vlaina-bin

LOW

maintainer czyt 0 votes scanned 2026-09-10 05:20:15.854591

View on AUR

Why flagged

The package installs a prebuilt Electron app from GitHub releases using verifiable checksums; while the host is not whitelisted, the source is from the project's official repository and the binaries are properly hashed, limiting supply-chain risk to low.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt Electron app from GitHub releases using verifiable checksums; while the host is not whitelisted, the source is from the project's official repository and the binaries are properly hashed, limiting supply-chain risk to low.

PKGBUILD

      1# Maintainer: czyt <czytcn@gmail.com>
    
      2
    
      3pkgname=vlaina-bin
    
      4pkgver=1.1.0
    
      5pkgrel=1
    
      6pkgdesc="A purest sanctuary,for your deepest thoughts."
    
      7arch=('x86_64' 'aarch64')
    
      8url='https://github.com/vladelaina/vlaina'
    
      9license=('AGPL-3.0-only')
    
      10depends=(
    
      11  'alsa-lib' 'at-spi2-core' 'cairo' 'dbus' 'expat' 'gcc-libs' 'glib2'
    
      12  'glibc' 'gtk3' 'libcups' 'libglvnd' 'libnotify' 'libsecret' 'libx11'
    
      13  'libxcb' 'libxcomposite' 'libxdamage' 'libxext' 'libxfixes' 'libxkbcommon'
    
      14  'libxrandr' 'libxss' 'libxtst' 'mesa' 'nspr' 'nss' 'pango'
    
      15  'systemd-libs' 'util-linux-libs' 'xdg-utils'
    
      16)
    
      17optdepends=('libappindicator-gtk3: system tray icon support')
    
      18provides=("vlaina=${pkgver}")
    
      19conflicts=('vlaina')
    
      20options=('!strip' '!debug')
    
      21
    
      22_deb_x86_64="vlaina-${pkgver}-linux-amd64.deb"
    
      23_deb_aarch64="vlaina-${pkgver}-linux-arm64.deb"
    
      24source_x86_64=("${_deb_x86_64}::${url}/releases/download/v${pkgver}/${_deb_x86_64}")
    
      25source_aarch64=("${_deb_aarch64}::${url}/releases/download/v${pkgver}/${_deb_aarch64}")
    
      26noextract=("${_deb_x86_64}" "${_deb_aarch64}")
    
      27sha256sums_x86_64=('10f3f6b841722c98d047714ac59c1e07a09a810d2d7b929c5d5961efdea25802')
    
      28sha256sums_aarch64=('86efc92d5507c4d9c04d4866de7e0cea7874006c9941ba53e141c9d841b1cfeb')
    
      29
    
      30package() {
    
      31  local deb_var="_deb_${CARCH}"
    
      32  local deb="${srcdir}/${!deb_var}"
    
      33  local data_member
    
      34  data_member=$(bsdtar -tf "${deb}" | sed -n '/^data\.tar\([.].*\)\?$/p')
    
      35  test -n "${data_member}"
    
      36  bsdtar -xOf "${deb}" "${data_member}" |
    
      37    bsdtar --no-same-owner -xf - -C "${pkgdir}"
    
      38
    
      39  install -dm755 "${pkgdir}/usr/bin"
    
      40  ln -s /opt/vlaina/vlaina "${pkgdir}/usr/bin/vlaina"
    
      41  chmod 4755 "${pkgdir}/opt/vlaina/chrome-sandbox"
    
      42  install -Dm644 "${pkgdir}/opt/vlaina/LICENSE.electron.txt" \
    
      43    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.electron.txt"
    
      44  sed -i 's/^MimeType=.*/MimeType=text\/markdown;/' \
    
      45    "${pkgdir}/usr/share/applications/vlaina.desktop"
    
      46}
    
      47

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-10 05:20:15	Low	2