zerus-git

LOW

maintainer ufna 0 votes scanned 2026-10-08 20:09:40.002650

View on AUR

Why flagged

The package builds from a public Git repository with a SKIP'd checksum, but sources are from the maintainer's own project on GitHub; no untrusted prebuilt binaries or remote code execution.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but sources are from the maintainer's own project on GitHub; no untrusted prebuilt binaries or remote code execution.

PKGBUILD

      1# Maintainer: Vladimir Alyamkin <ufna@ufna.dev>
    
      2pkgname=zerus-git
    
      3pkgver=0.37.0.r58.g998bc4e
    
      4pkgrel=1
    
      5pkgdesc='An agent development environment for persistent local and remote tmux sessions'
    
      6arch=('x86_64')
    
      7url='https://github.com/ufna/zerus'
    
      8license=('MIT')
    
      9depends=('qt6-base' 'qt6-webengine' 'qt6-svg' 'kstatusnotifieritem' 'kwindowsystem'
    
      10         'tmux>=3.7' 'openssh' 'python' 'curl' 'procps-ng' 'libgcc' 'libstdc++' 'glibc' 'hicolor-icon-theme' 'bash' 'tar')
    
      11makedepends=('git' 'rust' 'cmake' 'ninja')
    
      12optdepends=('konsole: external KDE terminal integration'
    
      13            'wl-clipboard: clipboard transfers on Wayland'
    
      14            'xclip: clipboard transfers on X11'
    
      15            'nodejs: separately installed native agents and DeepSeek Harness'
    
      16            'npm: install Codex and DeepSeek Harness from Accounts'
    
      17            'git: Git repository and worktree features'
    
      18            'systemd: user service autostart and isolated DeepSeek scopes')
    
      19provides=("zerus=$pkgver" 'hgs' 'hgs-tray')
    
      20conflicts=('zerus' 'zerus-ade-bin')
    
      21options=('!lto' '!debug')
    
      22source=('zerus::git+https://github.com/ufna/zerus.git#branch=main')
    
      23sha256sums=('SKIP')
    
      24
    
      25pkgver() {
    
      26    cd "$srcdir/zerus"
    
      27    printf '%s.r%s.g%s' "$(cat VERSION)" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      28}
    
      29
    
      30prepare() {
    
      31    cd "$srcdir/zerus"
    
      32    export RUSTUP_TOOLCHAIN=stable
    
      33    cargo fetch --locked --target "$(rustc -vV | sed -n 's/^host: //p')"
    
      34}
    
      35
    
      36build() {
    
      37    cd "$srcdir/zerus"
    
      38    export RUSTUP_TOOLCHAIN=stable CARGO_TARGET_DIR=target
    
      39    cargo build --frozen --release
    
      40    cmake -S tray -B build -G Ninja -DCMAKE_BUILD_TYPE=Release \
    
      41        -DBUILD_TESTING=OFF -DCMAKE_INSTALL_PREFIX=/usr
    
      42    cmake --build build --parallel 2
    
      43    python scripts/collect-licenses.py "$srcdir/licenses"
    
      44}
    
      45
    
      46check() {
    
      47    cd "$srcdir/zerus"
    
      48    export RUSTUP_TOOLCHAIN=stable CARGO_TARGET_DIR=target
    
      49    cargo test --frozen --release
    
      50}
    
      51
    
      52package() {
    
      53    cd "$srcdir/zerus"
    
      54    python scripts/package-linux.py --destdir "$pkgdir" \
    
      55        --cli target/release/hgs --gui build/hgs-tray --licenses "$srcdir/licenses" --package-name "$pkgname"
    
      56}
    
      57

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-08 20:09:40	Low	2