betterbird-ja-bin

LOW
maintainer Posi 3 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The package downloads a prebuilt Japanese binary archive from the official project's domain (betterbird.eu), which is plausibly the project's own release infrastructure; despite the non-whitelisted host, the source is verifiable and matches the project's official site, and the package installs only the official binary and associated desktop integration files.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt Japanese binary archive from the official project's domain (betterbird.eu), which is plausibly the project's own release infrastructure; despite the non-whitelisted host, the source is verifiable and matches the project's official site, and the package installs only the official binary and associated desktop integration files.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:15 "https://www.betterbird.eu/downloads/LinuxArchive/${_pkgname}-${pkgver}-${_build}.ja.linux-x86_64.tar.xz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Posi<posi1981@gmail.com>
2pkgname=betterbird-ja-bin
3_pkgname=betterbird
4pkgver=153.1.0esr
5_build=bb7-build2
6pkgrel=1
7pkgdesc="JAPANESE // Betterbird is a fine-tuned version of Mozilla Thunderbird, Thunderbird on steroids, if you will."
8arch=('x86_64')
9url="https://www.betterbird.eu/index.html"
10license=('MPL2')
11depends=('dbus-glib')
12provides=("betterbird=${pkgver}")
13conflicts=('betterbird')
14source=(
15 "https://www.betterbird.eu/downloads/LinuxArchive/${_pkgname}-${pkgver}-${_build}.ja.linux-x86_64.tar.xz"
16 "eu.betterbird.Betterbird.desktop"
17)
18
19package() {
20 install -d "${pkgdir}/opt"
21 install -d "${pkgdir}/usr/bin"
22 install -d "${pkgdir}/usr/share/applications"
23
24 cp -r "${srcdir}/${_pkgname}/" "${pkgdir}/opt/${_pkgname}"
25 install -m644 "${srcdir}/eu.${_pkgname}.Betterbird.desktop" "${pkgdir}/usr/share/applications/eu.${_pkgname}.Betterbird.desktop"
26 ln -s /opt/$_pkgname/betterbird "$pkgdir"/usr/bin/$_pkgname
27
28 echo "
29
30 >>>>> このパッケージに忘れずに投票してください。 ありがとう
31 >>>>> Kono pakkēji ni wasurezu ni tōhyō shite kudasai. Arigatō
32 >>>>> https://aur.archlinux.org/packages/betterbird-ja-bin
33
34 "
35
36 #icons
37 for i in 16 22 24 32 48 64 128 256; do
38 install -d "$pkgdir"/usr/share/icons/hicolor/${i}x${i}/apps/
39 ln -s /opt/$_pkgname/chrome/icons/default/default$i.png \
40 "$pkgdir"/usr/share/icons/hicolor/${i}x${i}/apps/$_pkgname.png
41 done
42}
43sha256sums=('e82d761be9a04a3913bff2d8f9d67ac99d5ae3449100bd32dec9a9a146cf50cd'
44 '5ebc00bff424b0badcdb60f87db1c809a2a691d3634720e11c51b42df1e523a6')
45
46

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 11:45:21 Medium 1
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion