waybar-mechabar-git

maintainer Spixmaster · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package builds from the project's own Git repository, installs only configuration files and scripts, and poses no remote code execution or supply-chain risk despite unverified checksum and low votes.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own Git repository, installs only configuration files and scripts, and poses no remote code execution or supply-chain risk despite unverified checksum and low votes.

PKGBUILD

      1#!/usr/bin/env bash
    
      2# shellcheck disable=SC2034
    
      3# shellcheck disable=SC2154
    
      4# The PKGBUILD for mechabar.
    
      5# Maintainer: Matheus <matheusgwdl@protonmail.com>
    
      6# Contributor: Matheus <matheusgwdl@protonmail.com>
    
      7
    
      8readonly _pkgname="mechabar"
    
      9
    
      10pkgname="waybar-mechabar-git"
    
      11pkgver="r246.9d325c3"
    
      12pkgrel=1
    
      13pkgdesc="A customizable and modular Waybar configuration."
    
      14arch=("any")
    
      15url="https://github.com/sejjy/${_pkgname}"
    
      16license=("MIT")
    
      17optdepends=("bluez-utils: Bluetooth."
    
      18    "brightnessctl: Display brightness."
    
      19    "fzf: Fuzzy finder."
    
      20    "libpulse: Sound manipulation."
    
      21    "networkmanager: Network."
    
      22    "notification-daemon: Notifications."
    
      23    "otf-commit-mono-nerd: Font."
    
      24    "pacman-contrib: Package manager."
    
      25    "ttf-jetbrains-mono-nerd: Font."
    
      26    "waybar: Status bar.")
    
      27makedepends=("git")
    
      28provides=("waybar-mechabar")
    
      29source=("${_pkgname}::git+${url}.git")
    
      30sha512sums=("SKIP")
    
      31
    
      32pkgver()
    
      33{
    
      34    cd "${srcdir}"/"${_pkgname}"/ || exit 1
    
      35    printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)" || true
    
      36}
    
      37
    
      38package()
    
      39{
    
      40    # Assure that the directories exist.
    
      41    mkdir -p "${pkgdir}"/usr/share/"${pkgname}"/
    
      42    mkdir -p "${pkgdir}"/usr/share/doc/"${pkgname}"/
    
      43    mkdir -p "${pkgdir}"/usr/share/licenses/"${pkgname}"/
    
      44
    
      45    # Install the software.
    
      46    cp -r "${srcdir}"/"${_pkgname}"/modules/ "${pkgdir}"/usr/share/"${pkgname}"/
    
      47    cp -r "${srcdir}"/"${_pkgname}"/scripts/ "${pkgdir}"/usr/share/"${pkgname}"/
    
      48    cp -r "${srcdir}"/"${_pkgname}"/styles/ "${pkgdir}"/usr/share/"${pkgname}"/
    
      49    install -Dm644 "${srcdir}"/"${_pkgname}"/config.jsonc "${pkgdir}"/usr/share/"${pkgname}"/
    
      50    install -Dm644 "${srcdir}"/"${_pkgname}"/style.css "${pkgdir}"/usr/share/"${pkgname}"/
    
      51
    
      52    # Install the documentation.
    
      53    install -Dm644 "${srcdir}"/"${_pkgname}"/README.md "${pkgdir}"/usr/share/doc/"${pkgname}"/
    
      54
    
      55    # Install the license.
    
      56    install -Dm644 "${srcdir}"/"${_pkgname}"/LICENSE "${pkgdir}"/usr/share/licenses/"${pkgname}"/
    
      57}
    
      58

Changes since previous scan

--- PKGBUILD @ 2026-08-16 00:03
+++ PKGBUILD @ 2026-08-18 00:03
@@ -21,6 +21,7 @@
     "networkmanager: Network."
     "notification-daemon: Notifications."
     "otf-commit-mono-nerd: Font."
+    "pacman-contrib: Package manager."
     "ttf-jetbrains-mono-nerd: Font."
     "waybar: Status bar.")
 makedepends=("git")

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 09:32:18	LOW	2
2026-08-16 00:03:42	CLEAN	2
2026-08-15 05:30:14	LOW	1