basilisk

MEDIUM

maintainer figue 1 votes scanned 2026-09-22 21:39:17.189684

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source=("https://repo.palemoon.org/Basilisk-Dev/Basilisk/archive/v${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Figue <ffigue@gmail.com>
    
      2# Contributor: neeshy <neeshy@tfwno.gf>
    
      3# Contributor: Ionut Biru <ibiru@archlinux.org>
    
      4# Contributor: Jakub Schmidtke <sjakub@gmail.com>
    
      5pkgname=basilisk
    
      6pkgver=2026.09.24
    
      7platform=RB_20260922
    
      8pkgrel=1
    
      9pkgdesc="A XUL-based web-browser demonstrating the Unified XUL Platform (UXP)"
    
      10arch=('x86_64')
    
      11url="https://www.basilisk-browser.org/"
    
      12license=('MPL' 'GPL' 'LGPL')
    
      13depends=('gtk3' 'gtk2' 'libxt' 'mime-types' 'alsa-lib' 'ffmpeg' 'ttf-font')
    
      14makedepends=('unzip' 'zip' 'python2' 'yasm' 'mesa')
    
      15options=('!emptydirs')
    
      16source=("https://repo.palemoon.org/Basilisk-Dev/Basilisk/archive/v${pkgver}.tar.gz"
    
      17        "https://repo.palemoon.org/MoonchildProductions/UXP/archive/${platform}.tar.gz"
    
      18        "https://repo.palemoon.org/mcp-graveyard/Pale-Moon/raw/commit/54aeb54828aba7ab47d6ec4a2ee432589efa2b4f/palemoon/branding/unofficial/browser.desktop")
    
      19sha256sums=('f39b720150c9c2c5a5d4bca67d9cf7cd334c8c670bf7c689ee32cb718f54b36e'
    
      20            '6e45dc0c7cbabb9b5e2b1d2c793bf51d73793bd8de7926ec483c7af3e1f33076'
    
      21            '9ffbaa46c277e3c9addc2ce61b17e8eccffd3860706ca75d4fd70eeaa6f5e380')
    
      22
    
      23prepare() {
    
      24  cd "$srcdir/$pkgname"
    
      25
    
      26  export CFLAGS="-march=native -O2 -pipe -fno-plt -fexceptions \
    
      27        -Wp,-D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security \
    
      28        -fstack-clash-protection -fcf-protection"
    
      29  export CXXFLAGS="$CFLAGS -Wp,-D_GLIBCXX_ASSERTIONS"
    
      30  export LDFLAGS="-Wl,-O1,--sort-common,--as-needed,-z,relro,-z,now"
    
      31
    
      32  if [ -d platform ]; then
    
      33    cp -rf "$srcdir"/uxp/* "$srcdir"/uxp/.[A-z0-9]* platform/
    
      34  else
    
      35    mv -T "$srcdir"/uxp/ platform/
    
      36  fi
    
      37
    
      38  cat > .mozconfig << EOF
    
      39# Comment/uncomment build flags as needed
    
      40
    
      41#ac_add_options --enable-release
    
      42#ac_add_options --enable-official-branding
    
      43#export MOZILLA_OFFICIAL=1
    
      44#export MOZ_DATA_REPORTING=0
    
      45#export MOZ_TELEMETRY_REPORTING=0
    
      46#export MOZ_SERVICES_HEALTHREPORT=0
    
      47
    
      48ac_add_options --enable-application=basilisk
    
      49ac_add_options --enable-private-build
    
      50ac_add_options --prefix=/usr
    
      51ac_add_options --enable-strip
    
      52ac_add_options --enable-install-strip
    
      53ac_add_options --enable-gold
    
      54ac_add_options --enable-pie
    
      55ac_add_options --enable-jemalloc
    
      56#ac_add_options --enable-replace-malloc
    
      57ac_add_options --with-pthreads
    
      58ac_add_options --enable-optimize="-O2 -msse -msse2 -msse3 -mmmx -mfpmath=sse"
    
