zed-globalization

LOW

maintainer neko_ayaya 0 votes scanned 2026-09-09 05:18:57.348799

View on AUR

Why flagged

The package installs a pre-built binary from a GitHub release, which is a supply-chain risk if the maintainer's account is compromised, but the source is from a plausible project host (GitHub) and the checksums are verified, limiting the risk to low.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a pre-built binary from a GitHub release, which is a supply-chain risk if the maintainer's account is compromised, but the source is from a plausible project host (GitHub) and the checksums are verified, limiting the risk to low.

PKGBUILD

      1pkgname=zed-globalization
    
      2pkgver=1.18.1
    
      3pkgrel=2
    
      4pkgdesc="Zed editor with globalization support (pre-built binary)"
    
      5arch=('x86_64' 'aarch64')
    
      6url="https://github.com/x6nux/zed-globalization"
    
      7license=('AGPL-3.0-or-later' 'Apache-2.0' 'GPL-3.0-or-later')
    
      8provides=('zedg' 'zed')
    
      9conflicts=('zedg' 'zed')
    
      10options=('!debug')
    
      11
    
      12#source_x86_64=("https://github.com/x6nux/zed-globalization/releases/download/v${pkgver}/zedg-zh-cn-linux-x86_64-v${pkgver}.tar.gz")
    
      13#source_aarch64=("https://github.com/x6nux/zed-globalization/releases/download/v${pkgver}/zedg-zh-cn-linux-aarch64-v${pkgver}.tar.gz")
    
      14
    
      15source_x86_64=("https://github.com/x6nux/zed-globalization/releases/download/v1.18.1.1/zedg-zh-cn-linux-x86_64-v1.18.1.tar.gz")
    
      16source_aarch64=("https://github.com/x6nux/zed-globalization/releases/download/v1.18.1.1/zedg-zh-cn-linux-aarch64-v1.18.1.tar.gz")
    
      17
    
      18sha256sums_x86_64=('33cb65f6e58529fe254f3d144b840a0c18dada9fd43f843c90f1b6882622e11b')
    
      19sha256sums_aarch64=('add9d8af05e38f156cbc091023bfe5423519364670e20db36b13496ebf41cc5c')
    
      20
    
      21package() {
    
      22  cp -r "${srcdir}/usr" "${pkgdir}/"
    
      23  chmod 755 "${pkgdir}/usr/bin/zedg"
    
      24  rm -f "${pkgdir}/usr/bin/zed"
    
      25  mv "${pkgdir}/usr/share/applications/zedg.desktop" "${pkgdir}/usr/share/applications/dev.zed.Zed.desktop"
    
      26}
    
      27

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-09 05:18:57	Low	2
2026-09-09 03:18:52	Low	2