wikistow-desktop-bin

LOW
maintainer skint007 0 votes scanned 2026-10-17 01:16:24.843905
View on AUR
Why flagged

The package downloads a prebuilt tarball from a GitHub release, which is a common and generally acceptable practice for AUR binary packages; the source is verifiable and the checksum is provided, though the low vote count and recent upload are minor risk indicators.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt tarball from a GitHub release, which is a common and generally acceptable practice for AUR binary packages; the source is verifiable and the checksum is provided, though the low vote count and recent upload are minor risk indicators.

PKGBUILD

1# Maintainer: skint007 <archlinux.repose742@passmail.net>
2#
3# The desktop app from a GitHub Release, as CI built and tested it
4# (docs/releasing.md). The release workflow sets the maintainer's email,
5# _version, pkgrel and the checksum when it publishes this to the AUR; the
6# values here are the release this copy was last checked against.
7
8# pacman sorts a prerelease such as 0.3.0rc.1 before 0.3.0 only without the `-`.
9_version=0.8.0
10pkgname=wikistow-desktop-bin
11pkgver=${_version//-/}
12pkgrel=1
13pkgdesc="Desktop app for your family's encrypted wiki"
14# The app itself is JavaScript; the system Electron it runs on is x86_64 only.
15arch=('x86_64')
16url="https://github.com/skint007/wikistow"
17license=('MIT')
18# desktop-file-utils' pacman hook registers the wikistow:// handler, which
19# desktops other than GNOME and KDE need for the browser to open the app.
20# Signing in opens the browser with xdg-open, optional for electron44.
21depends=('electron44' 'desktop-file-utils' 'hicolor-icon-theme' 'xdg-utils')
22optdepends=('gnome-keyring: keep the sign-in and a remembered unlock between launches'
23 'kwallet: keep the sign-in and a remembered unlock between launches')
24provides=('wikistow-desktop')
25conflicts=('wikistow-desktop')
26source=("https://github.com/skint007/wikistow/releases/download/v$_version/wikistow-desktop-$_version.tar.gz")
27sha256sums=('10c7ab98bec63a345d448ef9f5b1ed5da360f699f649ea8f13e386d46d601b5e')
28
29package() {
30 cd "wikistow-desktop-$_version"
31 install -Dm644 app.asar "$pkgdir/usr/lib/wikistow-desktop/app.asar"
32 # How the app was installed, for the app to read (docs/desktop.md).
33 echo aur > "$pkgdir/usr/lib/wikistow-desktop/install-source"
34 install -Dm755 wikistow-desktop "$pkgdir/usr/bin/wikistow-desktop"
35 install -Dm644 wikistow-desktop.desktop "$pkgdir/usr/share/applications/wikistow-desktop.desktop"
36 install -Dm644 wikistow-desktop.svg "$pkgdir/usr/share/icons/hicolor/scalable/apps/wikistow-desktop.svg"
37 install -Dm644 wikistow-desktop.png "$pkgdir/usr/share/icons/hicolor/512x512/apps/wikistow-desktop.png"
38 install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
39}
40

Changes since previous scan

--- PKGBUILD @ 2026-10-17 00:21
+++ PKGBUILD @ 2026-10-17 01:16
@@ -6,7 +6,7 @@
# values here are the release this copy was last checked against.
# pacman sorts a prerelease such as 0.3.0rc.1 before 0.3.0 only without the `-`.
-_version=0.7.0
+_version=0.8.0
pkgname=wikistow-desktop-bin
pkgver=${_version//-/}
pkgrel=1
@@ -24,7 +24,7 @@
provides=('wikistow-desktop')
conflicts=('wikistow-desktop')
source=("https://github.com/skint007/wikistow/releases/download/v$_version/wikistow-desktop-$_version.tar.gz")
-sha256sums=('9e46616336a89a40aea4f1452b0f9d56a945c526721bf62d2806faa4bf8d4b3c')
+sha256sums=('10c7ab98bec63a345d448ef9f5b1ed5da360f699f649ea8f13e386d46d601b5e')
package() {
cd "wikistow-desktop-$_version"

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 01:16:24 Low 2
2026-10-17 00:21:55 Clean 2
2026-10-16 19:16:12 Low 1
2026-10-16 15:16:11 Low 1
2026-10-16 13:16:10 Low 1
2026-10-16 00:12:47 Clean 2
2026-10-15 15:12:23 Low 1
2026-10-15 01:21:20 Low 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion