xodus-nexus-bin

LOW

maintainer Edu4rdSHL 0 votes scanned 2026-10-19 21:26:37.112660

View on AUR

Why flagged

The package downloads a prebuilt AppImage from the project's official GitHub releases, which is then extracted and installed; while the AppImage is from a trusted project host, the use of a binary release with a fixed checksum is a normal but less transparent packaging practice, typical for AppImage-based AUR packages.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt AppImage from the project's official GitHub releases, which is then extracted and installed; while the AppImage is from a trusted project host, the use of a binary release with a fixed checksum is a normal but less transparent packaging practice, typical for AppImage-based AUR packages.

PKGBUILD

      1# Maintainer: Eduard Tolosa <edu4rdshl@pm.me>
    
      2
    
      3pkgname=xodus-nexus-bin
    
      4_pkgname=xodus-nexus
    
      5pkgver=0.3.8
    
      6pkgrel=2
    
      7_appimage="Xodus-Nexus-${pkgver}-x86_64.AppImage"
    
      8pkgdesc='Xbox-inspired launcher for Microsoft Store PC games on Linux, built on Xodus'
    
      9arch=(x86_64)
    
      10url='https://github.com/domsvoboda/xodus-nexus'
    
      11license=(MIT)
    
      12depends=(alsa-lib gtk3 nss xdg-utils)
    
      13optdepends=(
    
      14  'org.freedesktop.secrets: keep the Xbox account signed in'
    
      15  'steam: Add to Steam integration'
    
      16)
    
      17provides=("$_pkgname")
    
      18conflicts=("$_pkgname")
    
      19options=(!strip !debug)
    
      20install=$pkgname.install
    
      21source=(
    
      22  "${_appimage}::${url}/releases/download/v${pkgver}/${_appimage}"
    
      23  "LICENSE-${pkgver}::https://raw.githubusercontent.com/domsvoboda/xodus-nexus/v${pkgver}/LICENSE"
    
      24  "${_pkgname}.desktop"
    
      25  "${_pkgname}"
    
      26)
    
      27noextract=("${_appimage}")
    
      28sha256sums=('d33a3a36b1aff00d872f68ce3c8456347b272cb94f20c44faf848c5725a7c3a3'
    
      29            '639b735fd2f65779b82c4aab471f1fcdf927e10e1c21250911f75d44d136ff11'
    
      30            '686f0162e483642dd660f24202fb45d64af109a8b2050e055a5313cba79bd9d7'
    
      31            '2f73a67081c31c8e5190776d0c1dc989bfa7fbdb1f22f03732c71b7c25a1cc5b')
    
      32
    
      33prepare() {
    
      34  cd "$srcdir"
    
      35
    
      36  chmod +x "${_appimage}"
    
      37  "./${_appimage}" --appimage-extract > /dev/null
    
      38}
    
      39
    
      40package() {
    
      41  cd "${srcdir}"
    
      42
    
      43  # The upstream wrapper (opt/xodus-nexus/xodus-nexus) resolves its own directory
    
      44  # from $0, so it must be exec'd from /usr/bin instead of symlinked.
    
      45  install -dm755 "$pkgdir/opt/$_pkgname"
    
      46  cp -a squashfs-root/. "$pkgdir/opt/$_pkgname/"
    
      47  rm -rf "$pkgdir/opt/$_pkgname"/{AppRun,.DirIcon,usr,$_pkgname.desktop,$_pkgname.png}
    
      48  chmod -R u+rwX,go+rX,go-w "$pkgdir/opt/$_pkgname"
    
      49
    
      50  install -Dm755 -t "$pkgdir/usr/bin" $_pkgname
    
      51
    
      52  # upstream may change the shipped icon sizes, so install whatever is there
    
      53  for _icon in squashfs-root/usr/share/icons/hicolor/*/apps/$_pkgname.png; do
    
      54    install -Dm644 "$_icon" "$pkgdir/${_icon#squashfs-root/}"
    
      55  done
    
      56
    
      57  install -Dm644 -t "$pkgdir/usr/share/applications" $_pkgname.desktop
    
      58  install -Dm644 "LICENSE-${pkgver}" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      59}
    
      60
    
      61

Changes since previous scan

--- PKGBUILD @ 2026-10-19 19:26
+++ PKGBUILD @ 2026-10-19 21:26
@@ -3,7 +3,7 @@
 pkgname=xodus-nexus-bin
 _pkgname=xodus-nexus
 pkgver=0.3.8
-pkgrel=1
+pkgrel=2
 _appimage="Xodus-Nexus-${pkgver}-x86_64.AppImage"
 pkgdesc='Xbox-inspired launcher for Microsoft Store PC games on Linux, built on Xodus'
 arch=(x86_64)
@@ -17,6 +17,7 @@
 provides=("$_pkgname")
 conflicts=("$_pkgname")
 options=(!strip !debug)
+install=$pkgname.install
 source=(
   "${_appimage}::${url}/releases/download/v${pkgver}/${_appimage}"
   "LICENSE-${pkgver}::https://raw.githubusercontent.com/domsvoboda/xodus-nexus/v${pkgver}/LICENSE"

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-19 21:26:37	Low	2
2026-10-19 19:26:12	Low	2