wasp-d77

CLEAN

maintainer dani-77 0 votes scanned 2026-09-27 00:07:07.510666

View on AUR

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from a source tarball hosted on the project's own GitHub repository, which is a normal and trusted practice for AUR packages; the low vote count and recent upload are not indicators of malicious intent or supply-chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Daniel Azevedo <daniazevedo77@posteo.net>
    
      2
    
      3pkgname=wasp-d77
    
      4_name=wasp
    
      5pkgver=0.9.1
    
      6pkgrel=1
    
      7pkgdesc="Lua-configurable Wayland compositor based on dwl/wlroots"
    
      8arch=('x86_64' 'aarch64')
    
      9url="https://github.com/dani-77/wasp"
    
      10license=('GPL-3.0-or-later' 'MIT')
    
      11# The "wasp" AUR package is an unrelated MQTT broker that also ships
    
      12# /usr/bin/wasp.
    
      13provides=('wasp')
    
      14conflicts=('wasp')
    
      15depends=('wlroots0.20' 'scenefx0.5' 'wayland' 'libxkbcommon' 'libinput'
    
      16         'pixman' 'fcft' 'lua54' 'libxcb' 'xcb-util-wm' 'xorg-xwayland'
    
      17         'dbus' 'glibc')
    
      18makedepends=('wayland-protocols' 'tllist' 'pkgconf')
    
      19optdepends=(
    
      20  'iw: wifi status in wasp-statusbar'
    
      21  'libpulse: volume in wasp-statusbar (pactl)'
    
      22  'xdg-desktop-portal-gtk: default portal backend (file dialogs, etc.)'
    
      23  'xdg-desktop-portal-wlr: screen sharing and screenshots through portals'
    
      24)
    
      25backup=('etc/xdg-desktop-portal/wasp-portals.conf')
    
      26source=("$_name-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz")
    
      27sha256sums=('6d12700903a4d59a494984882126c7bda15ede8788a071c0f98d050a2e10d762')
    
      28
    
      29build() {
    
      30    cd "$_name-$pkgver"
    
      31    # config.mk derives VERSION from `git describe`, which a release
    
      32    # tarball can't answer.
    
      33    make VERSION="$pkgver"
    
      34}
    
      35
    
      36package() {
    
      37    cd "$_name-$pkgver"
    
      38    make PREFIX=/usr DESTDIR="$pkgdir" VERSION="$pkgver" install
    
      39    install -Dm644 LICENSE.wasp "$pkgdir/usr/share/licenses/$pkgname/LICENSE.wasp"
    
      40    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      41}
    
      42

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-27 00:07:07	Clean	2
2026-09-26 23:16:08	Low	1