dumber-browser-bin

MEDIUM
maintainer bnema 1 votes scanned 2026-10-24 19:41:06.850237
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:29 source=("${pkgname}-${pkgver}.tar.gz::https://git.bnema.dev/dumber/releases/download/v${pkgver}/dumber_linux_x86_64.tar.gz")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: bnema <b at bnema dot dev>
2pkgname=dumber-browser-bin
3pkgver=0.33.3
4pkgrel=1
5pkgdesc="A minimal keyboard-driven browser for tiling WMs"
6arch=('x86_64')
7url="https://git.bnema.dev/dumber"
8license=('MIT')
9depends=('gtk4' 'cef' 'webkitgtk-6.0')
10optdepends=(
11 'gst-plugins-base: Base media codecs'
12 'gst-plugins-good: Additional media codecs'
13 'gst-plugins-bad: Extended media codecs'
14 'gst-plugins-ugly: Patented media codecs'
15 'gst-libav: FFmpeg-based codecs'
16 'gst-plugin-pipewire: PipeWire audio support'
17 'gst-plugin-va: Hardware video decoding (VA-API stateless decoders)'
18 'cef-vaapi-bin: Prebuilt CEF provider with VA-API hardware video decoding support'
19 'cef-vaapi: Source-built CEF provider with VA-API hardware video decoding support'
20 'pipewire: Audio/video routing'
21 'pipewire-pulse: PulseAudio replacement'
22 'mesa: VA-API driver for AMD GPUs'
23 'libva-nvidia-driver: VA-API driver for NVIDIA GPUs'
24 'libva-intel-driver: VA-API driver for older Intel GPUs'
25 'intel-media-driver: VA-API driver for newer Intel GPUs (Broadwell+)'
26)
27provides=('dumber-browser' 'dumber')
28conflicts=('dumber-browser' 'dumber-browser-git')
29source=("${pkgname}-${pkgver}.tar.gz::https://git.bnema.dev/dumber/releases/download/v${pkgver}/dumber_linux_x86_64.tar.gz")
30sha256sums=('4d4b3e2330819bd75ed2e2ed9102e7909d2894a3bf0c80ad02dfe52a62f44551')
31
32package() {
33 cd "${srcdir}/dumber_${pkgver}"
34 install -Dm755 dumber "${pkgdir}/usr/bin/dumber"
35 install -Dm644 dev.bnema.Dumber.desktop "${pkgdir}/usr/share/applications/dev.bnema.Dumber.desktop"
36 install -Dm644 logo-512.png "${pkgdir}/usr/share/icons/hicolor/512x512/apps/dev.bnema.Dumber.png"
37 install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
38}
39

Changes since previous scan

--- PKGBUILD @ 2026-10-18 09:21
+++ PKGBUILD @ 2026-10-24 19:41
@@ -1,10 +1,10 @@
# Maintainer: bnema <b at bnema dot dev>
pkgname=dumber-browser-bin
-pkgver=0.33.2
+pkgver=0.33.3
pkgrel=1
pkgdesc="A minimal keyboard-driven browser for tiling WMs"
arch=('x86_64')
-url="https://github.com/bnema/dumber"
+url="https://git.bnema.dev/dumber"
license=('MIT')
depends=('gtk4' 'cef' 'webkitgtk-6.0')
optdepends=(
@@ -26,8 +26,8 @@
)
provides=('dumber-browser' 'dumber')
conflicts=('dumber-browser' 'dumber-browser-git')
-source=("${pkgname}-${pkgver}.tar.gz::https://github.com/bnema/dumber/releases/download/v${pkgver}/dumber_linux_x86_64.tar.gz")
-sha256sums=('a10c2cf0ef9ba67f8b36469ecbee7fa0d6f385ff938831f9ff00c178769adfb5')
+source=("${pkgname}-${pkgver}.tar.gz::https://git.bnema.dev/dumber/releases/download/v${pkgver}/dumber_linux_x86_64.tar.gz")
+sha256sums=('4d4b3e2330819bd75ed2e2ed9102e7909d2894a3bf0c80ad02dfe52a62f44551')
package() {
cd "${srcdir}/dumber_${pkgver}"

Scan history

Scanned at (UTC)SeverityRules
2026-10-24 19:41:06 Medium 1
2026-10-18 09:21:55 Clean 0
2026-10-16 19:16:12 Clean 0
2026-10-14 19:20:25 Clean 0
2026-09-12 15:12:25 Clean 0
2026-08-18 07:39:23 Clean 0
2026-06-27 12:29:46 Clean 0
2026-06-18 16:11:54 Clean 0

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion