betterbird-pt-bin

maintainer Posi · 4 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt archive from the project's official domain (betterbird.eu), which is not on the whitelist but is plausibly legitimate; the source is verified via sha256sum, and the package installs only data and binaries from that source without executing remote code or exhibiting malicious behavior.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt archive from the project's official domain (betterbird.eu), which is not on the whitelist but is plausibly legitimate; the source is verified via sha256sum, and the package installs only data and binaries from that source without executing remote code or exhibiting malicious behavior.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 "https://www.betterbird.eu/downloads/LinuxArchive/${_pkgname}-${pkgver}-${_build}.pt-BR.linux-x86_64.tar.xz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Posi<posi1981@gmail.com>
    
      2pkgname=betterbird-pt-bin
    
      3_pkgname=betterbird
    
      4pkgver=140.13.0esr
    
      5_build=bb25
    
      6pkgrel=1
    
      7pkgdesc="PORTUGUESE // Betterbird is a fine-tuned version of Mozilla Thunderbird, Thunderbird on steroids, if you will."
    
      8arch=('x86_64')
    
      9url="https://www.betterbird.eu/index.html"
    
      10license=('MPL2')
    
      11depends=('dbus-glib')
    
      12provides=("betterbird=${pkgver}")
    
      13conflicts=('betterbird')
    
      14source=(
    
      15    "https://www.betterbird.eu/downloads/LinuxArchive/${_pkgname}-${pkgver}-${_build}.pt-BR.linux-x86_64.tar.xz"
    
      16    "eu.betterbird.Betterbird.desktop"
    
      17)
    
      18
    
      19package() {
    
      20    install -d "${pkgdir}/opt"
    
      21    install -d "${pkgdir}/usr/bin"
    
      22    install -d "${pkgdir}/usr/share/applications"
    
      23
    
      24    cp -r "${srcdir}/${_pkgname}/" "${pkgdir}/opt/${_pkgname}"
    
      25    install -m644 "${srcdir}/eu.${_pkgname}.Betterbird.desktop" "${pkgdir}/usr/share/applications/eu.${_pkgname}.Betterbird.desktop"
    
      26    ln -s /opt/$_pkgname/betterbird "$pkgdir"/usr/bin/$_pkgname
    
      27
    
      28    echo     "
    
      29
    
      30	  >>>>>    Por favor, não se esqueça de votar neste pacote. OBRIGADO
    
      31	  >>>>>    https://aur.archlinux.org/packages/betterbird-pt-bin
    
      32
    
      33	  "
    
      34    #icons
    
      35    for i in 16 22 24 32 48 64 128 256; do
    
      36        install -d "$pkgdir"/usr/share/icons/hicolor/${i}x${i}/apps/
    
      37        ln -s /opt/$_pkgname/chrome/icons/default/default$i.png \
    
      38            "$pkgdir"/usr/share/icons/hicolor/${i}x${i}/apps/$_pkgname.png
    
      39    done
    
      40}
    
      41sha256sums=('e1246964285905406a035885613e4d60ed0431276c528178e2f5d2b70aed248c'
    
      42            '60045ec0138ad4c01546df596b97016e467bec6d69c7e4e4c7bdb85e91a31bc2')
    
      43
    
      44

Changes since previous scan

--- PKGBUILD @ 2026-07-23 00:14
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,8 +1,8 @@
 # Maintainer: Posi<posi1981@gmail.com>
 pkgname=betterbird-pt-bin
 _pkgname=betterbird
-pkgver=140.12.0esr
-_build=bb24
+pkgver=140.13.0esr
+_build=bb25
 pkgrel=1
 pkgdesc="PORTUGUESE // Betterbird is a fine-tuned version of Mozilla Thunderbird, Thunderbird on steroids, if you will."
 arch=('x86_64')
@@ -38,7 +38,7 @@
             "$pkgdir"/usr/share/icons/hicolor/${i}x${i}/apps/$_pkgname.png
     done
 }
-sha256sums=('6bd8f4990aae4bf8e13c383fdc406171fe36f7aca18e62535de8fff07797f56b'
+sha256sums=('e1246964285905406a035885613e4d60ed0431276c528178e2f5d2b70aed248c'
             '60045ec0138ad4c01546df596b97016e467bec6d69c7e4e4c7bdb85e91a31bc2')
 
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 19:25:44	MEDIUM	1
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2