wizardchat-bin

LOW

maintainer fox1e 0 votes scanned 2026-11-05 02:08:18.897367

View on AUR

Why flagged

The package downloads a prebuilt tarball from the project's official GitLab instance, which is a trusted source; the low severity is due to the unverifiable prebuilt binary, not the source host.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt tarball from the project's official GitLab instance, which is a trusted source; the low severity is due to the unverifiable prebuilt binary, not the source host.

PKGBUILD

      1# Maintainer: fox1e <git@work.fox1e.dev>
    
      2
    
      3pkgname=wizardchat-bin
    
      4_version=26.12.1
    
      5pkgver=26.12.1
    
      6pkgrel=1
    
      7pkgdesc='Simple, secure, magical Matrix client'
    
      8arch=('x86_64')
    
      9url='https://wizardchat.org'
    
      10license=('AGPL-3.0-only')
    
      11depends=('webkit2gtk-4.1' 'gtk3' 'libayatana-appindicator' 'gst-plugins-base' 'gst-plugins-good')
    
      12optdepends=('gst-plugins-bad: voice and video calls' 'gst-libav: more video formats')
    
      13provides=('wizardchat')
    
      14conflicts=('wizardchat')
    
      15options=('!debug')
    
      16source=("https://gitlab.com/api/v4/projects/wizardchat%2Fwizardchat/packages/generic/wizardchat-desktop/v${_version}/wizardchat-${_version}-linux-x86_64.tar.gz")
    
      17sha256sums=('b59990451f862576aba1f9bab6ca993e60de676b804b72f0cc8f5d1f797bbb5b')
    
      18
    
      19package() {
    
      20  cp -a "${srcdir}/usr" "${pkgdir}/"
    
      21  install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      22}
    
      23
    
      24

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-05 02:08:18	Low	2