clockify-desktop
maintainer jankoh
· 18 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads a prebuilt .deb from the official project domain clockify.me, which is the vendor's own release infrastructure; installing official vendor binaries is standard for AUR packages and poses low risk.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt .deb from the official project domain clockify.me, which is the vendor's own release infrastructure; installing official vendor binaries is standard for AUR packages and poses low risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:16
source=("$pkgname-$pkgver.deb::https://clockify.me/downloads/Clockify_Setup_x64.deb")
PKGBUILD
1 offending line(s) highlighted
1
# Generated by debtap
2
# Maintainer: Jan Kohnert <bughunter@jan-kohnert.de>
3
# Contributor: Matthew Sexton <wsdmatty@gmail.com>
4
# Contributor: Lorenz Wellmer
5
pkgname=clockify-desktop
6
pkgver=2.6.7
7
pkgrel=1
8
pkgdesc="Truly free time tracker for teams, Desktop App"
9
arch=("x86_64")
10
url="https://clockify.me"
11
license=("LicenseRef-custom")
12
depends=("alsa-lib" "at-spi2-core" "cairo" "dbus" "expat" "libgcc" "glib2"
13
"glibc" "gtk3" "hicolor-icon-theme" "java-runtime" "libcups"
14
"libx11" "libxcb" "libxcomposite" "libxdamage" "libxext" "libxfixes"
15
"libxkbcommon" "libxrandr" "mesa" "nspr" "nss" "pango" "systemd-libs")
16
source=("$pkgname-$pkgver.deb::https://clockify.me/downloads/Clockify_Setup_x64.deb")
17
sha512sums=("68bec0d6f1ba4b0382e67b57ae2f7aac3aa9e7baf39c7818ce955c30e72b6e46e2f406765584056f4879c1375c4f5e2430c311b45aa546c685b4201d6122f7e2")
18
19
package() {
20
# Extract package data
21
tar xf data.tar.xz -C "${pkgdir}"
22
23
# install license
24
install -D -m644 "${pkgdir}/opt/Clockify/LICENSES.chromium.html" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
25
26
# Fix permission issues
27
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/appicons/1024x1024.png"
28
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/appicons/32x32.png"
29
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/appicons/64x64.ico"
30
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/appicons/64x64.png"
31
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/appicons/blue.png"
32
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/appicons/tray-active-22.png"
33
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/appicons/tray-inactive-22.png"
34
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/appicons/white.png"
35
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/assets.d.ts"
36
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/assets.js"
37
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/audio/pomodoro-notification.ogg"
38
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/entitlements.mac.plist"
39
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/icon.icns"
40
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/1024x10240.png"
41
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/32x32.png"
42
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/64x64.ico"
43
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/64x64.png"
44
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/\$-selected.png"
45
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/\$.png"
46
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/approved.png"
47
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/arrow-dark-mode-up.png"
48
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/arrow-dark-mode.png"
49
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/arrow-light-mode-up.png"
50
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/arrow-light-mode.png"
51
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/at-checked.svg"
52
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/at-semichecked-dark-mode.svg"
53
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/at-unchecked.svg"
54
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/automatic-hover.png"
55
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/automatic.png"
56
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/autotracker-active-hover.png"
57
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/autotracker-active-newest.png"
58
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/autotracker-active.png"
59
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/autotracker-inactive-hover.png"
60
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/autotracker-inactive-newest.png"
61
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/autotracker-inactive.png"
62
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/billable.png"
63
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/billablenew.png"
64
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/bulk-add.svg"
65
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/bulk-delete.svg"
66
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/bulk-merge.svg"
67
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/calendar.png"
68
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/checkbox-checked.svg"
69
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/checked.png"
70
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/checkednew.png"
71
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/circle_1.svg"
72
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/circle_2.svg"
73
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/clockify.ico"
74
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/clockify_illustration.png"
75
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/clockify_logo.svg"
76
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/clockify_logo_dark.svg"
77
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/clockify_logo_selfhosted.svg"
78
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/close-light.png"
79
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/close.png"
80
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/closeX.png"
81
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/create.png"
82
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/edit-unsynced-hover.png"
83
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/edit-unsynced.png"
84
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/filter-arrow-down.png"
85
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/filter-arrow-right.png"
86
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/gear.png"
87
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/icon-cal.svg"
88
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/icon-check-circle.svg"
89
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/icon-chevron-left.svg"
90
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/icon-chevron-right.svg"
91
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/icon-lock.svg"
92
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/icon-plus-circle.svg"
93
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/icon-settings.svg"
94
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/icon.png"
95
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/loading.gif"
96
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/lock-indicator.png"
97
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/logo-128.png"
98
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/logo-16-gray.png"
99
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/logo-16.png"
100
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/logo-48.png"
101
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/logo.png"
102
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/logout-hover.png"
103
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/logout-normal.png"
104
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/logout.png"
105
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/manual-hover.png"
106
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/manual.png"
107
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/menu-dots-vertical.svg"
108
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/menu-hover.png"
109
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/menu.png"
110
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/no-new-notifications.png"
111
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/notifications-hover.png"
112
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/notifications.png"
113
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/notifications/ws-lock.svg"
114
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/notifications/ws-shield.svg"
115
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/out-link.png"
116
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/play-hover.png"
117
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/play-normal.png"
118
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/reload-hover.png"
119
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/reload-normal.png"
120
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/semichecked.svg"
121
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/settings-hover.png"
122
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/settings-normal.png"
123
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/settings.png"
124
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/sync-hover.png"
125
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/sync.png"
126
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/tag.png"
127
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/tagnew.png"
128
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/time-hover.png"
129
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/time-off.png"
130
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/time.png"
131
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/workspace-checked.png"
132
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/images/x.png"
133
chmod a-w "${pkgdir}/opt/Clockify/resources/assets/no-user-image.png"
134
135
# Fix hardlinks
136
rm "${pkgdir}/usr/share/icons/hicolor/32x32/apps/clockify.png"
137
ln -s /opt/Clockify/resources/assets/appicons/32x32.png "${pkgdir}/usr/share/icons/hicolor/32x32/apps/clockify.png"
138
rm "${pkgdir}/usr/share/icons/hicolor/64x64/apps/clockify.png"
139
ln -s /opt/Clockify/resources/assets/appicons/64x64.png "${pkgdir}/usr/share/icons/hicolor/64x64/apps/clockify.png"
140
rm "${pkgdir}/usr/share/icons/hicolor/1024x1024/apps/clockify.png"
141
ln -s /opt/Clockify/resources/assets/appicons/1024x1024.png "${pkgdir}/usr/share/icons/hicolor/1024x1024/apps/clockify.png"
142
143
# Remove forgotten temporary build build pkgdir
144
rm -r "${pkgdir}/opt/Clockify/resources/app.asar.unpacked/node_modules/active-win/build-tmp-napi-v6"
145
rm -r "${pkgdir}/opt/Clockify/resources/app.asar.unpacked/node_modules/active-win/lib/binding/napi-6-linux-glibc-x64"
146
147
# generate link in PATH
148
install -dm755 "${pkgdir}/usr/bin"
149
ln -s "/opt/Clockify/clockify" "${pkgdir}/usr/bin/clockify"
150
}
151
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 19:16:23 | MEDIUM | 1 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |