claude-code

MEDIUM
maintainer cg505 94 votes scanned 2026-09-17 01:24:19.570146
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:27 source=("cc-legal::https://code.claude.com/docs/en/legal-and-compliance.md")
  • PKGBUILD:28 source_x86_64=("claude-${pkgver}-x86_64::https://downloads.claude.ai/claude-code-releases/${pkgver}/linux-x64/claude")

PKGBUILD

2 offending line(s) highlighted
1# Maintainer: Christopher Cooper <christopher@cg505.com>
2# Maintainer: Jérôme Poulin <jeromepoulin@gmail.com>
3# Maintainer: Fabio Fontana (fabifont) <me@fabifont.dev>
4# Automation repository: https://github.com/fabifont/claude-code-aur
5
6pkgname=claude-code
7pkgver=2.1.273
8pkgrel=1
9pkgdesc="An agentic coding tool that lives in your terminal"
10arch=('x86_64' 'aarch64')
11url="https://github.com/anthropics/claude-code"
12license=('LicenseRef-claude-code')
13depends=('bash')
14# Binary is a self-contained Bun executable with embedded JS/resources - stripping breaks it
15options=('!strip')
16
17optdepends=(
18 'git: allow Claude to use git'
19 'github-cli: interact with GitHub'
20 'glab: interact with GitLab'
21 'ripgrep: enhanced file search'
22 'tmux: agent team split panes'
23 'bubblewrap: sandboxing'
24 'socat: sandboxing'
25)
26
27source=("cc-legal::https://code.claude.com/docs/en/legal-and-compliance.md")
28source_x86_64=("claude-${pkgver}-x86_64::https://downloads.claude.ai/claude-code-releases/${pkgver}/linux-x64/claude")
29source_aarch64=("claude-${pkgver}-aarch64::https://downloads.claude.ai/claude-code-releases/${pkgver}/linux-arm64/claude")
30
31sha256sums=('SKIP')
32sha256sums_x86_64=('6c752e2cc7c110c9df15f26d8d134d438c5ae95dbd610efc1a308bf7f9c5f6c1')
33sha256sums_aarch64=('103cfab4d6ae898b6af692336fb662ffcc607075cc6408892bd350b3f549ebee')
34
35package() {
36 install -Dm755 "${srcdir}/claude-${pkgver}-${CARCH}" "${pkgdir}/opt/claude-code/bin/claude"
37
38 # Create wrapper script to disable upstream update paths, and to suppress the
39 # native-install health check. Claude Code expects the native installer layout
40 # (~/.local/bin/claude); since we install to /opt + /usr/bin it would otherwise
41 # warn on every startup: "claude command at ~/.local/bin/claude missing or broken".
42 install -dm755 "${pkgdir}/usr/bin"
43 cat > "${pkgdir}/usr/bin/claude" << 'EOF'
44#!/bin/sh
45export DISABLE_UPDATES=1
46export DISABLE_INSTALLATION_CHECKS=1
47exec /opt/claude-code/bin/claude "$@"
48EOF
49 chmod 755 "${pkgdir}/usr/bin/claude"
50
51 install -Dm644 "${srcdir}/cc-legal" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
52}
53

Changes since previous scan

--- PKGBUILD @ 2026-09-17 00:27
+++ PKGBUILD @ 2026-09-17 01:24
@@ -4,7 +4,7 @@
# Automation repository: https://github.com/fabifont/claude-code-aur
pkgname=claude-code
-pkgver=2.1.272
+pkgver=2.1.273
pkgrel=1
pkgdesc="An agentic coding tool that lives in your terminal"
arch=('x86_64' 'aarch64')
@@ -29,8 +29,8 @@
source_aarch64=("claude-${pkgver}-aarch64::https://downloads.claude.ai/claude-code-releases/${pkgver}/linux-arm64/claude")
sha256sums=('SKIP')
-sha256sums_x86_64=('d81396a668eb76fbddb49a2a5841f1b5d7af96b4c1f6500ced92f2c988f5bcd4')
-sha256sums_aarch64=('214a90efdd16ee0ea81132ffecced588dba394d178cc494f285ba04b5288c8de')
+sha256sums_x86_64=('6c752e2cc7c110c9df15f26d8d134d438c5ae95dbd610efc1a308bf7f9c5f6c1')
+sha256sums_aarch64=('103cfab4d6ae898b6af692336fb662ffcc607075cc6408892bd350b3f549ebee')
package() {
install -Dm755 "${srcdir}/claude-${pkgver}-${CARCH}" "${pkgdir}/opt/claude-code/bin/claude"

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 01:24:19 Medium 1
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 21:20:38 Medium 1
2026-09-15 01:18:20 Medium 1
2026-09-15 00:25:31 Low 2
2026-09-14 23:18:17 Medium 1
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 21:12:39 Medium 1
2026-09-12 00:25:17 Low 2
2026-09-11 21:24:02 Medium 1
2026-09-11 00:19:22 Low 2
2026-09-10 21:21:21 Medium 1
2026-09-10 00:22:44 Low 2
2026-09-09 21:20:09 Medium 1
2026-09-09 01:18:32 Medium 1
2026-09-09 00:04:09 Low 2
2026-09-08 21:18:22 Medium 1
2026-09-08 00:18:08 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion