aider-desk-appimage

maintainer Cleboost · 0 votes · scanned 2026-08-18 00:03:42.021799

MEDIUM

Why flagged The package installs a prebuilt AppImage from GitHub releases, which is an unverifiable executable binary; if the source were compromised, it could execute arbitrary code, constituting a supply-chain risk.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

MEDIUM AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 95%): The package installs a prebuilt AppImage from GitHub releases, which is an unverifiable executable binary; if the source were compromised, it could execute arbitrary code, constituting a supply-chain risk.

PKGBUILD

      1# Maintainer: Cleboost <clement.balarot@gmail.com>
    
      2# Contributor: missing-aur project <https://github.com/Cleboost/missing-aur>
    
      3
    
      4pkgname=aider-desk-appimage
    
      5pkgver=0.78.0
    
      6pkgrel=1
    
      7pkgdesc="Transparent, steerable AI orchestration platform for software engineers (AppImage)"
    
      8url="https://github.com/hotovo/aider-desk"
    
      9arch=("x86_64" "aarch64")
    
      10depends=("fuse2")
    
      11options=("!strip")
    
      12license=("Apache-2.0")
    
      13
    
      14source_x86_64=("aider-desk-appimage-${pkgver}-x86_64.AppImage::${url}/releases/download/v${pkgver}/aider-desk-${pkgver}-x86_64.AppImage" "aider-desk.png::https://raw.githubusercontent.com/hotovo/aider-desk/main/build/icon.png" "aider-desk.desktop::https://raw.githubusercontent.com/Cleboost/missing-aur/main/packages/aider-desk/aider-desk.desktop")
    
      15source_aarch64=("aider-desk-appimage-${pkgver}-aarch64.AppImage::${url}/releases/download/v${pkgver}/aider-desk-${pkgver}-arm64.AppImage" "aider-desk.png::https://raw.githubusercontent.com/hotovo/aider-desk/main/build/icon.png" "aider-desk.desktop::https://raw.githubusercontent.com/Cleboost/missing-aur/main/packages/aider-desk/aider-desk.desktop")
    
      16sha256sums_x86_64=('197c44cd3ffa136d9c4cbe2332434d56d7d510dd0006ac558d1d4c42ffce2783'
    
      17                   '5154bb7bfefbe1b93fe94fbc44de529ee59b5b7ceb07dc60b9d748c7857efbc1'
    
      18                   '2bf07bf24eaaf3710a63ed5ab1208eb6143b27b9ed3f73de9c865fb3bf59204b')
    
      19sha256sums_aarch64=('88e08c2d9cab8c38d33f79aee10a0f9dd0c0ef520868d3b989969f88dfdaa3da'
    
      20                    '5154bb7bfefbe1b93fe94fbc44de529ee59b5b7ceb07dc60b9d748c7857efbc1'
    
      21                    '2bf07bf24eaaf3710a63ed5ab1208eb6143b27b9ed3f73de9c865fb3bf59204b')
    
      22
    
      23prepare() {
    
      24  if [ "${CARCH}" = "x86_64" ]; then
    
      25    chmod +x "${srcdir}/aider-desk-appimage-${pkgver}-x86_64.AppImage"
    
      26  elif [ "${CARCH}" = "aarch64" ]; then
    
      27    chmod +x "${srcdir}/aider-desk-appimage-${pkgver}-aarch64.AppImage"
    
      28  fi
    
      29}
    
      30
    
      31package() {
    
      32  if [ "${CARCH}" = "x86_64" ]; then
    
      33    install -Dm755 "${srcdir}/aider-desk-appimage-${pkgver}-x86_64.AppImage" "${pkgdir}/opt/aider-desk-appimage/aider-desk.AppImage"
    
      34  elif [ "${CARCH}" = "aarch64" ]; then
    
      35    install -Dm755 "${srcdir}/aider-desk-appimage-${pkgver}-aarch64.AppImage" "${pkgdir}/opt/aider-desk-appimage/aider-desk.AppImage"
    
      36  fi
    
      37  install -dm755 "${pkgdir}/usr/bin"
    
      38  ln -sf "/opt/aider-desk-appimage/aider-desk.AppImage" "${pkgdir}/usr/bin/aider-desk"
    
      39  install -Dm644 "${srcdir}/aider-desk.png" "${pkgdir}/usr/share/icons/hicolor/512x512/apps/aider-desk.png"
    
      40  install -Dm644 "${srcdir}/aider-desk.desktop" "${pkgdir}/usr/share/applications/aider-desk.desktop"
    
      41}
    
      42
    
      43

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	MEDIUM	2
2026-08-17 13:36:23	MEDIUM	2
2026-08-17 01:34:23	MEDIUM	2