webwallpaper-plugin

LOW

maintainer ekoputrapratama 0 votes base webwallpaper-kde scanned 2026-09-05 09:59:47.702300

View on AUR

Why flagged

The package repackages prebuilt .deb files from the project's own GitHub releases, which is a common but suboptimal AUR practice; the source is verifiable and checksummed, but using upstream binaries instead of building from source limits auditability, though no active malice or remote code execution is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package repackages prebuilt .deb files from the project's own GitHub releases, which is a common but suboptimal AUR practice; the source is verifiable and checksummed, but using upstream binaries instead of building from source limits auditability, though no active malice or remote code execution is present.

PKGBUILD

      1# Maintainer: Eko Putra Pratama <your@email.com>
    
      2#
    
      3# WebWallpaper — KDE Plasma 6 wallpaper plugin + theme store.
    
      4# Binary package: repackages the prebuilt .deb files published on GitHub
    
      5# Releases into Arch packages (both subpackages from one PKGBUILD).
    
      6
    
      7pkgname=('webwallpaper-plugin' 'webwallpaper-store')
    
      8pkgbase=webwallpaper-kde
    
      9pkgver=0.1.0
    
      10pkgrel=1
    
      11pkgdesc="Live HTML/WebGL KDE Plasma 6 wallpapers (plugin) + theme store app"
    
      12arch=('x86_64')
    
      13url="https://github.com/ekoputrapratama/webwallpaper-kde"
    
      14license=('GPL-2.0-or-later')
    
      15makedepends=('libarchive')   # provides bsdtar used to unpack the .debs
    
      16options=('!strip' '!emptydirs')
    
      17
    
      18source=(
    
      19  "webwallpaper-plugin_${pkgver}_amd64.deb::https://github.com/ekoputrapratama/webwallpaper-kde/releases/download/v${pkgver}/webwallpaper-plugin_${pkgver}_amd64.deb"
    
      20  "webwallpaper-store_${pkgver}_amd64.deb::https://github.com/ekoputrapratama/webwallpaper-kde/releases/download/v${pkgver}/webwallpaper-store_${pkgver}_amd64.deb"
    
      21)
    
      22sha256sums=(
    
      23  '778085b4d8ef5cff20daeab749b9175b0560d510bc5eb1944eaf7ac7797bb59c'
    
      24  '66bbb7be44f5f524af3f383bb045146498aa9d9aabf43100805529904162082f'
    
      25)
    
      26
    
      27# Extract the filesystem payload (data.tar.*) of a .deb into the target dir.
    
      28unpack_deb() {
    
      29  local deb="$1" dest="$2"
    
      30  bsdtar -xf "${deb}" -O data.tar.xz | bsdtar -xf - -C "${dest}"
    
      31}
    
      32
    
      33package_webwallpaper-plugin() {
    
      34  depends=(
    
      35    'qt6-declarative'   # qml6-module-qtquick
    
      36    'qt6-webengine'     # qml6-module-qtwebengine
    
      37    'qt6-wayland'       # qml6-module-qtwaylandclient
    
      38    'kwindowsystem'     # libkf6windowsystem1
    
      39    'kwayland'          # libkf6waylandclient1
    
      40    'libplasma'         # libplasma6
    
      41  )
    
      42
    
      43  unpack_deb "${srcdir}/webwallpaper-plugin_${pkgver}_amd64.deb" "${pkgdir}"
    
      44}
    
      45
    
      46package_webwallpaper-store() {
    
      47  depends=(
    
      48    'qt6-base'          # libqt6core/gui/widgets/network
    
      49  )
    
      50
    
      51  unpack_deb "${srcdir}/webwallpaper-store_${pkgver}_amd64.deb" "${pkgdir}"
    
      52}
    
      53

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-05 09:59:47	Low	2