dell-powermanager-git
LOW
maintainer alexytomi
1 votes
scanned 2026-10-02 00:00:32.890515
Why flagged
The Flutter SDK tarball is downloaded from Google's official storage.googleapis.com infrastructure (flutter_infra_release), which is the canonical Flutter release host; both sources have SKIP'd checksums which is sloppy but not malicious, and the rest of the build compiles the project's own source code without any obfuscated payloads or exfiltration.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 85%): The Flutter SDK tarball is downloaded from Google's official storage.googleapis.com infrastructure (flutter_infra_release), which is the canonical Flutter release host; both sources have SKIP'd checksums which is sloppy but not malicious, and the rest of the build compiles the project's own source code without any obfuscated payloads or exfiltration.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:43
"https://storage.googleapis.com/flutter_infra_release/releases/stable/linux/flutter_linux_3.47.0-stable.tar.xz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: alexytomi <alexytomi101@gmail.com>
2
3
pkgname=dell-powermanager-git
4
pkgver=0.13.0.r0.g2803dc0
5
pkgrel=1
6
pkgdesc='Cross-platform Dell Power Manager re-implementation'
7
arch=('x86_64')
8
url='https://github.com/alexVinarskis/dell-powermanager'
9
license=('GPL-3.0-only')
10
provides=('dell-powermanager')
11
conflicts=('dell-powermanager')
12
13
makedepends=(
14
# Package deps
15
'ninja'
16
'gtk3'
17
'sqlite'
18
'libsecret'
19
# Flutter SDK deps
20
'curl'
21
'git'
22
'unzip'
23
'xz'
24
'zip'
25
'glu'
26
)
27
28
depends=(
29
'dell-command-configure' # AUR
30
)
31
32
# We manually clone the flutter SDK because there is literally no
33
# working flutter package as of writing, using fvm seems to be
34
# dependent on github clone speed which as of writing, is very
35
# spotty/slow and fvm adds unneeded complexity.
36
37
# Sadly this means that this PKGBUILD may need flutter sdk updates
38
# if the program starts needing newer ones, so check that first
39
# if this breaks.
40
41
source=(
42
"git+https://github.com/alexVinarskis/dell-powermanager.git"
43
"https://storage.googleapis.com/flutter_infra_release/releases/stable/linux/flutter_linux_3.47.0-stable.tar.xz"
44
)
45
sha256sums=('SKIP' 'SKIP')
46
47
pkgver() {
48
cd "$srcdir/dell-powermanager"
49
git describe --long --tags --abbrev=7 | sed 's/\([^-]*-g\)/r\1/;s/-/./g'
50
}
51
52
build() {
53
cd "$srcdir/dell-powermanager"
54
# Following package.sh in the repo, which is for debian
55
PACKAGE="dell-powermanager"
56
NAME="Dell Power Manager by VA"
57
VERSION=$(git describe --tags)
58
sed -i "s|applicationName".*"|applicationName = '${NAME}';|g" ./lib/configs/constants.dart
59
sed -i "s|applicationPackageName".*"|applicationPackageName = '${PACKAGE}';|g" ./lib/configs/constants.dart
60
# Make sure this is semver. The version update checker doesn't
61
# seem to be built for anything else.
62
63
# Also the OTA checker can't be disabled without
64
# a lot of changes.
65
sed -i "s|applicationVersion".*"|applicationVersion = '${VERSION}';|g" ./lib/configs/constants.dart
66
67
$srcdir/flutter/bin/flutter config --enable-linux-desktop
68
$srcdir/flutter/bin/flutter build linux --release
69
}
70
71
package() {
72
cd "$srcdir/dell-powermanager"
73
local appdir="$pkgdir/opt/dell-powermanager"
74
install -dm755 "$appdir"
75
76
cp -a build/linux/x64/release/bundle/. "$appdir/"
77
install -dm755 "$pkgdir/usr/bin"
78
79
ln -s /opt/dell-powermanager/dell_powermanager \
80
"$pkgdir/usr/bin/dell-powermanager"
81
82
install -Dm644 \
83
resources/dell-powermanager.desktop \
84
"$pkgdir/usr/share/applications/dell-powermanager.desktop"
85
86
# Following package.sh in the repo, which is for debian
87
sed -i \
88
-e 's|{VERSION}|'"$pkgver"'|g' \
89
-e 's|{PACKAGE}|dell-powermanager|g' \
90
-e 's|{PATH_ICON}|/opt/dell-powermanager/icon.png|g' \
91
-e 's|{NAME}|Dell Power Manager by VA|g' \
92
"$pkgdir/usr/share/applications/dell-powermanager.desktop"
93
94
install -Dm644 \
95
resources/icon.png \
96
"$pkgdir/opt/dell-powermanager/icon.png"
97
98
install -Dm644 \
99
LICENSE \
100
"$pkgdir/usr/share/licenses/$pkgname/LICENSE"
101
}
102
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-02 00:00:32 | Low | 2 |
| 2026-10-01 00:02:06 | Low | 2 |
| 2026-09-30 00:20:07 | Low | 2 |
| 2026-09-29 00:07:46 | Low | 2 |
| 2026-09-28 00:28:32 | Low | 2 |
| 2026-09-27 00:07:07 | Low | 2 |
| 2026-09-26 00:12:15 | Low | 2 |
| 2026-09-25 00:03:36 | Low | 2 |
| 2026-09-24 00:24:14 | Low | 2 |
| 2026-09-23 00:28:13 | Low | 2 |
| 2026-09-22 00:15:14 | Low | 2 |
| 2026-09-21 00:26:32 | Low | 2 |
| 2026-09-20 00:25:31 | Low | 2 |
| 2026-09-19 00:25:36 | Low | 2 |
| 2026-09-18 00:17:11 | Low | 2 |
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |