writ-bin

maintainer ibrahemid · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package installs a prebuilt AppImage from the project's official GitHub releases, which is a common but unverifiable practice; however, it is not inherently malicious as it comes from the maintainer's own repository and no remote code execution or obfuscation is present.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt AppImage from the project's official GitHub releases, which is a common but unverifiable practice; however, it is not inherently malicious as it comes from the maintainer's own repository and no remote code execution or obfuscation is present.

PKGBUILD

1# Maintainer: ibrahemid <ibrahemid@gmail.com>
2pkgname=writ-bin
3_pkgname=writ
4pkgver=0.2.0
5pkgrel=1
6pkgdesc="Lightweight, always-ready text editor for developers"
7arch=('x86_64')
8url="https://github.com/ibrahemid/writ"
9license=('MIT')
10depends=('glibc' 'fuse2' 'gtk3' 'webkit2gtk-4.1')
11optdepends=('appimagelauncher: desktop integration for AppImages')
12provides=("${_pkgname}")
13conflicts=("${_pkgname}")
14options=('!strip')
15source=("${_pkgname}-${pkgver}.AppImage::${url}/releases/download/v${pkgver}/Writ_${pkgver}_amd64.AppImage"
16 "LICENSE-${pkgver}::${url}/raw/v${pkgver}/LICENSE")
17noextract=("${_pkgname}-${pkgver}.AppImage")
18sha256sums=('cbc02a0929aa5bb2c934b82b1aa633b3b7c2ae83968453d46772605155608911'
19 'SKIP')
20
21prepare() {
22 chmod +x "${srcdir}/${_pkgname}-${pkgver}.AppImage"
23 "${srcdir}/${_pkgname}-${pkgver}.AppImage" --appimage-extract >/dev/null
24}
25
26package() {
27 local root="${srcdir}/squashfs-root"
28
29 install -dm755 "${pkgdir}/opt/${_pkgname}/"
30 cp -r "${root}/"* "${pkgdir}/opt/${_pkgname}/"
31 chmod -R u+rwX,go+rX,go-w "${pkgdir}/opt/${_pkgname}"
32
33 install -dm755 "${pkgdir}/usr/bin"
34 ln -s "/opt/${_pkgname}/AppRun" "${pkgdir}/usr/bin/${_pkgname}"
35
36 # Tauri names the bundled entry and icons after the product and the main
37 # binary: Writ.desktop and writ-tauri.png. Both are renamed to writ here so
38 # the desktop entry, the icon it points at, and /usr/bin/writ agree.
39 install -Dm644 "${root}/usr/share/applications/Writ.desktop" \
40 "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
41 sed -i -e "s|^Exec=.*|Exec=/opt/${_pkgname}/AppRun %U|" \
42 -e "s|^Icon=.*|Icon=${_pkgname}|" \
43 -e "s|^StartupWMClass=.*|StartupWMClass=writ-tauri|" \
44 "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
45
46 local icon rel
47 while IFS= read -r -d '' icon; do
48 rel="${icon#${root}/usr/share/icons/}"
49 install -Dm644 "${icon}" \
50 "${pkgdir}/usr/share/icons/${rel%/*}/${_pkgname}.png"
51 done < <(find "${root}/usr/share/icons" -name 'writ-tauri.png' -print0)
52
53 install -Dm644 "${srcdir}/LICENSE-${pkgver}" \
54 "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
55}
56

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 19:28:12 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion