windinput-bin

LOW

maintainer Joey5403 1 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package installs a prebuilt Debian .deb from GitHub Releases, which is a common but unverifiable distribution method; however, it is sourced from the official project repository, checksums are provided, and the payload is a legitimate Fcitx5 input method module, not executable code or scripts.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt Debian .deb from GitHub Releases, which is a common but unverifiable distribution method; however, it is sourced from the official project repository, checksums are provided, and the payload is a legitimate Fcitx5 input method module, not executable code or scripts.

PKGBUILD

      1# Maintainer: 郑祎
    
      2pkgname=windinput-bin
    
      3pkgver=0.126.0
    
      4pkgrel=1
    
      5pkgdesc='基于 Debian 发行包重打包的清风输入法 Fcitx5 Linux 预览版'
    
      6arch=('x86_64' 'aarch64')
    
      7url='https://windinput.com'
    
      8license=('MIT' 'LGPL-3.0-only')
    
      9depends=(
    
      10  'bash'
    
      11  'dbus'
    
      12  'fcitx5>=5.0.14'
    
      13  'fontconfig'
    
      14  'gcc-libs'
    
      15  'glibc'
    
      16  'hicolor-icon-theme'
    
      17  'libxcb'
    
      18  'libxkbcommon'
    
      19  'procps-ng'
    
      20  'python'
    
      21  'wayland'
    
      22  'xz'
    
      23)
    
      24optdepends=(
    
      25  'fcitx5-configtool: add WindInput to your input method group'
    
      26  'fcitx5-gtk: input method support for GTK applications'
    
      27  'fcitx5-qt: input method support for Qt applications'
    
      28  'noto-fonts-cjk: Chinese text rendering, unless another CJK font is installed'
    
      29  'noto-fonts-emoji: color emoji rendering'
    
      30  'xclip: clipboard support on X11'
    
      31  'wl-clipboard: clipboard support on Wayland'
    
      32  'xdg-utils: open links and associated files'
    
      33  'xdg-desktop-portal: file dialogs, requires a desktop-specific portal backend'
    
      34  'zenity: fallback file dialogs'
    
      35)
    
      36provides=("windinput=$pkgver")
    
      37conflicts=('windinput')
    
      38options=('!strip' '!debug')
    
      39install=windinput.install
    
      40source=("WindInput-$pkgver-LICENSE::https://raw.githubusercontent.com/huanfeng/WindInput/v$pkgver/LICENSE")
    
      41source_x86_64=("https://github.com/huanfeng/WindInput/releases/download/v$pkgver/WindInput-$pkgver-linux-amd64.deb")
    
      42source_aarch64=("https://github.com/huanfeng/WindInput/releases/download/v$pkgver/WindInput-$pkgver-linux-arm64.deb")
    
      43sha256sums=('43619c691546f1967bf997b0eab75a57cb5513d5c2679d444dfd1c087e53d310')
    
      44sha256sums_x86_64=('96222852b853bb1e7b464812032bbb1b5e63c3ee945e8060611f663b73453541')
    
      45sha256sums_aarch64=('430fe0bd9815e497afabd043a9fdda3d356a0249680f61d006c89b2647cc1bc1')
    
      46
    
      47package() {
    
      48  local _multiarch
    
      49  case "$CARCH" in
    
      50    x86_64) _multiarch=x86_64-linux-gnu ;;
    
      51    aarch64) _multiarch=aarch64-linux-gnu ;;
    
      52  esac
    
      53
    
      54  bsdtar -xf "$srcdir/data.tar.zst" -C "$pkgdir"
    
      55
    
      56  # Fcitx5 on Arch does not search Debian's multiarch library directories.
    
      57  install -Dm644 "$pkgdir/usr/lib/$_multiarch/fcitx5/libwindinput.so" \
    
      58    "$pkgdir/usr/lib/fcitx5/libwindinput.so"
    
      59  rm -r "$pkgdir/usr/lib/$_multiarch"
    
      60
    
      61  install -Dm644 "$srcdir/WindInput-$pkgver-LICENSE" \
    
      62    "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      63  install -Dm644 "$pkgdir/usr/lib/windinput/data/emoji/LICENSE" \
    
      64    "$pkgdir/usr/share/licenses/$pkgname/emoji-LICENSE"
    
      65}
    
      66

Changes since previous scan

--- PKGBUILD @ 2026-10-13 00:23
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,6 +1,6 @@
 # Maintainer: 郑祎
 pkgname=windinput-bin
-pkgver=0.125.0
+pkgver=0.126.0
 pkgrel=1
 pkgdesc='基于 Debian 发行包重打包的清风输入法 Fcitx5 Linux 预览版'
 arch=('x86_64' 'aarch64')
@@ -41,8 +41,8 @@
 source_x86_64=("https://github.com/huanfeng/WindInput/releases/download/v$pkgver/WindInput-$pkgver-linux-amd64.deb")
 source_aarch64=("https://github.com/huanfeng/WindInput/releases/download/v$pkgver/WindInput-$pkgver-linux-arm64.deb")
 sha256sums=('43619c691546f1967bf997b0eab75a57cb5513d5c2679d444dfd1c087e53d310')
-sha256sums_x86_64=('de54b04859c2f47ba086eab7d6fb92133e4896cfd6a54a74f6195cff9fbd3df3')
-sha256sums_aarch64=('e7a70fe5602a31ec623a11d227d3a8e5f19ab3d7f52386da275720eef037bd38')
+sha256sums_x86_64=('96222852b853bb1e7b464812032bbb1b5e63c3ee945e8060611f663b73453541')
+sha256sums_aarch64=('430fe0bd9815e497afabd043a9fdda3d356a0249680f61d006c89b2647cc1bc1')
 
 package() {
   local _multiarch

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 09:16:20	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 12:14:12	Low	2