wubi-dict-editor-bin

LOW
maintainer zxp19821005 0 votes scanned 2026-09-09 11:19:32.361939
View on AUR
Why flagged

The package installs a prebuilt Electron app from the project's official GitHub releases, which is normal for binary packages; the low severity is due to the unverifiable prebuilt .deb file from a non-whitelisted host, but it is not actively malicious or obfuscated.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt Electron app from the project's official GitHub releases, which is normal for binary packages; the low severity is due to the unverifiable prebuilt .deb file from a non-whitelisted host, but it is not actively malicious or obfuscated.

PKGBUILD

1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
2pkgname=wubi-dict-editor-bin
3_zhname='五笔码表助手'
4pkgver=1.3.12
5_electronversion=28
6pkgrel=1
7pkgdesc="Five Pen Watch Assistant for Rime.五笔码表助手 for Rime."
8arch=('x86_64')
9url="https://github.com/KyleBing/wubi-dict-editor"
10license=('GPL-3.0-only')
11conflicts=("${pkgname}")
12depends=(
13 'ibus-rime'
14 "electron${_electronversion}"
15)
16options=(
17 '!emptydirs'
18)
19source=(
20 "${pkgname%-bin}-${pkgver}-x86_64.deb::${url}/releases/download/v${pkgver}/${pkgname%-bin}_${pkgver}_amd64.deb"
21 "${pkgname%-bin}.sh"
22)
23sha256sums=('3f8ac80e7505342fa1134abe46754b8bfed3d349768037cec390e67158104415'
24 'a774c2f54fbbeeaac3cefc0f7250796d30c86d27f0fd40b7eaf9c0fdb021623d')
25_get_app_dir() {
26 find "${srcdir}" -type f -name "resources.pak" -exec dirname {} + | head -n 1
27}
28_check_electron_version() {
29 echo "Verifying Electron version..."
30 local _main_exe=$(find "$(_get_app_dir)" -maxdepth 1 -type f -executable -printf '%s %p\n' | sort -nr | head -1 | cut -d' ' -f2-)
31 [[ -z "${_main_exe}" ]] && echo -e "\033[1;33mNote: Could not find Electron binary.\033[0m" && return
32 local _elec_ver=$(strings "${_main_exe}" | grep -oP 'Electron/\K[0-9]+' | head -1)
33 [[ -z "${_elec_ver}" ]] && echo -e "\033[1;33mNote: Could not determine Electron version.\033[0m" && return
34 [[ "${_elec_ver}" != "${_electronversion}" ]] &&
35 echo -e "\033[1;31mWarning: Electron version mismatch! Detected: ${_elec_ver}, Expected: ${_electronversion}\033[0m" ||
36 echo -e "Electron version verified: \033[1;31m${_elec_ver}\033[0m"
37}
38prepare() {
39 sed -i -e "
40 s/@electronversion@/${_electronversion}/g
41 s/@appname@/${pkgname%-bin}/g
42 s/@runname@/app/g
43 s/@cfgdirname@/${_pkgname}/g
44 " "${srcdir}/${pkgname%-bin}.sh"
45 bsdtar -xf "${srcdir}/data."*
46 _check_electron_version
47}
48package() {
49 install -Dm755 "${srcdir}/${pkgname%-bin}.sh" "${pkgdir}/usr/bin/${pkgname%-bin}"
50 install -Dm755 -d "${pkgdir}/usr/lib/${pkgname%-bin}"
51 local _app_dir=$(_get_app_dir)
52 cp -a "${_app_dir}/resources/"* "${pkgdir}/usr/lib/${pkgname%-bin}/"
53 install -Dm644 "${srcdir}/usr/share/applications/${pkgname%-bin}.desktop" -t "${pkgdir}/usr/share/applications"
54 install -Dm644 "${srcdir}/usr/share/pixmaps/${pkgname%-bin}.png" -t "${pkgdir}/usr/share/pixmaps"
55 install -Dm644 "${srcdir}/usr/share/doc/${pkgname%-bin}/copyright" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
56}

Scan history

Scanned at (UTC)SeverityRules
2026-09-09 11:19:32 Low 2
2026-09-09 05:18:57 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion