veshell-bin

LOW

maintainer PapyElGringo 0 votes scanned 2026-10-07 14:05:47.471701

View on AUR

Why flagged

The package installs a prebuilt binary from a GitHub release, which is a normal practice for -bin packages; the source is from the project's official repository, and while the binary is not built from source, there is no evidence of malicious behavior or untrusted hosting.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from a GitHub release, which is a normal practice for -bin packages; the source is from the project's official repository, and while the binary is not built from source, there is no evidence of malicious behavior or untrusted hosting.

PKGBUILD

      1# Maintainer: Adrien Peslerbe <adrien@pesler.be>
    
      2# Arch/Manjaro binary package for Veshell.
    
      3#
    
      4# Generated at release time by scripts/gen-bin-recipes.py from
    
      5# templates/PKGBUILD-bin.in. Do not edit by hand.
    
      6#
    
      7# This installs the prebuilt payload published on the GitHub release
    
      8# (veshell-<release>-x86_64.tar.zst). Prefer the source `veshell` package when
    
      9# you want a fully verifiable source build.
    
      10
    
      11pkgname=veshell-bin
    
      12pkgver=0.1.0
    
      13pkgrel=1
    
      14pkgdesc="An innovative Not-Desktop environment for Linux built with Flutter and Rust"
    
      15arch=('x86_64')
    
      16url="https://github.com/free-explorers/veshell"
    
      17license=('GPL-3.0-or-later')
    
      18depends=(
    
      19  'fontconfig' 'ttf-roboto' 'noto-fonts' 'noto-fonts-cjk'
    
      20  'libglvnd' 'mesa'
    
      21  'libinput' 'seatd' 'systemd-libs' 'libxkbcommon'
    
      22  'libdisplay-info'
    
      23  'pipewire' 'libpulse'
    
      24  'gst-plugins-base' 'gst-plugins-base-libs' 'gst-plugins-good'
    
      25  'dbus' 'upower' 'polkit'
    
      26  'xorg-xwayland' 'xdg-desktop-portal' 'xdg-utils'
    
      27)
    
      28optdepends=(
    
      29  'networkmanager: network control panel'
    
      30  'bluez: Bluetooth control panel'
    
      31  'rtkit: real-time audio scheduling'
    
      32  'xdg-desktop-portal-gtk: GTK portal fallback backend'
    
      33)
    
      34provides=('veshell' 'wayland-compositor')
    
      35conflicts=('veshell' 'veshell-git')
    
      36
    
      37source=("veshell-0.1.0-x86_64.tar.zst::https://github.com/free-explorers/veshell-packaging/releases/download/v0.1.0/veshell-0.1.0-x86_64.tar.zst")
    
      38sha256sums=('615158b9e97943d9dd65abc7bd346bd32a892ff93a547ea4fea8e085ac742ccc')
    
      39
    
      40package() {
    
      41  bsdtar -xf "$srcdir/veshell-0.1.0-x86_64.tar.zst" -C "$pkgdir"
    
      42  install -Dm644 "$pkgdir/usr/share/licenses/veshell/LICENSE" \
    
      43    "$pkgdir/usr/share/licenses/$pkgname/LICENSE" 2>/dev/null || true
    
      44}
    
      45

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-07 14:05:47	Low	2