android-studio-beta

LOW

maintainer yurikoles 21 votes scanned 2026-11-02 00:26:00.633185

View on AUR

Why flagged

The source is a legitimate Android Studio beta release from Google's official redirector domain (gvt1.com), which hosts official Google downloads;虽非标准域名但属官方发布渠道，且下载内容为可验证的开源IDE，最坏情况为中间人篡改，但SHA256已校验，风险可控。

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a legitimate Android Studio beta release from Google's official redirector domain (gvt1.com), which hosts official Google downloads;虽非标准域名但属官方发布渠道，且下载内容为可验证的开源IDE，最坏情况为中间人篡改，但SHA256已校验，风险可控。

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:50 "https://redirector.gvt1.com/edgedl/android/studio/ide-zips/${pkgver}/${_pkgname}-${_subver}-linux.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Yurii Kolesnykov <root@yurikoles.com>
    
      2#
    
      3# Based on aur/android-studio by Kordian Bruck <k@bruck.me>
    
      4# Based on aur/android-studio-canary by tilal6991 <lalitmaganti@gmail.com>, vanpra <pranavmaganti@gmail.com>
    
      5# Contributor: Tad Fisher <tadfisher at gmail dot com>
    
      6#
    
      7# Pull requests are welcome here: https://github.com/yurikoles-aur/android-studio-beta
    
      8# SHA-256 Checksums and binary links can be found here: https://developer.android.com/studio/archive
    
      9
    
      10#PKGEXT='.pkg.tar'
    
      11_pkgname=android-studio
    
      12pkgname="${_pkgname}-beta"
    
      13pkgver=2026.2.2.8
    
      14_subver='rabbit2'
    
      15pkgrel=1
    
      16pkgdesc='The Official Android IDE (Beta branch)'
    
      17arch=('i686' 'x86_64')
    
      18url='https://developer.android.com/studio/preview'
    
      19license=('Apache-2.0')
    
      20makedepends=('zip')
    
      21optdepends=(
    
      22  'android-emulator'
    
      23  'android-ndk: to implement parts of your android app in native code'
    
      24  'android-platform'
    
      25  'android-sdk'
    
      26  'android-sdk-build-tools: aapt, aapt2, aidl, apksigner, bcc_compat, d8, dexdump, dx, lld, llvm-rs-cc, mainDexClases, split-select, zipalign'
    
      27  'android-sdk-cmdline-tools-latest: apkanalyzer, avdmanager, lint, retrace, screenshot2, sdkmanager'
    
      28  'android-sdk-platform-tools: adb, dmtracedump, e2fsdroid, etc1tool, fastboot, hprof-conv, make_f2fs, make_f2fs_casefold, mke2fs, sload_f2fs, sqlite3, systrace'
    
      29  'android-support-repository'
    
      30  'android-tools: adb, fastboot, e2fsdroid,mke2fs.android, mkbootimg, ext2simg.'
    
      31  'e2fsprogs'
    
      32  'git: for flutter'
    
      33  'glib2: GTK+ look and feel'
    
      34  'gtk2: GTK+ look and feel'
    
      35  'gvfs: GTK+ look and feel'
    
      36  'lib32-gcc-libs: for aapt and mksdcard'
    
      37  'lib32-zlib: for aapt'
    
      38  'ncurses5-compat-libs: native gdb support'
    
      39  'usbutils'
    
      40  'libgomp: gemini plugin'
    
      41# you only need one of the followings:
    
      42  'zenity: GTK-based GUI dialogs'
    
      43  'kdialog: KDE/Qt-based GUI dialogs'
    
      44  'libnotify: desktop notifications via notify-send'
    
      45  'xorg-xmessage: lightweight fallback X11 dialogs'
    
      46)
    
      47provides=("android-studio=${pkgver}")
    
      48options=('!strip')
    
      49source=(
    
      50  "https://redirector.gvt1.com/edgedl/android/studio/ide-zips/${pkgver}/${_pkgname}-${_subver}-linux.tar.gz"
    
      51  "${pkgname}.desktop"
    
      52)
    
      53sha256sums=('b47fdcc0703019618a7afd5ad1822cafc5de66bed984640be2977a0fdb538304'
    
      54            'c4a15624eb258acbe119567b044f4a54be4ebb41f05e6f6cb4d941d130dc714f')
    
      55
    
      56if [ "${CARCH}" = "i686" ]; then
    
      57  depends+=('java-environment')
    
      58fi
    
      59
    
      60build() {
    
      61  cd "${_pkgname}"
    
      62
    
      63  # Change the product name to produce a unique WM_CLASS attribute
    
      64  mkdir -p idea
    
      65  bsdtar -Oxf lib/resources.jar idea/AndroidStudioApplicationInfo.xml \
    
      66    | sed "s/\"Studio\"/\"Studio Beta\"/" > idea/AndroidStudioApplicationInfo.xml
    
      67  zip -r lib/resources.jar idea
    
      68  rm -r idea
    
      69}
    
      70
    
      71package() {
    
      72  depends=(
    
      73    alsa-lib
    
      74    fontconfig
    
      75    libgl
    
      76    libxkbcommon
    
      77    libxcrypt-compat
    
      78    libxrender
    
      79  )
    
      80
    
      81  cd "${_pkgname}"
    
      82
    
      83  # Install the application
    
      84  install -d "${pkgdir}"/{opt/"${pkgname}",usr/bin}
    
      85  cp -r . "${pkgdir}/opt/${pkgname}/"
    
      86  ln -s "/opt/${pkgname}/bin/studio.sh" "${pkgdir}/usr/bin/${pkgname}"
    
      87
    
      88  # Copy licenses
    
      89  install -Dm644 LICENSE.txt "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.txt"
    
      90
    
      91  # Add the icon and desktop file.
    
      92  install -Dm644 bin/studio.png "${pkgdir}/usr/share/pixmaps/${pkgname}.png"
    
      93  install -Dm644 "${srcdir}/${pkgname}.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"
    
      94
    
      95  chmod -R ugo+rX "${pkgdir}/opt"
    
      96}
    
      97

Changes since previous scan

--- PKGBUILD @ 2026-10-31 00:07
+++ PKGBUILD @ 2026-11-02 00:26
@@ -7,30 +7,16 @@
 # Pull requests are welcome here: https://github.com/yurikoles-aur/android-studio-beta
 # SHA-256 Checksums and binary links can be found here: https://developer.android.com/studio/archive
 
-PKGEXT='.pkg.tar'
+#PKGEXT='.pkg.tar'
 _pkgname=android-studio
 pkgname="${_pkgname}-beta"
-pkgver=2026.1.2.8
-_subver='quail2-rc1'
+pkgver=2026.2.2.8
+_subver='rabbit2'
 pkgrel=1
 pkgdesc='The Official Android IDE (Beta branch)'
 arch=('i686' 'x86_64')
 url='https://developer.android.com/studio/preview'
 license=('Apache-2.0')
-depends=(
-  'alsa-lib'
-  'fontconfig'
-  'freetype2'
-  'gcc-libs'
-  'bzip2'
-  'libedit'
-  'libxcrypt-compat'
-  'libxml2'
-  'libxrender'
-  'libxtst'
-  'python'
-  'which'
-)
 makedepends=('zip')
 optdepends=(
   'android-emulator'
@@ -51,6 +37,12 @@
   'lib32-zlib: for aapt'
   'ncurses5-compat-libs: native gdb support'
   'usbutils'
+  'libgomp: gemini plugin'
+# you only need one of the followings:
+  'zenity: GTK-based GUI dialogs'
+  'kdialog: KDE/Qt-based GUI dialogs'
+  'libnotify: desktop notifications via notify-send'
+  'xorg-xmessage: lightweight fallback X11 dialogs'
 )
 provides=("android-studio=${pkgver}")
 options=('!strip')
@@ -58,7 +50,7 @@
   "https://redirector.gvt1.com/edgedl/android/studio/ide-zips/${pkgver}/${_pkgname}-${_subver}-linux.tar.gz"
   "${pkgname}.desktop"
 )
-sha256sums=('b53303df08048345bb5ac25bfe159731dcea3430f4e2e27b8a60338161bd2667'
+sha256sums=('b47fdcc0703019618a7afd5ad1822cafc5de66bed984640be2977a0fdb538304'
             'c4a15624eb258acbe119567b044f4a54be4ebb41f05e6f6cb4d941d130dc714f')
 
 if [ "${CARCH}" = "i686" ]; then
@@ -77,6 +69,15 @@
 }
 
 package() {
+  depends=(
+    alsa-lib
+    fontconfig
+    libgl
+    libxkbcommon
+    libxcrypt-compat
+    libxrender
+  )
+
   cd "${_pkgname}"
 
   # Install the application

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-02 00:26:00	Low	2
2026-11-01 00:21:48	Low	2
2026-10-31 23:59:16	Medium	1
2026-10-31 00:07:41	Low	2
2026-10-30 00:29:30	Low	2
2026-10-29 00:13:55	Low	2
2026-10-28 00:06:54	Low	2
2026-10-27 00:23:28	Low	2
2026-10-26 00:12:40	Low	2
2026-10-25 00:20:48	Low	2
2026-10-24 00:14:55	Low	2
2026-10-23 00:02:19	Low	2
2026-10-22 00:13:10	Low	2
2026-10-21 00:12:50	Low	2
2026-10-20 00:10:31	Low	2
2026-10-19 00:03:55	Low	2
2026-10-18 00:06:55	Low	2
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2