discord-canary

MEDIUM
maintainer timschumi 36 votes scanned 2026-09-17 01:24:19.570146
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:19 source=("https://dl-canary.discordapp.net/apps/linux/$pkgver/$pkgname-$pkgver.tar.gz"
  • PKGBUILD:20 "LICENSE-$pkgver.html::https://discordapp.com/terms"

PKGBUILD

2 offending line(s) highlighted
1# Contributor: Filipe Laíns (FFY00) <lains@archlinux.org>
2# Contributor: Morgan <morganamilo@archlinux.org>
3# Contributor: Robin Candau <antiz@archlinux.org>
4# Contributor: Christian Heusel <gromit@archlinux.org>
5# Contributor: T.J. Townsend <blakkheim@archlinux.org>
6
7pkgname=discord-canary
8_pkgname=DiscordCanary
9pkgver=1.0.1923
10pkgrel=1
11pkgdesc="All-in-one voice and text chat for gamers - alpha build"
12arch=('x86_64')
13url='https://discord.com'
14license=('custom')
15options=(!debug !strip)
16optdepends=('libpulse: PulseAudio support'
17 'libappindicator-gtk3: Systray indicator support'
18 'xdg-utils: For opening URLs and files')
19source=("https://dl-canary.discordapp.net/apps/linux/$pkgver/$pkgname-$pkgver.tar.gz"
20 "LICENSE-$pkgver.html::https://discordapp.com/terms"
21 "OSS-LICENSES-$pkgver.html::https://discordapp.com/licenses")
22sha512sums=('707022bc7748c672730ba299ff3198f255acf8b76bd0c8975b78575bed2ca7753b488d4bf6643b73b3ba033dfdc186bc7338d5f40d9448307d1ead01d079b101'
23 'SKIP'
24 'SKIP')
25
26# Skip license hashes as they are unstable (discord#2)
27# Since "updpkgsums"/"pkgctl version upgrade" overwrite the checksum array with
28# literal hashes, set them to SKIP with indexed assignments (pacman-contrib#119)
29# https://gitlab.archlinux.org/archlinux/packaging/packages/discord/-/issues/2
30# https://gitlab.archlinux.org/pacman/pacman-contrib/-/issues/119
31sha512sums[1]='SKIP'
32sha512sums[2]='SKIP'
33
34package() {
35 depends=('libnotify' 'libxss' 'nspr' 'nss' 'gtk3')
36 install -d "$pkgdir"/opt/$pkgname
37 cp -a $_pkgname/. "$pkgdir"/opt/$pkgname
38
39 chmod 755 "$pkgdir"/opt/$pkgname/$pkgname
40
41 rm "$pkgdir"/opt/$pkgname/postinst.sh
42
43 install -d "$pkgdir"/usr/bin
44 ln -s /opt/$pkgname/$pkgname "$pkgdir"/usr/bin/$pkgname
45
46 install -d "$pkgdir"/usr/share/applications
47 ln -s /opt/$pkgname/$pkgname.desktop "$pkgdir"/usr/share/applications/$pkgname.desktop
48
49 install -d "$pkgdir"/usr/share/icons/hicolor/256x256/apps
50 ln -s /opt/$pkgname/discord.png "$pkgdir"/usr/share/icons/hicolor/256x256/apps/$pkgname.png
51
52 install -Dm644 LICENSE-$pkgver.html "$pkgdir"/usr/share/licenses/$pkgname/LICENSE.html
53 install -Dm644 OSS-LICENSES-$pkgver.html "$pkgdir"/usr/share/licenses/$pkgname/OSS-LICENSES.html
54}
55

Changes since previous scan

--- PKGBUILD @ 2026-09-17 00:27
+++ PKGBUILD @ 2026-09-17 01:24
@@ -6,7 +6,7 @@
pkgname=discord-canary
_pkgname=DiscordCanary
-pkgver=1.0.1921
+pkgver=1.0.1923
pkgrel=1
pkgdesc="All-in-one voice and text chat for gamers - alpha build"
arch=('x86_64')
@@ -19,7 +19,7 @@
source=("https://dl-canary.discordapp.net/apps/linux/$pkgver/$pkgname-$pkgver.tar.gz"
"LICENSE-$pkgver.html::https://discordapp.com/terms"
"OSS-LICENSES-$pkgver.html::https://discordapp.com/licenses")
-sha512sums=('e5bd5ffd985fb86f7379cf086cf8d3eb9fca3bf3b7d8e8d02227fdfd1e9aa2c854d8f1508600b83bcd4a350a1449441c6d905297df435ed6c7f99c4918081145'
+sha512sums=('707022bc7748c672730ba299ff3198f255acf8b76bd0c8975b78575bed2ca7753b488d4bf6643b73b3ba033dfdc186bc7338d5f40d9448307d1ead01d079b101'
'SKIP'
'SKIP')

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 01:24:19 Medium 1
2026-09-17 00:27:14 Low 2
2026-09-16 23:24:19 Medium 1
2026-09-16 21:23:45 Medium 1
2026-09-16 19:23:36 Medium 1
2026-09-16 13:22:46 Medium 1
2026-09-16 11:22:36 Medium 1
2026-09-16 09:21:46 Medium 1
2026-09-16 03:21:15 Medium 1
2026-09-16 01:20:46 Medium 1
2026-09-16 00:03:17 Low 2
2026-09-15 23:20:44 Medium 1
2026-09-15 21:20:38 Medium 1
2026-09-15 19:20:17 Medium 1
2026-09-15 17:20:16 Medium 1
2026-09-15 11:19:45 Medium 1
2026-09-15 07:19:15 Medium 1
2026-09-15 01:18:20 Medium 1
2026-09-15 00:25:31 Low 2
2026-09-14 23:18:17 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion