devin-desktop-bin
maintainer code78
· 1 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package installs a prebuilt binary from a project-owned domain (codeiumdata.com) which is not on the whitelist but plausibly official; the source is verifiable via checksum, and no malicious behavior is evident in the PKGBUILD or install script.
Triggered rules
LOW
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
LOW
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from a project-owned domain (codeiumdata.com) which is not on the whitelist but plausibly official; the source is verifiable via checksum, and no malicious behavior is evident in the PKGBUILD or install script.
PKGBUILD
1
# Maintainer: code78 <cod378@proton.me>
2
pkgname=devin-desktop-bin
3
pkgver=3.5.17
4
pkgrel=1
5
pkgdesc="A team of agents for every engineer — Devin Desktop (binary pre-built version)"
6
arch=('x86_64')
7
url="https://devin.ai/desktop"
8
license=('LicenseRef-Devin Desktop')
9
depends=(
10
'glibc>=2.28'
11
'gcc-libs'
12
'gtk3'
13
'nss'
14
'mesa'
15
'alsa-lib'
16
'libsecret'
17
'libxss'
18
'libxtst'
19
'xdg-utils'
20
'libxkbcommon'
21
'dbus'
22
'expat'
23
'libcups'
24
'util-linux-libs'
25
)
26
optdepends=(
27
'libnotify: Desktop notifications'
28
'org.freedesktop.secrets: Keyring support'
29
'libdbusmenu-glib: KDE global menu'
30
'gtk2: GTK2 theme support'
31
'gvfs: Trash functionality'
32
)
33
options=('!strip')
34
conflicts=('devin-desktop' 'windsurf-bin' 'windsurf')
35
provides=('devin-desktop')
36
install=devin-desktop-bin.install
37
38
# Download URL from Devin/Windsurf API
39
# To update: curl -s https://windsurf-stable.codeium.com/api/update/linux-x64/stable/latest | jq -r '.url'
40
# Then update pkgver and the URL below
41
_url="https://windsurf-stable.codeiumdata.com/linux-x64/stable/2c489dfc762456657db8662309c0d5e76e886397/Devin-linux-x64-${pkgver}.tar.gz"
42
source=("devin-desktop-${pkgver}.tar.gz::${_url}")
43
sha256sums=('e7ce36c4baacc617a4d89b0e2fb4403f83b328fefd897aec1be5e31038be4e91')
44
45
package() {
46
# The tarball extracts to a directory named "Devin"
47
_appdir="$srcdir/Devin"
48
49
# Install to /opt/devin-desktop
50
install -dm755 "$pkgdir/opt/devin-desktop"
51
cp -r "$_appdir"/* "$pkgdir/opt/devin-desktop/"
52
53
# Create symlink in /usr/bin
54
install -dm755 "$pkgdir/usr/bin"
55
ln -sf "/opt/devin-desktop/devin-desktop" "$pkgdir/usr/bin/devin-desktop"
56
57
# Install desktop entry
58
install -dm755 "$pkgdir/usr/share/applications"
59
cat > "$pkgdir/usr/share/applications/devin-desktop.desktop" << EOF
60
[Desktop Entry]
61
Name=Devin Desktop
62
Comment=A team of agents for every engineer
63
GenericName=Text Editor
64
Exec=/usr/bin/devin-desktop %U
65
Icon=devin-desktop
66
Type=Application
67
MimeType=x-scheme-handler/devin;x-scheme-handler/codeium;
68
Categories=Development;IDE;TextEditor;
69
StartupNotify=true
70
StartupWMClass=Devin Desktop
71
EOF
72
73
# Install icon
74
install -Dm644 "$pkgdir/opt/devin-desktop/resources/app/out/media/code-icon.svg" \
75
"$pkgdir/usr/share/icons/hicolor/scalable/apps/devin-desktop.svg"
76
77
# Fix permissions
78
chmod 755 "$pkgdir/opt/devin-desktop/devin-desktop"
79
}
80
Changes since previous scan
--- PKGBUILD @ 2026-07-02 00:22+++ PKGBUILD @ 2026-08-03 00:08@@ -1,6 +1,6 @@-# Maintainer: Luiz Silva <luizsv.dev@gmail.com>+# Maintainer: code78 <cod378@proton.me> pkgname=devin-desktop-bin-pkgver=3.2.16+pkgver=3.5.17 pkgrel=1 pkgdesc="A team of agents for every engineer — Devin Desktop (binary pre-built version)" arch=('x86_64')@@ -38,14 +38,9 @@ # Download URL from Devin/Windsurf API # To update: curl -s https://windsurf-stable.codeium.com/api/update/linux-x64/stable/latest | jq -r '.url' # Then update pkgver and the URL below-_url="https://windsurf-stable.codeiumdata.com/linux-x64/stable/4723f912b3f65de66cc2030b5a6e4f843b00875c/Devin-linux-x64-${pkgver}.tar.gz"-source=("devin-desktop-${pkgver}.tar.gz::$_url")-sha256sums=('e456b7a8ecd546536ce3404c477f6f218d4dec46bebd1163f6782ca54734831d')--build() {- # Extract the tarball- tar -xzf "$srcdir/devin-desktop-${pkgver}.tar.gz" -C "$srcdir"-}+_url="https://windsurf-stable.codeiumdata.com/linux-x64/stable/2c489dfc762456657db8662309c0d5e76e886397/Devin-linux-x64-${pkgver}.tar.gz"+source=("devin-desktop-${pkgver}.tar.gz::${_url}")+sha256sums=('e7ce36c4baacc617a4d89b0e2fb4403f83b328fefd897aec1be5e31038be4e91') package() { # The tarball extracts to a directory named "Devin"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 03:22:31 | LOW | 2 |
| 2026-07-02 00:22:12 | CLEAN | 0 |
| 2026-07-01 00:30:02 | LOW | 2 |
| 2026-06-30 00:15:06 | LOW | 2 |
| 2026-06-29 00:20:06 | LOW | 2 |
| 2026-06-28 00:09:41 | LOW | 2 |
| 2026-06-27 00:00:51 | LOW | 2 |
| 2026-06-26 00:27:06 | LOW | 2 |
| 2026-06-25 00:08:41 | LOW | 2 |