digistorage-bin

MEDIUM

maintainer atsitimolan 0 votes scanned 2026-09-14 13:20:30.537841

View on AUR

Why flagged

Prebuilt binary downloaded from the vendor's own domain (storage.rcs-rds.ro) with a pinned sha256 checksum; the host is the official Digi Romania storage portal, making this a vendor-supplied binary rather than a personal/cloud-storage drop, but it is still an unreviewed prebuilt executable installed to /opt and run directly, which warrants medium caution.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:11 source=("digistorage-${pkgver}-linux-x86_64.tar.gz::https://storage.rcs-rds.ro/dl/apps/linux64"

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 70%): Prebuilt binary downloaded from the vendor's own domain (storage.rcs-rds.ro) with a pinned sha256 checksum; the host is the official Digi Romania storage portal, making this a vendor-supplied binary rather than a personal/cloud-storage drop, but it is still an unreviewed prebuilt executable installed to /opt and run directly, which warrants medium caution.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Attila Simon <atsitimolan@murena.io>
    
      2pkgname=digistorage-bin
    
      3pkgver=decf8db
    
      4pkgrel=1
    
      5pkgdesc="Digi Storage Desktop Client - Cloud storage client for Digi Romania"
    
      6arch=('x86_64')
    
      7url="https://storage.rcs-rds.ro"
    
      8depends=('gvfs')
    
      9license=('custom')
    
      10options=(!strip)
    
      11source=("digistorage-${pkgver}-linux-x86_64.tar.gz::https://storage.rcs-rds.ro/dl/apps/linux64"
    
      12        "digistorage.desktop")
    
      13sha256sums=('a1f701503bbe82aa558f3cf64b8f459df236c25f2b43991c305e9e283d4ea42f'
    
      14            'c7f64722db8ab612b1ad1de435236d109fc79ab392b4d877d911f35f0f8c16d2')
    
      15
    
      16prepare() {
    
      17  cd "${srcdir}"
    
      18  tar -xf "digistorage-${pkgver}-linux-x86_64.tar.gz"
    
      19  cd "digistorage"
    
      20  rm -f "Install.desktop" "installer.sh"
    
      21}
    
      22
    
      23package() {
    
      24  install -Dm644 "${srcdir}/digistorage.desktop" "${pkgdir}/usr/share/applications/digistorage.desktop"
    
      25
    
      26  cd "${srcdir}/digistorage"
    
      27
    
      28  install -dm755 "${pkgdir}/opt"
    
      29  cp -r . "${pkgdir}/opt/digistorage"
    
      30
    
      31  install -d "${pkgdir}/usr/share/icons/hicolor/64x64/apps"
    
      32  ln -s "/opt/digistorage/icon.png" "${pkgdir}/usr/share/icons/hicolor/64x64/apps/digistorage.png"
    
      33
    
      34  install -d "${pkgdir}/usr/bin"
    
      35  ln -s "/opt/digistorage/storagegui" "${pkgdir}/usr/bin/digistorage"
    
      36}
    
      37

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-14 13:20:30	Medium	3
2026-09-14 13:17:35	Medium	2