xrwm-bin

LOW

maintainer xifan 0 votes scanned 2026-09-13 15:14:52.955091

View on AUR

Why flagged

The package installs a prebuilt binary from the author's GitHub releases, which is a common and acceptable practice for Rust-based projects; the source is verifiable and the checksum is provided, reducing supply-chain risk despite low votes and recent upload.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the author's GitHub releases, which is a common and acceptable practice for Rust-based projects; the source is verifiable and the checksum is provided, reducing supply-chain risk despite low votes and recent upload.

PKGBUILD

      1# Maintainer: xifan <xifan2333@gmail.com>
    
      2pkgname=xrwm-bin
    
      3_pkgname=xrwm
    
      4pkgver=0.1.0
    
      5pkgrel=1
    
      6pkgdesc="A River 0.4 Wayland window manager inspired by river-classic with composable shell CLI configuration"
    
      7arch=('x86_64')
    
      8url="https://github.com/xifan2333/xrwm"
    
      9license=('GPL-3.0-only')
    
      10depends=('river' 'wayland' 'libxkbcommon')
    
      11provides=("${_pkgname}")
    
      12conflicts=("${_pkgname}")
    
      13options=(!strip)
    
      14source_x86_64=("${_pkgname}-${pkgver}-x86_64.tar.gz::https://github.com/xifan2333/xrwm/releases/download/v0.1.0/xrwm-0.1.0-x86_64-unknown-linux-gnu.tar.gz")
    
      15sha256sums_x86_64=('b4fe44c32d689cd2ac5b07dfbc8314c3f543e75ed9890614a2f019153962d8d3')
    
      16
    
      17package() {
    
      18	cd "${srcdir}/xrwm-${pkgver}-x86_64-unknown-linux-gnu"
    
      19
    
      20	install -Dm755 "${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
    
      21	install -Dm644 README.md "${pkgdir}/usr/share/doc/${_pkgname}/README.md"
    
      22	install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${_pkgname}/LICENSE"
    
      23}
    
      24

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-13 15:14:52	Low	2