vgshell-quickshell

CLEAN

maintainer vanillagreen 0 votes scanned 2026-10-18 00:06:55.117981

View on AUR

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from a pinned Git commit of the project's own source code hosted on a plausible project-owned domain, with no remote code execution, obfuscated downloads, or untrusted prebuilt binaries; the low-vote and recent-upload flags are metadata concerns, not security risks.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: VanillaGreen <brad@vanillagreen.com>
    
      2# Based on the owner-tested quickshell-git recipe by Entailz.
    
      3
    
      4_pkgname=quickshell
    
      5pkgname=vgshell-quickshell
    
      6pkgver=0.3.2.r7.g2b4501a
    
      7pkgrel=1
    
      8pkgdesc='Flexible toolkit for making desktop shells with QtQuick'
    
      9arch=(x86_64 aarch64)
    
      10url='https://git.outfoxxed.me/quickshell/quickshell'
    
      11options=(!strip)
    
      12license=('LGPL-3.0-only')
    
      13depends=(
    
      14  'qt6-declarative'
    
      15  'qt6-base'
    
      16  'jemalloc'
    
      17  'qt6-svg'
    
      18  'libpipewire'
    
      19  'libxcb'
    
      20  'wayland'
    
      21  'libdrm'
    
      22  'mesa'
    
      23	'cpptrace'
    
      24	'polkit'
    
      25)
    
      26makedepends=(
    
      27	'vulkan-headers'
    
      28  'spirv-tools'
    
      29  'qt6-shadertools'
    
      30  'wayland'
    
      31  'wayland-protocols'
    
      32  'cli11'
    
      33  'ninja'
    
      34  'cmake'
    
      35  'git'
    
      36)
    
      37provides=("$_pkgname=${pkgver%%.r*}")
    
      38conflicts=('quickshell' 'quickshell-git')
    
      39
    
      40_pkgsrc="$_pkgname"
    
      41source=("$_pkgsrc"::"git+$url.git#commit=2b4501a282689792b62e94f3fb30d8f512324fe6"
    
      42  quickshell-check.hook
    
      43  vgs-989-deletelater.patch
    
      44  vgs-1109-log-filter-mutex.patch)
    
      45sha256sums=('SKIP'
    
      46            '8543e21aeaaa5441b73a679160e7601a957f16c433e8d6bd9257e80bd0e94083'
    
      47            'df5e9c1ef8d2e1881f8781185c4285cd2ac6c8b1bd4fd3b6a3a7de236a40508a'
    
      48            '4e15375f9ac2b7a6c81b0bf494f462993d036214bed0d248b5fab5b154996513')
    
      49
    
      50
    
      51prepare() {
    
      52  cd "$_pkgsrc"
    
      53  patch -p1 --forward < "$srcdir/vgs-989-deletelater.patch"
    
      54  patch -p1 --forward < "$srcdir/vgs-1109-log-filter-mutex.patch"
    
      55}
    
      56
    
      57build() {
    
      58  cd "$_pkgname"
    
      59  cmake -GNinja -B build \
    
      60    -DCMAKE_BUILD_TYPE="RelWithDebInfo" \
    
      61    -DCMAKE_INSTALL_PREFIX=/usr \
    
      62    -DDISTRIBUTOR="VGS (package: vgshell-quickshell)" \
    
      63    -DINSTALL_QML_PREFIX=lib/qt6/qml
    
      64
    
      65  cmake --build build
    
      66}
    
      67
    
      68package() {
    
      69  install -Dm644 "quickshell-check.hook" -t "$pkgdir/usr/share/libalpm/hooks"
    
      70  cd "$_pkgname"
    
      71  DESTDIR="$pkgdir" cmake --install build
    
      72  install -Dm644 "LICENSE" -t "$pkgdir/usr/share/licenses/$_pkgname"
    
      73}
    
      74

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-18 00:06:55	Clean	2
2026-10-17 23:20:05	Low	1