briar-desktop-bin
LOW
maintainer tblFlip
6 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a prebuilt JAR from the project's official domain and verifies it with a fixed checksum; while the host is not a common forge, it is the project's own release infrastructure, and the JAR is a standard part of the official release, making the risk low.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt JAR from the project's official domain and verifies it with a fixed checksum; while the host is not a common forge, it is the project's own release infrastructure, and the JAR is a standard part of the official release, making the risk low.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:21
"https://desktop.briarproject.org/jars/linux/${_bin_ver}-${_build_type}/${_pkgname}-linux-${_bin_ver}-${_build_type}.jar" -
PKGBUILD:22
"${_pkgname}.svg::https://code.briarproject.org/briar/${_pkgname}/-/raw/main/${_pkgname}/src/main/resources/images/logo_circle.svg"
PKGBUILD
2 offending line(s) highlighted
1
# Maintainer: tblFlip <root@tblflip.de
2
# Contributor: lsf
3
4
pkgname=briar-desktop-bin
5
_pkgname=briar-desktop
6
pkgver=0.6.5.beta
7
pkgrel=1
8
_bin_ver=0.6.5
9
_build_type=beta
10
pkgdesc='Prototyping the next generation for Briar on desktop devices'
11
12
arch=(any)
13
url="https://code.briarproject.org/briar/briar-desktop"
14
license=('GPL')
15
16
depends=('java-runtime=17' 'bash')
17
conflicts=(${_pkgname})
18
provides=(${_pkgname})
19
20
source=(
21
"https://desktop.briarproject.org/jars/linux/${_bin_ver}-${_build_type}/${_pkgname}-linux-${_bin_ver}-${_build_type}.jar"
22
"${_pkgname}.svg::https://code.briarproject.org/briar/${_pkgname}/-/raw/main/${_pkgname}/src/main/resources/images/logo_circle.svg"
23
"briar16.png" "briar32.png" "briar48.png" "briar64.png" "briar128.png" "briar192.png"
24
"${_pkgname}.desktop"
25
"metainfo-${_bin_ver}-${_build_type}.xml::https://code.briarproject.org/briar/briar-desktop/-/raw/${_bin_ver}-${_build_type}/${_pkgname}/src/appResources/linux/org.briarproject.Briar.metainfo.xml"
26
)
27
28
noextract=("${_pkgname}-linux-${_bin_ver}-${_build_type}.jar")
29
30
sha256sums=(
31
"2b8075b6873d1ea610d60096aaa97d1c2cc1a127c1164b42411fe5a224f31c7a"
32
"95400a8578272600e0b350c4b664c09631c737ce11e750faefe27473460d7923"
33
"965d7c617e345b809f84c8bf73d9cb0acaf763c16a4b367698218b90c1c92669"
34
"3feb96f9b9c01085170a44fdbf8bca43b1e586fe3b68dab37fb5cb9fd4ca1fa6"
35
"3ba1a6a3561f3b879d8295cf3397bda6c7710f138f6cbd7effe4f650765610a0"
36
"25eb65911af5e85d193e0d60418757a2ffe7b3d7d9d3debc41259bc0503972a7"
37
"2a3e508279c2a440372bf73da2c4acf56a9b7a0bcad886a74863f5a723413a93"
38
"a00d60b7aa59fb573c2e42f8bb4c23eb7038c91ea5ced47ebf9d537e3f3925cf"
39
"ac7f0dc86bce256dc80fbee7c65705b6dc9cdbd8f0ad942f0535f82b65ef2f83"
40
"74eeeacd5f964f45ff77b4a869b35b720899d514bc1f1b9b1e29078ef8f7066f"
41
)
42
43
package() {
44
install -dm755 "$pkgdir/usr/bin/"
45
cat << EOF > "$pkgdir/usr/bin/$_pkgname"
46
#!/bin/sh
47
exec /usr/lib/jvm/java-17-openjdk/bin/java -jar '/usr/share/java/briar-desktop.jar' "\$@"
48
EOF
49
chmod +x "$pkgdir/usr/bin/$_pkgname"
50
51
install -m 644 -D ${_pkgname}-linux-${_bin_ver}-${_build_type}.jar "$pkgdir/usr/share/java/$_pkgname.jar"
52
53
install -Dm644 ${srcdir}/briar-desktop.svg \
54
"$pkgdir/usr/share/icons/hicolor/scalable/apps/$_pkgname.svg"
55
56
# generated with inkscape from the svg
57
# just seemed unreasonable to require inkscape as a makedep
58
# for size in 16 32 48 64 128 192; do
59
# inkscape --export-background-opacity=0 \
60
# --export-width=${size} --export-type=png \
61
# --export-filename=${size}.png briar-desktop.svg
62
# done
63
64
for i in 16 32 48 64 128 192; do
65
install -Dm644 ${srcdir}/briar${i}.png \
66
"$pkgdir/usr/share/icons/hicolor/${i}x${i}/apps/$_pkgname.png"
67
done
68
69
install -Dm644 ${srcdir}/$_pkgname.desktop \
70
"$pkgdir/usr/share/applications/$_pkgname.desktop"
71
72
install -Dm644 ${srcdir}/metainfo-${_bin_ver}-${_build_type}.xml \
73
"$pkgdir/usr/share/metainfo/org.briarproject.Briar.metainfo.xml"
74
}
75
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |