appimagelauncher-continuous-bin

maintainer ilonachan · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package downloads a prebuilt .deb from the project's official GitHub releases, which is a normal AUR practice for binary packages; the host is trustworthy and the download is for the project's own release, making it low risk despite the SKIP'd checksum.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt .deb from the project's official GitHub releases, which is a normal AUR practice for binary packages; the host is trustworthy and the download is for the project's own release, making it low risk despite the SKIP'd checksum.

PKGBUILD

      1# Maintainer: ilonachan < n a g a t o _ i l o n a at p r o t o n dot m e >
    
      2
    
      3pkgname=appimagelauncher-continuous-bin
    
      4_pkgname=appimagelauncher
    
      5pkgver=3.0.0_beta_2_gha298.4daf93f
    
      6pkgrel=1
    
      7pkgdesc="Helper app that 'makes your Linux desktop AppImage ready™.' - continuous snapshot version"
    
      8arch=('x86_64')
    
      9license=('MIT')
    
      10url="https://github.com/TheAssassin/AppImageLauncher/releases/tag/continuous"
    
      11provides=("${_pkgname%}")
    
      12conflicts=("${_pkgname%}")
    
      13depends=('cairo' 'desktop-file-utils' 'hicolor-icon-theme' 'libappimage' 'libbsd' 'libxpm' 'qt5-base' 'shared-mime-info')
    
      14makedepends=('curl')
    
      15
    
      16# this becomes out-of-date too often to be acceptable as a static value, but works as a fallback if fetching isn't possible
    
      17_download_url="https://github.com/TheAssassin/AppImageLauncher/releases/download/continuous/appimagelauncher_${pkgver//_/-}_amd64.deb"
    
      18
    
      19_get_current_url() {
    
      20  CONTINUOUS_DOWNLOAD_URL=$(curl -sL -H 'Accept: application/vnd.github+json' -H 'X-GitHub-Api-Version: 2026-03-10' https://api.github.com/repos/TheAssassin/AppImageLauncher/releases/tags/continuous | jq -er '.assets[] | select(.name|endswith("_amd64.deb")) | .browser_download_url')
    
      21  API_RETURN=$?
    
      22  case $API_RETURN in
    
      23  0) _download_url=$CONTINUOUS_DOWNLOAD_URL ;;
    
      24  *) return $API_RETURN ;; # we have to ignore it
    
      25  esac
    
      26}
    
      27
    
      28_get_current_url 2>/dev/null
    
      29
    
      30source=("$_download_url")
    
      31sha256sums=('SKIP')
    
      32
    
      33pkgver() {
    
      34  if ! _get_current_url; then
    
      35    echo "Failed to obtain information about the latest file version from GitHub. Using hardcoded version as fallback." >&2
    
      36    echo $pkgver
    
      37    return 0
    
      38  fi
    
      39
    
      40  FILENAME="${_download_url##*/}"
    
      41  FILENAME_="${FILENAME#appimagelauncher_}"
    
      42  FILE_VERSION="${FILENAME_%_amd64.deb}"
    
      43
    
      44  echo "${FILE_VERSION//-/_}"
    
      45}
    
      46
    
      47package() {
    
      48  cd "$srcdir/"
    
      49  tar xaf data.tar.xz -C $pkgdir
    
      50  cd $pkgdir/usr/share/applications
    
      51}
    
      52

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 13:30:33	LOW	2