binance

MEDIUM
maintainer rafa 36 votes scanned 2026-10-05 23:40:58.404909
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:14 source=("${pkgname}-${pkgver}.deb::https://download.binance.com/desktop/linux/production/binance-${pkgver}-amd64-linux.deb")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Rafa <rafael at chavantes dot com>
2# Contributor: metaanon
3# Contributor: strahe
4# Contributor: tyjak
5pkgname=binance
6pkgver=2.4.1
7pkgrel=1
8pkgdesc="The Binance desktop application"
9arch=('x86_64')
10url="https://www.binance.com/en/download"
11license=('unknown')
12depends=('gtk3' 'nss' 'libxss' 'libxtst' 'xdg-utils' 'libnotify' 'libsecret')
13options=('!strip' '!debug')
14source=("${pkgname}-${pkgver}.deb::https://download.binance.com/desktop/linux/production/binance-${pkgver}-amd64-linux.deb")
15sha256sums=('de369ced61b613afc77f8ab0f24119bc40fc8b3074424f477ac401a96a42b5f7')
16
17package() {
18 bsdtar -xv -C "${pkgdir}" -f "${srcdir}/data.tar.xz"
19 mkdir -p "${pkgdir}/usr/bin"
20 ln -s /opt/Binance/binance "${pkgdir}/usr/bin/binance"
21}
22

Changes since previous scan

--- PKGBUILD @ 2026-06-18 16:11
+++ PKGBUILD @ 2026-10-05 23:40
@@ -3,15 +3,16 @@
# Contributor: strahe
# Contributor: tyjak
pkgname=binance
-pkgver=2.0.2
+pkgver=2.4.1
pkgrel=1
pkgdesc="The Binance desktop application"
arch=('x86_64')
url="https://www.binance.com/en/download"
license=('unknown')
-depends=('gtk3' 'nss' 'libxss' 'libxtst' 'xdg-utils')
-source=("${pkgname}-${pkgver}.deb::https://github.com/binance/desktop/releases/download/v${pkgver}/binance-${pkgver}-amd64-linux.deb")
-sha256sums=('6d384945c4090a99c418d2953b9741594aa3b077df0e03ac1b68e7a4c2188f36')
+depends=('gtk3' 'nss' 'libxss' 'libxtst' 'xdg-utils' 'libnotify' 'libsecret')
+options=('!strip' '!debug')
+source=("${pkgname}-${pkgver}.deb::https://download.binance.com/desktop/linux/production/binance-${pkgver}-amd64-linux.deb")
+sha256sums=('de369ced61b613afc77f8ab0f24119bc40fc8b3074424f477ac401a96a42b5f7')
package() {
bsdtar -xv -C "${pkgdir}" -f "${srcdir}/data.tar.xz"

Scan history

Scanned at (UTC)SeverityRules
2026-10-05 23:40:58 Medium 1
2026-06-18 16:11:54 Clean 0

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion