ardudeck-appimage

maintainer pieniacy · 2 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package installs a prebuilt AppImage from the project's official GitHub releases, which is a normal distribution method for such applications; the low severity is due to the unverifiable binary nature of the AppImage despite coming from a legitimate project source.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package installs a prebuilt AppImage from the project's official GitHub releases, which is a normal distribution method for such applications; the low severity is due to the unverifiable binary nature of the AppImage despite coming from a legitimate project source.

PKGBUILD

      1# Maintainer: Karol Pieniący <karol.pieniacy@gmail.com>
    
      2_appname=ArduDeck
    
      3pkgname=ardudeck-appimage
    
      4pkgver=0.1.0
    
      5pkgrel=1
    
      6pkgdesc="Modern cross-platform ground control station for ArduPilot, Betaflight, and iNav (AppImage)"
    
      7arch=('x86_64')
    
      8url="https://github.com/rubenCodeforges/ardudeck"
    
      9license=('GPL-3.0-only')
    
      10depends=('fuse2')
    
      11makedepends=('imagemagick')
    
      12provides=('ardudeck')
    
      13conflicts=('ardudeck')
    
      14options=('!strip')
    
      15source=("${pkgname}-${pkgver}.AppImage::${url}/releases/download/v${pkgver}/${_appname}-${pkgver}-linux-x86_64.AppImage"
    
      16        "${pkgname}-${pkgver}.LICENSE::https://raw.githubusercontent.com/rubenCodeforges/ardudeck/v${pkgver}/LICENSE")
    
      17noextract=("${pkgname}-${pkgver}.AppImage")
    
      18sha256sums=('68a44ceaf90f92071de08b2bad4dcfdfad16ae7634a21242f44b0bd7eedb2ede'
    
      19            '86030766b025ce4e69bdc8e3cf33ba9e573b92e32c5392d0b8df0d1dddbc35d1')
    
      20
    
      21build() {
    
      22	# Extract only to lift the bundled icons + .desktop (needs no FUSE).
    
      23	chmod +x "${pkgname}-${pkgver}.AppImage"
    
      24	./"${pkgname}-${pkgver}.AppImage" --appimage-extract >/dev/null
    
      25}
    
      26
    
      27package() {
    
      28	# Install and run the packed AppImage; fuse2 mounts it at runtime.
    
      29	install -Dm755 "${srcdir}/${pkgname}-${pkgver}.AppImage" "${pkgdir}/opt/${pkgname}/${pkgname}.AppImage"
    
      30	install -d "${pkgdir}/usr/bin"
    
      31	ln -s "/opt/${pkgname}/${pkgname}.AppImage" "${pkgdir}/usr/bin/${pkgname}"
    
      32
    
      33	# Upstream ships a single 1024x1024 icon, a size hicolor's index.theme does
    
      34	# not declare, so themed lookups (the app launcher) miss it. Downscale the
    
      35	# AppImage's .DirIcon master into standard hicolor sizes.
    
      36	local size
    
      37	for size in 512 256 128 64 48; do
    
      38		install -d "${pkgdir}/usr/share/icons/hicolor/${size}x${size}/apps"
    
      39		magick "${srcdir}/squashfs-root/.DirIcon" -resize "${size}x${size}" \
    
      40			"${pkgdir}/usr/share/icons/hicolor/${size}x${size}/apps/${pkgname}.png"
    
      41	done
    
      42
    
      43	# .desktop shipped inside the AppImage: repoint the Exec binary and Icon at
    
      44	# our install, preserving upstream's launch args (--no-sandbox %U) and the
    
      45	# StartupWMClass used for window/launcher grouping.
    
      46	install -Dm644 "${srcdir}"/squashfs-root/*.desktop \
    
      47		"${pkgdir}/usr/share/applications/${pkgname}.desktop"
    
      48	sed -i -e "s|^Exec=[^ ]*|Exec=${pkgname}|" \
    
      49	       -e "s|^Icon=.*|Icon=${pkgname}|" \
    
      50	       "${pkgdir}/usr/share/applications/${pkgname}.desktop"
    
      51
    
      52	install -Dm644 "${srcdir}/${pkgname}-${pkgver}.LICENSE" \
    
      53		"${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      54}
    
      55

Changes since previous scan

--- PKGBUILD @ 2026-07-30 00:17
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,8 +1,8 @@
 # Maintainer: Karol Pieniący <karol.pieniacy@gmail.com>
 _appname=ArduDeck
 pkgname=ardudeck-appimage
-pkgver=0.0.33
-pkgrel=2
+pkgver=0.1.0
+pkgrel=1
 pkgdesc="Modern cross-platform ground control station for ArduPilot, Betaflight, and iNav (AppImage)"
 arch=('x86_64')
 url="https://github.com/rubenCodeforges/ardudeck"
@@ -15,7 +15,7 @@
 source=("${pkgname}-${pkgver}.AppImage::${url}/releases/download/v${pkgver}/${_appname}-${pkgver}-linux-x86_64.AppImage"
         "${pkgname}-${pkgver}.LICENSE::https://raw.githubusercontent.com/rubenCodeforges/ardudeck/v${pkgver}/LICENSE")
 noextract=("${pkgname}-${pkgver}.AppImage")
-sha256sums=('e659f4f17e6d03e6e67e75ad437838fabcedea453405fc0f483e1ebbcb2da46d'
+sha256sums=('68a44ceaf90f92071de08b2bad4dcfdfad16ae7634a21242f44b0bd7eedb2ede'
             '86030766b025ce4e69bdc8e3cf33ba9e573b92e32c5392d0b8df0d1dddbc35d1')
 
 build() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 19:16:23	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 01:22:21	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 23:22:13	LOW	2