yubix

LOW
maintainer codingncaffeine 0 votes scanned 2026-08-25 03:25:42.010142
View on AUR
Why flagged

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

1# Maintainer: codingncaffeine <codingncaffeine@users.noreply.github.com>
2pkgname=yubix
3pkgver=0.0.6
4pkgrel=1
5pkgdesc="Use your YubiKey for login and sudo — safely, with no terminal"
6arch=('x86_64')
7url="https://github.com/codingncaffeine/yubix"
8license=('GPL-3.0-or-later')
9# The X11 libraries are dlopen()ed by Avalonia at runtime, so they carry no
10# ELF dependency for namcap to find — they have to be listed by hand or the
11# app dies on a minimal install. fontconfig/freetype2 are linked by libSkiaSharp.
12depends=('dotnet-runtime' 'pam-u2f' 'libfido2' 'polkit' 'dbus'
13 'fontconfig' 'freetype2' 'hicolor-icon-theme'
14 'libx11' 'libxcursor' 'libxext' 'libxi' 'libxrandr' 'libglvnd')
15makedepends=('dotnet-sdk')
16options=('!strip')
17install=yubix.install
18source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz")
19sha256sums=('bb09388b882e9d92a0a373e089475b6ec21e9311dcaa90a6c3a8b64b6db8b7f5')
20
21build() {
22 cd "$pkgname-$pkgver"
23 export DOTNET_CLI_TELEMETRY_OPTOUT=1
24 export DOTNET_NOLOGO=1
25 # Keep the SDK's scratch state inside the build dir so a clean chroot build
26 # behaves the same as a developer's, and nothing lands in the builder's home.
27 export DOTNET_CLI_HOME="$srcdir"
28 export NUGET_PACKAGES="$srcdir/nuget"
29
30 # Publish for this architecture only. A portable publish pulls in the native
31 # Skia/HarfBuzz builds for every RID .NET knows -- win, osx, musl, arm,
32 # riscv, loongarch -- which is ~128 MB of foreign-architecture binaries in
33 # an x86_64 package (21 MB with this). Framework-dependent either way, so it
34 # still runs against the packaged dotnet-runtime.
35 # DebugType=none: without it the DLLs carry the absolute path of the build
36 # tree (makepkg flags it as a $srcdir reference, and it would ship the
37 # builder's home directory to every user). Nothing in Yubix surfaces a
38 # stack trace -- errors are reported by message -- so no diagnostics are lost.
39 local publish=(-c Release -r linux-x64 --self-contained false --nologo
40 -p:DebugType=none)
41 dotnet publish src/Yubix.App/Yubix.App.csproj "${publish[@]}" -o build/app
42 dotnet publish src/Yubix.Helper/Yubix.Helper.csproj "${publish[@]}" -o build/helper
43}
44
45package() {
46 cd "$pkgname-$pkgver"
47
48 install -dm755 "$pkgdir/usr/lib/yubix"
49 cp -a build/app "$pkgdir/usr/lib/yubix/app"
50 cp -a build/helper "$pkgdir/usr/lib/yubix/helper"
51
52 install -dm755 "$pkgdir/usr/bin"
53 ln -s /usr/lib/yubix/app/yubix "$pkgdir/usr/bin/yubix"
54 install -Dm755 data/yubix-restore "$pkgdir/usr/bin/yubix-restore"
55 install -Dm755 data/yubix-pamcheck "$pkgdir/usr/lib/yubix/yubix-pamcheck"
56 install -Dm644 data/zz-yubix-pam-check.hook \
57 "$pkgdir/usr/share/libalpm/hooks/zz-yubix-pam-check.hook"
58
59 install -Dm644 data/io.github.codingncaffeine.yubix.policy \
60 "$pkgdir/usr/share/polkit-1/actions/io.github.codingncaffeine.yubix.policy"
61 install -Dm644 data/io.github.codingncaffeine.yubix.conf \
62 "$pkgdir/usr/share/dbus-1/system.d/io.github.codingncaffeine.yubix.conf"
63 install -Dm644 data/io.github.codingncaffeine.yubix.service \
64 "$pkgdir/usr/share/dbus-1/system-services/io.github.codingncaffeine.yubix.service"
65 install -Dm644 data/yubix-helper.service \
66 "$pkgdir/usr/lib/systemd/system/yubix-helper.service"
67 install -Dm644 data/yubix-failsafe.service \
68 "$pkgdir/usr/lib/systemd/system/yubix-failsafe.service"
69 install -Dm644 data/yubix.desktop \
70 "$pkgdir/usr/share/applications/yubix.desktop"
71
72 for size in 512 256 128 64 48 32; do
73 install -Dm644 "assets/icons/yubix-${size}.png" \
74 "$pkgdir/usr/share/icons/hicolor/${size}x${size}/apps/yubix.png"
75 done
76}
77

Scan history

Scanned at (UTC)SeverityRules
2026-08-25 03:25:42 Low 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion