vgshell

LOW

maintainer vanillagreen 0 votes scanned 2026-10-06 00:13:36.889724

View on AUR

Why flagged

The package builds from a source tarball hosted on GitHub, which is plausibly the project's own release; the flagged low votes and recent upload are quality concerns but do not indicate active danger.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a source tarball hosted on GitHub, which is plausibly the project's own release; the flagged low votes and recent upload are quality concerns but do not indicate active danger.

PKGBUILD

      1# Maintainer: VanillaGreen <brad@vanillagreen.com>
    
      2#
    
      3# The release package. docs/architecture/distribution-arch.md
    
      4# states the rules scripts/check-packaging.js enforces on this file and on
    
      5# ../vgshell-git/PKGBUILD. sha256sums stays SKIP only until the tag v$pkgver
    
      6# exists; the release pins the tarball's sum.
    
      7
    
      8pkgname=vgshell
    
      9pkgver=0.1.0
    
      10pkgrel=1
    
      11pkgdesc='Desktop shell for Hyprland, built on Quickshell'
    
      12arch=('any')
    
      13url='https://github.com/vanillagreencom/vgshell'
    
      14license=('MIT AND OFL-1.1 AND ISC AND Apache-2.0')
    
      15depends=(
    
'quickshell>=0.3.1'
    
'hyprland>=0.56'
    
'bash'
    
'coreutils'
    
'util-linux'
    
'nodejs>=18'
    
'python'
    
'libxkbcommon'
    
'xkeyboard-config'
    
'git'
    
'agent-browser-bin'
    
'bubblewrap'
    
'chromium'
    
'curl'
    
'dbus'
    
'fd'
    
'ffmpeg'
    
'file'
    
'fzf'
    
'glib2'
    
'gpu-screen-recorder'
    
'grim'
    
'gum'
    
'hyprpicker'
    
'imagemagick'
    
'iproute2'
    
'less'
    
'libnotify'
    
'libpulse'
    
'libsecret'
    
'mise'
    
'networkmanager'
    
'pacman-contrib'
    
'pipewire'
    
'pipewire-audio'
    
'playerctl'
    
'qrencode'
    
'slurp'
    
'systemd'
    
'tesseract'
    
'tesseract-data-eng'
    
'uv'
    
'vsys'
    
'wireplumber'
    
'wl-clipboard'
    
'wlrctl'
    
'wtype'
    
'xdg-terminal-exec'
    
'xdg-utils'
    
      65)
    
      66optdepends=(
    
'voxtype-bin: Voice dictation engine'
    
'tmux: several Jarvis coding tasks at once'
    
'ydotool: Jarvis pointer fallback with an already running input service'
    
'bluez-utils: bluetoothctl, the Bluetooth pairing agent that answers pairing prompts'
    
'snapper: a snapshot before the update pipeline changes packages'
    
'timeshift: a snapshot before the update pipeline changes packages, without snapper'
    
'sudo: package installs and the browser policy writer in floating TUIs'
    
'nvidia-utils: verifies a selected Jarvis CUDA local voice tier'
    
'ddcutil: brightness of external displays in the Displays plugin'
    
'brightnessctl: brightness of a laptop built-in display in the Displays plugin'
    
'cronie: crontab, which schedules automations where no systemd user manager answers'
    
'greetd: the login screen at boot'
    
'uwsm: the Hyprland (uwsm-managed) session the login screen starts first'
    
'xorg-xinit: startx, for X11 sessions on the login screen'
    
'glibc: getent, the accounts on the login screen'
    
'polkit: pkexec, so applications can ask for administrator access'
    
'tailscale: the Tailscale connection in the VPN plugin'
    
      84)
    
      85source=("vgshell-$pkgver.tar.gz::$url/releases/download/v$pkgver/vgshell-$pkgver.tar.gz")
    
      86sha256sums=('18239c1dcef84b8d07187085c183cb42244abdac0f16a82c5d57318deb560612')
    
      87install=vgshell.install
    
      88
    
      89package() {
    
cd "vgshell-$pkgver"
    
DESTDIR="$pkgdir" PREFIX=/usr SYSCONFDIR=/etc ./packaging/install-system.sh
    
      92}
    
      93

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 00:13:36	Low	2
2026-10-05 23:40:58	Low	2