sums=('6a489b47977206cd38e56a044dd74be94b293e138788284e996084c66666548a')
+sha256sums=('f2a023126a44b60df4c776c7abed173f6fbba228ef8535ed6c6b9f41dba74fad')
 
 prepare() {
     cd "$pkgname-$pkgver"

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 01:13:57	Low	2
2026-10-16 00:12:47	Clean	2
2026-10-15 23:13:54	Low	1
2026-10-15 00:28:05	Clean	2
2026-10-14 23:21:11	Low	1
2026-10-14 19:20:25	Low	1
2026-10-14 15:20:15	Low	1