zen-browser-tst-bin

maintainer joegoldin · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from a prebuilt binary released by the maintainer on GitHub, which is a common AUR practice; the source is verifiable and the binary is from a plausible project-owned release, but the low vote count and recent upload introduce minor trust concerns.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a prebuilt binary released by the maintainer on GitHub, which is a common AUR practice; the source is verifiable and the binary is from a plausible project-owned release, but the low vote count and recent upload introduce minor trust concerns.

PKGBUILD

      1# Maintainer: joegoldin <joe@joegold.in>
    
      2pkgname=zen-browser-tst-bin
    
      3_pkgname=zen-tst
    
      4pkgver=1.21.9b_tst.1
    
      5pkgrel=1
    
      6pkgdesc="Zen Browser with native tree-style tabs (unofficial fork)"
    
      7arch=('x86_64')
    
      8url="https://github.com/joegoldin/zen-browser-desktop"
    
      9license=('MPL-2.0')
    
      10# The fork keeps upstream's binaryName, so it owns the same /usr/bin/zen.
    
      11# Without these, pacman fails the install with a bare file-conflict error.
    
      12conflicts=('zen-browser' 'zen-browser-bin')
    
      13provides=("zen-browser=${pkgver}")
    
      14depends=('gtk3' 'libxt' 'mime-types' 'dbus-glib' 'nss' 'ttf-font' 'libpulse')
    
      15options=('!strip')
    
      16# The release asset is named zen.linux-x86_64.tar.xz for every version, so the
    
      17# download is renamed per version here. Without that, makepkg's source cache
    
      18# keys on the bare filename and silently reuses the previous release's tarball
    
      19# under the new version number.
    
      20source=("$pkgname-$pkgver.tar.xz::https://github.com/joegoldin/zen-browser-desktop/releases/download/${pkgver//_/-}/zen.linux-x86_64.tar.xz"
    
      21        "zen.desktop")
    
      22sha256sums=('bec9fa4053fb672e93fe8dc8de261adbf8ed2d4f91e273ce274dc7b3eb0974ef'
    
      23            '24d5b3c16139ba00e39fb62d6e7a7efddf21a4fecf294f5330e9198388ea0674')
    
      24
    
      25package() {
    
      26  install -d "$pkgdir/opt/$_pkgname"
    
      27  cp -r "$srcdir/zen/." "$pkgdir/opt/$_pkgname"
    
      28  install -d "$pkgdir/usr/bin"
    
      29  ln -s "/opt/$_pkgname/zen" "$pkgdir/usr/bin/zen"
    
      30  install -Dm644 "$srcdir/zen.desktop" "$pkgdir/usr/share/applications/zen.desktop"
    
      31  install -Dm644 "$pkgdir/opt/$_pkgname/browser/chrome/icons/default/default128.png" \
    
      32    "$pkgdir/usr/share/icons/hicolor/128x128/apps/zen.png"
    
      33}
    
      34

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 07:10:52	LOW	2