webhid-addon

LOW

maintainer k4zoku 0 votes scanned 2026-08-24 05:22:02.165497

View on AUR

Why flagged

The package downloads a Firefox extension from the official AMO site, which is a trusted source; the low severity is due to the SKIP'd checksum and few votes, but the source and behavior are legitimate.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a Firefox extension from the official AMO site, which is a trusted source; the low severity is due to the SKIP'd checksum and few votes, but the source and behavior are legitimate.

PKGBUILD

      1# Maintainer: K4zoku <k4zoku@pm.me>
    
      2#
    
      3# This PKGBUILD downloads the WebHID Firefox extension from AMO (addons.mozilla.org).
    
      4# Always fetches the latest release; pkgver is extracted from the XPI manifest,
    
      5# so the version tracks the downloaded artifact automatically.
    
      6
    
      7pkgname=webhid-addon
    
      8pkgver=3.1.0
    
      9pkgrel=1
    
      10pkgdesc='WebHID browser extension for Firefox and Zen (system-wide installation)'
    
      11arch=('any')
    
      12url='https://github.com/K4zoku/FF-WebHID'
    
      13license=('MIT')
    
      14depends=('webhid')
    
      15makedepends=('unzip' 'jq')
    
      16install=webhid-addon.install
    
      17_ext_id='webhid@k4zoku.dev'
    
      18_amo_url="https://addons.mozilla.org/firefox/downloads/latest/${_ext_id}/latest.xpi"
    
      19source=("${_ext_id}.xpi::${_amo_url}")
    
      20sha256sums=('SKIP')
    
      21noextract=("${_ext_id}.xpi")
    
      22
    
      23_ff_guid='{ec8030f7-c20a-464f-9b0e-13a3a9e97384}'
    
      24
    
      25pkgver() {
    
      26    local _ver
    
      27    _ver=$(unzip -p "$srcdir/${_ext_id}.xpi" manifest.json | jq -r '.version')
    
      28    [[ -n "$_ver" ]] || return 1
    
      29    printf '%s' "$_ver"
    
      30}
    
      31
    
      32build() {
    
      33    msg2 "Building webhid-addon version $pkgver"
    
      34}
    
      35
    
      36_browser_forks=(librewolf waterfox)
    
      37
    
      38_install_browser_forks() {
    
      39    local _src="$1" _dest="$2" _root
    
      40    for _root in "${_browser_forks[@]}"; do
    
      41        install -Dm644 "$_src" "$pkgdir/usr/lib/$_root/$_dest"
    
      42    done
    
      43}
    
      44
    
      45package() {
    
      46    local _xpi="$srcdir/${_ext_id}.xpi"
    
      47
    
      48    install -Dm644 "$_xpi" \
    
      49        "$pkgdir/usr/lib/mozilla/extensions/$_ff_guid/$_ext_id.xpi"
    
      50    _install_browser_forks "$_xpi" "extensions/$_ext_id.xpi"
    
      51}
    
      52

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-24 05:22:02	Low	2