xdg-desktop-portal-omarchy-git

LOW

maintainer falser 0 votes scanned 2026-09-02 01:49:31.609352

View on AUR

Why flagged

The package builds from a public Git repository with a SKIP'd checksum, but it is a legitimate build of a Rust project using standard AUR practices; the source is not prebuilt or obfuscated, and no remote code execution or malicious behavior is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but it is a legitimate build of a Rust project using standard AUR practices; the source is not prebuilt or obfuscated, and no remote code execution or malicious behavior is present.

PKGBUILD

      1# Maintainer: falser <zhangjf@tongtech.com>
    
      2pkgname=xdg-desktop-portal-omarchy-git
    
      3_pkgname=xdg-desktop-portal-omarchy
    
      4pkgver=0.1.0.r16.g047a8c4
    
      5pkgrel=1
    
      6pkgdesc="XDG Desktop Portal backend for Omarchy (Hyprland)"
    
      7arch=('x86_64' 'aarch64')
    
      8url="https://github.com/falser101/xdg-desktop-portal-omarchy"
    
      9license=('MIT')
    
      10depends=(
    
      11  'xdg-desktop-portal'
    
      12  'xdg-desktop-portal-hyprland'
    
      13  'grim'
    
      14  'hyprland'
    
      15  'gcc-libs'
    
      16  'glibc'
    
      17)
    
      18makedepends=(
    
      19  'cargo'
    
      20  'git'
    
      21  'pkgconf'
    
      22  'wayland'
    
      23)
    
      24optdepends=(
    
      25  'omarchy: Omarchy shell UI for portal dialogs (recommended)'
    
      26)
    
      27provides=('xdg-desktop-portal-omarchy' 'xdg-desktop-portal-impl')
    
      28conflicts=('xdg-desktop-portal-omarchy')
    
      29source=("git+${url}.git")
    
      30sha256sums=('SKIP')
    
      31install="${pkgname}.install"
    
      32
    
      33pkgver() {
    
      34  cd "${_pkgname}"
    
      35  local desc
    
      36  # git describe prints nothing useful without tags; an empty pipe must not
    
      37  # win over the fallback (sed succeeds on empty stdin).
    
      38  desc=$(git describe --long --tags --abbrev=7 2>/dev/null || true)
    
      39  if [[ -n $desc ]]; then
    
      40    printf '%s\n' "${desc#v}" | sed 's/\([^-]*-g\)/r\1/;s/-/./g'
    
      41  else
    
      42    printf '0.1.0.r%s.g%s\n' "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      43  fi
    
      44}
    
      45
    
      46prepare() {
    
      47  cd "${_pkgname}"
    
      48  export RUSTUP_TOOLCHAIN=stable
    
      49  cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      50}
    
      51
    
      52build() {
    
      53  cd "${_pkgname}"
    
      54  export RUSTUP_TOOLCHAIN=stable
    
      55  export CARGO_TARGET_DIR=target
    
      56  cargo build --frozen --release --bins
    
      57}
    
      58
    
      59package() {
    
      60  cd "${_pkgname}"
    
      61  DESTDIR="${pkgdir}" PREFIX=/usr ./scripts/install-system.sh --skip-build
    
      62}
    
      63

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-02 01:49:31	Low	2