briar-desktop-bin

maintainer tblFlip · 6 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt JAR from the project's official domain and verifies it with a fixed checksum; while the host is not a common forge, it is the project's own release infrastructure, and the JAR is a standard part of the official release, making the risk low.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt JAR from the project's official domain and verifies it with a fixed checksum; while the host is not a common forge, it is the project's own release infrastructure, and the JAR is a standard part of the official release, making the risk low.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:21 "https://desktop.briarproject.org/jars/linux/${_bin_ver}-${_build_type}/${_pkgname}-linux-${_bin_ver}-${_build_type}.jar"
PKGBUILD:22 "${_pkgname}.svg::https://code.briarproject.org/briar/${_pkgname}/-/raw/main/${_pkgname}/src/main/resources/images/logo_circle.svg"

PKGBUILD

2 offending line(s) highlighted

      1# Maintainer: tblFlip <root@tblflip.de
    
      2# Contributor: lsf
    
      3
    
      4pkgname=briar-desktop-bin
    
      5_pkgname=briar-desktop
    
      6pkgver=0.6.5.beta
    
      7pkgrel=1
    
      8_bin_ver=0.6.5
    
      9_build_type=beta
    
      10pkgdesc='Prototyping the next generation for Briar on desktop devices'
    
      11
    
      12arch=(any)
    
      13url="https://code.briarproject.org/briar/briar-desktop"
    
      14license=('GPL')
    
      15
    
      16depends=('java-runtime=17' 'bash')
    
      17conflicts=(${_pkgname})
    
      18provides=(${_pkgname})
    
      19
    
      20source=(
    
      21	"https://desktop.briarproject.org/jars/linux/${_bin_ver}-${_build_type}/${_pkgname}-linux-${_bin_ver}-${_build_type}.jar"
    
      22	"${_pkgname}.svg::https://code.briarproject.org/briar/${_pkgname}/-/raw/main/${_pkgname}/src/main/resources/images/logo_circle.svg"
    
      23	"briar16.png" "briar32.png" "briar48.png" "briar64.png" "briar128.png" "briar192.png"
    
      24	"${_pkgname}.desktop"
    
      25	"metainfo-${_bin_ver}-${_build_type}.xml::https://code.briarproject.org/briar/briar-desktop/-/raw/${_bin_ver}-${_build_type}/${_pkgname}/src/appResources/linux/org.briarproject.Briar.metainfo.xml"
    
      26)
    
      27
    
      28noextract=("${_pkgname}-linux-${_bin_ver}-${_build_type}.jar")
    
      29
    
      30sha256sums=(
    
      31	"2b8075b6873d1ea610d60096aaa97d1c2cc1a127c1164b42411fe5a224f31c7a"
    
      32	"95400a8578272600e0b350c4b664c09631c737ce11e750faefe27473460d7923"
    
      33	"965d7c617e345b809f84c8bf73d9cb0acaf763c16a4b367698218b90c1c92669"
    
      34	"3feb96f9b9c01085170a44fdbf8bca43b1e586fe3b68dab37fb5cb9fd4ca1fa6"
    
      35	"3ba1a6a3561f3b879d8295cf3397bda6c7710f138f6cbd7effe4f650765610a0"
    
      36	"25eb65911af5e85d193e0d60418757a2ffe7b3d7d9d3debc41259bc0503972a7"
    
      37	"2a3e508279c2a440372bf73da2c4acf56a9b7a0bcad886a74863f5a723413a93"
    
      38	"a00d60b7aa59fb573c2e42f8bb4c23eb7038c91ea5ced47ebf9d537e3f3925cf"
    
      39	"ac7f0dc86bce256dc80fbee7c65705b6dc9cdbd8f0ad942f0535f82b65ef2f83"
    
      40	"74eeeacd5f964f45ff77b4a869b35b720899d514bc1f1b9b1e29078ef8f7066f"
    
      41)
    
      42
    
      43package() {
    
      44  install -dm755 "$pkgdir/usr/bin/"
    
      45  cat << EOF > "$pkgdir/usr/bin/$_pkgname"
    
      46#!/bin/sh
    
      47exec /usr/lib/jvm/java-17-openjdk/bin/java -jar '/usr/share/java/briar-desktop.jar' "\$@"
    
      48EOF
    
      49  chmod +x "$pkgdir/usr/bin/$_pkgname"
    
      50
    
      51  install -m 644 -D ${_pkgname}-linux-${_bin_ver}-${_build_type}.jar "$pkgdir/usr/share/java/$_pkgname.jar"
    
      52
    
      53  install -Dm644 ${srcdir}/briar-desktop.svg \
    
      54    "$pkgdir/usr/share/icons/hicolor/scalable/apps/$_pkgname.svg"
    
      55
    
      56  # generated with inkscape from the svg
    
      57  # just seemed unreasonable to require inkscape as a makedep
    
      58  # for size in 16 32 48 64 128 192; do
    
      59  # inkscape --export-background-opacity=0 \
    
      60  #     --export-width=${size} --export-type=png \
    
      61  #     --export-filename=${size}.png briar-desktop.svg
    
      62  # done
    
      63
    
      64  for i in 16 32 48 64 128 192; do
    
      65    install -Dm644 ${srcdir}/briar${i}.png \
    
      66      "$pkgdir/usr/share/icons/hicolor/${i}x${i}/apps/$_pkgname.png"
    
      67  done
    
      68
    
      69  install -Dm644 ${srcdir}/$_pkgname.desktop \
    
      70    "$pkgdir/usr/share/applications/$_pkgname.desktop"
    
      71
    
      72  install -Dm644 ${srcdir}/metainfo-${_bin_ver}-${_build_type}.xml \
    
      73    "$pkgdir/usr/share/metainfo/org.briarproject.Briar.metainfo.xml"
    
      74}
    
      75

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2