dbpro-appimage
LOW
maintainer NickeyGod
0 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The package downloads a prebuilt AppImage from the project's official release domain (releases.dbpro.app), which is plausibly controlled by the project; while not on a standard forge, it is not a swappable host like personal cloud storage, and the AppImage is from the official vendor, making the supply-chain risk low.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt AppImage from the project's official release domain (releases.dbpro.app), which is plausibly controlled by the project; while not on a standard forge, it is not a swappable host like personal cloud storage, and the AppImage is from the official vendor, making the supply-chain risk low.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:17
"https://releases.dbpro.app/linux-x64/DB%20Pro-${pkgver}-x86_64.AppImage"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: NickeyGod <niklass.schaeffer@gmail.com>
2
pkgname=dbpro-appimage
3
pkgver=2.10.2
4
pkgrel=1
5
pkgdesc="Database management tool - MySQL, PostgreSQL, SQLite, MongoDB, Redis, and more"
6
arch=(x86_64)
7
url="https://dbpro.app"
8
license=(custom)
9
depends=(fuse2 libnotify libxtst nss gtk3 libxss)
10
optdepends=(
11
'libappindicator-gtk3: System tray support'
12
)
13
provides=(dbpro)
14
conflicts=(dbpro)
15
options=(!strip !debug)
16
source_x86_64=(
17
"https://releases.dbpro.app/linux-x64/DB%20Pro-${pkgver}-x86_64.AppImage"
18
)
19
sha256sums_x86_64=('758ab4b78387fe640411e22fe73cb84da53bbdb653718903580d5886b90ce31c')
20
noextract=("${source_x86_64[0]##*/}")
21
22
package() {
23
local _download_name="${source_x86_64[0]##*/}"
24
local _install_name="dbpro-${pkgver}-x86_64.AppImage"
25
26
# Install AppImage with a clean filename
27
install -Dm755 "${srcdir}/${_download_name}" "${pkgdir}/opt/${pkgname}/${_install_name}"
28
29
# Install desktop entry
30
install -Dm644 /dev/stdin "${pkgdir}/usr/share/applications/dbpro.desktop" <<EOF
31
[Desktop Entry]
32
Name=DB Pro
33
Exec=/opt/${pkgname}/${_install_name} --no-sandbox --disable-setuid-sandbox %U
34
Terminal=false
35
Type=Application
36
Icon=dbpro
37
StartupWMClass=DB Pro
38
Comment=Database management tool
39
Categories=Development;
40
MimeType=x-scheme-handler/dbpro;
41
EOF
42
43
# Install icons by extracting from the AppImage
44
cd "${srcdir}"
45
chmod +x "${_download_name}"
46
"./${_download_name}" --appimage-extract 'usr/share/icons/hicolor/*/apps/dbpro.png' >/dev/null 2>&1 || true
47
48
local icon
49
for icon in squashfs-root/usr/share/icons/hicolor/*/apps/dbpro.png; do
50
local size_dir
51
size_dir=$(dirname "$(dirname "$icon")")
52
local size
53
size=$(basename "$size_dir")
54
install -Dm644 "$icon" "${pkgdir}/usr/share/icons/hicolor/${size}/apps/dbpro.png"
55
done
56
57
# Symlink for /usr/bin
58
install -dm755 "${pkgdir}/usr/bin"
59
ln -s "/opt/${pkgname}/${_install_name}" "${pkgdir}/usr/bin/dbpro"
60
}
61
Changes since previous scan
--- PKGBUILD @ 2026-10-30 00:29+++ PKGBUILD @ 2026-11-01 00:21@@ -1,6 +1,6 @@ # Maintainer: NickeyGod <niklass.schaeffer@gmail.com> pkgname=dbpro-appimage-pkgver=2.10.1+pkgver=2.10.2 pkgrel=1 pkgdesc="Database management tool - MySQL, PostgreSQL, SQLite, MongoDB, Redis, and more" arch=(x86_64)@@ -16,7 +16,7 @@ source_x86_64=( "https://releases.dbpro.app/linux-x64/DB%20Pro-${pkgver}-x86_64.AppImage" )-sha256sums_x86_64=('5f08e697d2519af5b0c7a87f8d673f540ba7e1531ce141d43c1274d1f6c1461f')+sha256sums_x86_64=('758ab4b78387fe640411e22fe73cb84da53bbdb653718903580d5886b90ce31c') noextract=("${source_x86_64[0]##*/}") package() {Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 07:55:24 | Medium | 1 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |