antigravity

maintainer AlphaLynx · 14 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads prebuilt binaries from Google's official storage domain (storage.googleapis.com) under a project-owned path, which is a legitimate distribution method for official releases; the non-whitelisted host is a false positive as this is a standard, trusted source for Google projects, and the binaries are verified via b2sums.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt binaries from Google's official storage domain (storage.googleapis.com) under a project-owned path, which is a legitimate distribution method for official releases; the non-whitelisted host is a false positive as this is a standard, trusted source for Google projects, and the binaries are verified via b2sums.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:37 source_x86_64=(Antigravity-$pkgver-x86_64.tar.gz::https://storage.googleapis.com/antigravity-public/antigravity-hub/$pkgver-$_build/linux-x64/Antigravity.tar.gz)

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: AlphaLynx <alphalynx at alphalynx dot dev>
    
      2
    
      3pkgname=antigravity
    
      4pkgver=2.4.3
    
      5pkgrel=1
    
      6pkgdesc='Google Antigravity 2.0 multi-agent orchestration platform'
    
      7arch=(aarch64 x86_64)
    
      8url=https://antigravity.google/product/antigravity-2
    
      9license=(LicenseRef-Google-Antigravity)
    
      10depends=(alsa-lib
    
      11         at-spi2-core
    
      12         cairo
    
      13         dbus
    
      14         expat
    
      15         glib2
    
      16         glibc
    
      17         gtk3
    
      18         libcups
    
      19         libgcc
    
      20         libx11
    
      21         libxcb
    
      22         libxcomposite
    
      23         libxdamage
    
      24         libxext
    
      25         libxfixes
    
      26         libxkbcommon
    
      27         libxrandr
    
      28         mesa
    
      29         nspr
    
      30         nss
    
      31         pango
    
      32         systemd-libs)
    
      33options=(!strip !debug)
    
      34source=(antigravity.desktop
    
      35        antigravity.png)
    
      36_build=4510119262814208
    
      37source_x86_64=(Antigravity-$pkgver-x86_64.tar.gz::https://storage.googleapis.com/antigravity-public/antigravity-hub/$pkgver-$_build/linux-x64/Antigravity.tar.gz)
    
      38source_aarch64=(Antigravity-$pkgver-aarch64.tar.gz::https://storage.googleapis.com/antigravity-public/antigravity-hub/$pkgver-$_build/linux-arm/Antigravity.tar.gz)
    
      39b2sums=('ec2c74f0e6f2458f2ef1c67b1321c058a3f7c422e364d8871a0a933220ec52ee5736e449cb797b6f135cff1f4adfe6f81e0fdbc76d3ec67c245aea002b8577d8'
    
      40        '772849ebf4574dccc7d2fc30751baed10b4a5d4091c524f3d69938192387693501c0c54ea5b43fa2ed382f70ecdff369a4c65ce3d0f778c68712fa0c2b5e84b8')
    
      41b2sums_aarch64=('6bdb04b728ff05cdbb8bec7d292ba289c829fce9d4de08a75059b1dd81d5b5d9cb8bf3a21a4033fb06c590addf1dad7dbfa3e13ba4c50d99078184d9bbf915a2')
    
      42b2sums_x86_64=('0de5a71b464c1f1933fe39f2b9beffa13d9464079355c10c93d9870a5f6047897e5497e6896a8fce335302aa26ed177f210d2b9df1a1d6cf0349a7c16799ffee')
    
      43
    
      44package() {
    
      45    install -d "$pkgdir/opt"
    
      46    cp -a Antigravity-*/ "$pkgdir/opt/Antigravity"
    
      47
    
      48    install -d "$pkgdir/usr/bin"
    
      49    ln -s /opt/Antigravity/antigravity "$pkgdir/usr/bin/$pkgname"
    
      50
    
      51    install -d "$pkgdir/usr/share/licenses/$pkgname"
    
      52    ln -s /opt/Antigravity/LICENSE.electron.txt -t "$pkgdir/usr/share/licenses/$pkgname"
    