      59ac_add_options --enable-default-toolkit=cairo-gtk3
    
      60
    
      61ac_add_options --enable-alsa
    
      62ac_add_options --enable-devtools
    
      63ac_add_options --enable-webrtc
    
      64ac_add_options --enable-av1
    
      65ac_add_options --enable-gamepad
    
      66
    
      67ac_add_options --disable-crashreporter
    
      68ac_add_options --disable-debug
    
      69ac_add_options --disable-debug-symbols
    
      70ac_add_options --disable-tests
    
      71ac_add_options --disable-dbus
    
      72ac_add_options --disable-necko-wifi
    
      73ac_add_options --disable-startup-notification
    
      74ac_add_options --disable-updater
    
      75ac_add_options --disable-maintenance-service
    
      76
    
      77#ac_add_options --disable-stylo
    
      78#ac_add_options --disable-servo
    
      79#ac_add_options --disable-webextensions
    
      80#ac_add_options --disable-parental-controls
    
      81#ac_add_options --disable-accessibility
    
      82#ac_add_options --disable-safe-browsing
    
      83#ac_add_options --disable-sync
    
      84#ac_add_options --disable-webspeech
    
      85#ac_add_options --disable-webspeechtestbackend
    
      86#ac_add_options --disable-synth-speechd
    
      87#ac_add_options --disable-synth-pico
    
      88#ac_add_options --disable-b2g-camera
    
      89#ac_add_options --disable-b2g-ril
    
      90#ac_add_options --disable-b2g-bt
    
      91#ac_add_options --disable-mozril-geoloc
    
      92#ac_add_options --disable-nfc
    
      93#ac_add_options --disable-url-classifier
    
      94#ac_add_options --disable-userinfo
    
      95#ac_add_options --disable-pulseaudio
    
      96#ac_add_options --disable-jack
    
      97
    
      98#mk_add_options MOZ_MAKE_FLAGS="-j4"
    
      99#mk_add_options PYTHON=/usr/bin/python2
    
      100EOF
    
      101}
    
      102
    
      103build() {
    
      104  cd "$srcdir/$pkgname"
    
      105
    
      106  #export CC=gcc-13
    
      107  ./mach build
    
      108}
    
      109
    
      110package() {
    
      111  cd "$srcdir/$pkgname"
    
      112
    
      113  #export CC=gcc-13
    
      114  DESTDIR="$pkgdir" ./mach install
    
      115
    
      116  # Install icons and .desktop for menu entry
    
      117  local _i
    
      118  for _i in 16 32 48; do
    
      119    install -Dm644 "basilisk/branding/unofficial/default${_i}.png" \
    
      120      "$pkgdir/usr/share/icons/hicolor/${_i}x${_i}/apps/basilisk.png"
    
      121  done
    
      122  # The 128x128 icon have different name
    
      123  install -Dm644 basilisk/branding/unofficial/mozicon128.png \
    
      124    "$pkgdir/usr/share/icons/hicolor/128x128/apps/basilisk.png"
    
      125
    
      126  install -Dm644 "$srcdir/browser.desktop" \
    
      127    "$pkgdir/usr/share/applications/basilisk.desktop"
    
      128  sed -i -e "s:Web Browser:Basilisk:" -e "s:palemoon:basilisk:" \
    
      129    -e "s@https://start.palemoon.org@about:newtab@" \
    
      130    -e "s:Name=Browser:Name=Basilisk:" \
    
      131    "$pkgdir/usr/share/applications/basilisk.desktop"
    
      132
    
      133  # Replace duplicate binary with symlink
    
      134  # https://bugzilla.mozilla.org/show_bug.cgi?id=658850
    
      135  ln -sf basilisk "$pkgdir/usr/lib/basilisk-$(< basilisk/config/version.txt)/basilisk-bin"
    
      136}
    
      137

Changes since previous scan

--- PKGBUILD @ 2026-06-20 00:18
+++ PKGBUILD @ 2026-09-22 21:39
@@ -3,8 +3,8 @@
 # Contributor: Ionut Biru <ibiru@archlinux.org>
 # Contributor: Jakub Schmidtke <sjakub@gmail.com>
 pkgname=basilisk
-pkgver=2026.04.15
-platform=RB_20260430
+pkgver=2026.09.24
+platform=RB_20260922
 pkgrel=1
 pkgdesc="A XUL-based web-browser demonstrating the Unified XUL Platform (UXP)"
 arch=('x86_64')
@@ -16,8 +16,8 @@
 source=("https://repo.palemoon.org/Basilisk-Dev/Basilisk/archive/v${pkgver}.tar.gz"
         "https://repo.palemoon.org/MoonchildProductions/UXP/archive/${platform}.tar.gz"
         "https://repo.palemoon.org/mcp-graveyard/Pale-Moon/raw/commit/54aeb54828aba7ab47d6ec4a2ee432589efa2b4f/palemoon/branding/unofficial/browser.desktop")
-sha256sums=('043b9e344e149ae6b234823b71e75afb0edb64fd8ff6b0e1daa97ef7fc65415c'
-            'fa952ed016666ce9b0d5f86d735138beb9039f52ad671cfc2e1655ae1c9ebba9'
+sha256sums=('f39b720150c9c2c5a5d4bca67d9cf7cd334c8c670bf7c689ee32cb718f54b36e'
+            '6e45dc0c7cbabb9b5e2b1d2c793bf51d73793bd8de7926ec483c7af3e1f33076'
             '9ffbaa46c277e3c9addc2ce61b17e8eccffd3860706ca75d4fd70eeaa6f5e380')
 
 prepare() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-22 21:39:17	Medium	1
2026-06-20 00:18:46	Medium	1
2026-06-19 23:51:18	Clean	2
2026-06-19 19:07:35	Low	2
2026-06-18 16:11:54	Medium	1