wikistow-desktop-bin
The package downloads a prebuilt tarball from a GitHub release, which is a common and generally acceptable practice for AUR binary packages; the source is verifiable and the checksum is provided, though the low vote count and recent upload are minor risk indicators.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt tarball from a GitHub release, which is a common and generally acceptable practice for AUR binary packages; the source is verifiable and the checksum is provided, though the low vote count and recent upload are minor risk indicators.
PKGBUILD
# Maintainer: skint007 <archlinux.repose742@passmail.net>
#
# The desktop app from a GitHub Release, as CI built and tested it
# (docs/releasing.md). The release workflow sets the maintainer's email,
# _version, pkgrel and the checksum when it publishes this to the AUR; the
# values here are the release this copy was last checked against.
# pacman sorts a prerelease such as 0.3.0rc.1 before 0.3.0 only without the `-`.
_version=0.8.0
pkgname=wikistow-desktop-bin
pkgver=${_version//-/}
pkgrel=1
pkgdesc="Desktop app for your family's encrypted wiki"
# The app itself is JavaScript; the system Electron it runs on is x86_64 only.
arch=('x86_64')
url="https://github.com/skint007/wikistow"
license=('MIT')
# desktop-file-utils' pacman hook registers the wikistow:// handler, which
# desktops other than GNOME and KDE need for the browser to open the app.
# Signing in opens the browser with xdg-open, optional for electron44.
depends=('electron44' 'desktop-file-utils' 'hicolor-icon-theme' 'xdg-utils')
optdepends=('gnome-keyring: keep the sign-in and a remembered unlock between launches'
'kwallet: keep the sign-in and a remembered unlock between launches')
provides=('wikistow-desktop')
conflicts=('wikistow-desktop')
source=("https://github.com/skint007/wikistow/releases/download/v$_version/wikistow-desktop-$_version.tar.gz")
sha256sums=('10c7ab98bec63a345d448ef9f5b1ed5da360f699f649ea8f13e386d46d601b5e')
package() {
cd "wikistow-desktop-$_version"
install -Dm644 app.asar "$pkgdir/usr/lib/wikistow-desktop/app.asar"
# How the app was installed, for the app to read (docs/desktop.md).
echo aur > "$pkgdir/usr/lib/wikistow-desktop/install-source"
install -Dm755 wikistow-desktop "$pkgdir/usr/bin/wikistow-desktop"
install -Dm644 wikistow-desktop.desktop "$pkgdir/usr/share/applications/wikistow-desktop.desktop"
install -Dm644 wikistow-desktop.svg "$pkgdir/usr/share/icons/hicolor/scalable/apps/wikistow-desktop.svg"
install -Dm644 wikistow-desktop.png "$pkgdir/usr/share/icons/hicolor/512x512/apps/wikistow-desktop.png"
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
}
Changes since previous scan
--- PKGBUILD @ 2026-10-17 00:21+++ PKGBUILD @ 2026-10-17 01:16@@ -6,7 +6,7 @@ # values here are the release this copy was last checked against. # pacman sorts a prerelease such as 0.3.0rc.1 before 0.3.0 only without the `-`.-_version=0.7.0+_version=0.8.0 pkgname=wikistow-desktop-bin pkgver=${_version//-/} pkgrel=1@@ -24,7 +24,7 @@ provides=('wikistow-desktop') conflicts=('wikistow-desktop') source=("https://github.com/skint007/wikistow/releases/download/v$_version/wikistow-desktop-$_version.tar.gz")-sha256sums=('9e46616336a89a40aea4f1452b0f9d56a945c526721bf62d2806faa4bf8d4b3c')+sha256sums=('10c7ab98bec63a345d448ef9f5b1ed5da360f699f649ea8f13e386d46d601b5e') package() { cd "wikistow-desktop-$_version"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 01:16:24 | Low | 2 |
| 2026-10-17 00:21:55 | Clean | 2 |
| 2026-10-16 19:16:12 | Low | 1 |
| 2026-10-16 15:16:11 | Low | 1 |
| 2026-10-16 13:16:10 | Low | 1 |
| 2026-10-16 00:12:47 | Clean | 2 |
| 2026-10-15 15:12:23 | Low | 1 |
| 2026-10-15 01:21:20 | Low | 1 |