      53    ln -s /opt/Antigravity/LICENSES.chromium.html -t "$pkgdir/usr/share/licenses/$pkgname"
    
      54
    
      55    install -Dm644 $pkgname.desktop -t "$pkgdir/usr/share/applications"
    
      56    install -Dm644 $pkgname.png -t "$pkgdir/usr/share/pixmaps"
    
      57}
    
      58

Changes since previous scan

--- PKGBUILD @ 2026-07-29 00:25
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,11 +1,11 @@
 # Maintainer: AlphaLynx <alphalynx at alphalynx dot dev>
 
 pkgname=antigravity
-pkgver=2.2.1
+pkgver=2.4.3
 pkgrel=1
 pkgdesc='Google Antigravity 2.0 multi-agent orchestration platform'
 arch=(aarch64 x86_64)
-url='https://antigravity.google/product/antigravity-2'
+url=https://antigravity.google/product/antigravity-2
 license=(LicenseRef-Google-Antigravity)
 depends=(alsa-lib
          at-spi2-core
@@ -33,13 +33,13 @@
 options=(!strip !debug)
 source=(antigravity.desktop
         antigravity.png)
-_build=5287492581195776
+_build=4510119262814208
 source_x86_64=(Antigravity-$pkgver-x86_64.tar.gz::https://storage.googleapis.com/antigravity-public/antigravity-hub/$pkgver-$_build/linux-x64/Antigravity.tar.gz)
 source_aarch64=(Antigravity-$pkgver-aarch64.tar.gz::https://storage.googleapis.com/antigravity-public/antigravity-hub/$pkgver-$_build/linux-arm/Antigravity.tar.gz)
 b2sums=('ec2c74f0e6f2458f2ef1c67b1321c058a3f7c422e364d8871a0a933220ec52ee5736e449cb797b6f135cff1f4adfe6f81e0fdbc76d3ec67c245aea002b8577d8'
         '772849ebf4574dccc7d2fc30751baed10b4a5d4091c524f3d69938192387693501c0c54ea5b43fa2ed382f70ecdff369a4c65ce3d0f778c68712fa0c2b5e84b8')
-b2sums_aarch64=('9d41d62ceec3b7cf60166208c7c389bbd00bcbf88b8dac7e21d15253e7475f1e5378ddf7179fc78e59fe96587226c25a82308e6f3cfbc0cf0c1e046e72fb271c')
-b2sums_x86_64=('84ba2d187a81dbab38be8220e7af5be00def23eff81b3865bce4920ea6b6be00eb7e835251de61e286125c31c870ab0acd2fa59dae32f1971f4c5afda53a5e1c')
+b2sums_aarch64=('6bdb04b728ff05cdbb8bec7d292ba289c829fce9d4de08a75059b1dd81d5b5d9cb8bf3a21a4033fb06c590addf1dad7dbfa3e13ba4c50d99078184d9bbf915a2')
+b2sums_x86_64=('0de5a71b464c1f1933fe39f2b9beffa13d9464079355c10c93d9870a5f6047897e5497e6896a8fce335302aa26ed177f210d2b9df1a1d6cf0349a7c16799ffee')
 
 package() {
     install -d "$pkgdir/opt"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 05:10:22	MEDIUM	1
2026-07-29 00:25:53	MEDIUM	2
2026-07-28 00:07:28	MEDIUM	2
2026-07-27 00:24:32	MEDIUM	2
2026-07-26 00:07:32	MEDIUM	2
2026-07-25 00:13:44	MEDIUM	2
2026-07-24 00:02:28	MEDIUM	2
2026-07-23 00:14:47	MEDIUM	2
2026-07-22 00:29:32	MEDIUM	2
2026-07-21 00:24:15	MEDIUM	2
2026-07-20 00:19:49	MEDIUM	2
2026-07-19 00:17:08	MEDIUM	2
2026-07-18 00:14:48	MEDIUM	2
2026-07-17 21:55:56	MEDIUM	2
2026-07-17 00:06:16	MEDIUM	2