ecosia-browser-bin

LOW

maintainer teoulas 0 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads a prebuilt Snap binary from the official Snapcraft API, which is a legitimate source for Ecosia Browser; the non-standard host is part of Snapcraft's infrastructure, not a personal or untrusted file host, and the binary is unpacked and installed in a transparent manner without obfuscation or remote code execution.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt Snap binary from the official Snapcraft API, which is a legitimate source for Ecosia Browser; the non-standard host is part of Snapcraft's infrastructure, not a personal or untrusted file host, and the binary is unpacked and installed in a transparent manner without obfuscation or remote code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:56 "${pkgname}-${pkgver}-${_snap_revision}.snap::https://api.snapcraft.io/api/v1/snaps/download/${_snap_id}_${_snap_revision}.snap"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Theo <teoulas@duck.com>
    
      2
    
      3pkgname=ecosia-browser-bin
    
      4pkgver=152.0.7977.8
    
      5pkgrel=1
    
      6pkgdesc='Ecosia Browser (prebuilt binary)'
    
      7arch=('x86_64')
    
      8url='https://www.ecosia.org/browser'
    
      9license=('LicenseRef-Proprietary')
    
      10depends=(
    
      11  'alsa-lib'
    
      12  'at-spi2-core'
    
      13  'cairo'
    
      14  'dbus'
    
      15  'expat'
    
      16  'glib2'
    
      17  'glibc'
    
      18  'gtk3'
    
      19  'hicolor-icon-theme'
    
      20  'libcups'
    
      21  'libgcc'
    
      22  'libx11'
    
      23  'libxcb'
    
      24  'libxcomposite'
    
      25  'libxdamage'
    
      26  'libxext'
    
      27  'libxfixes'
    
      28  'libxkbcommon'
    
      29  'libxrandr'
    
      30  'mesa'
    
      31  'nspr'
    
      32  'nss'
    
      33  'pango'
    
      34  'shared-mime-info'
    
      35  'systemd-libs'
    
      36  'ttf-font'
    
      37  'xdg-utils'
    
      38)
    
      39optdepends=(
    
      40  'gtk4: GTK 4 integration'
    
      41  'kdialog: native file dialogs under Plasma'
    
      42  'org.freedesktop.secrets: secure password storage'
    
      43  'pipewire: WebRTC desktop sharing under Wayland'
    
      44  'qt5-base: Qt 5 integration'
    
      45  'qt6-base: Qt 6 integration'
    
      46  'upower: Battery Status API support'
    
      47)
    
      48makedepends=('squashfs-tools')
    
      49provides=("ecosia-browser=${pkgver}")
    
      50conflicts=('ecosia-browser')
    
      51options=('!strip' '!debug')
    
      52
    
      53_snap_id='2MakkUunZD1vJLykl5QmmVDQAZdE84wY'
    
      54_snap_revision=6
    
      55source_x86_64=(
    
      56  "${pkgname}-${pkgver}-${_snap_revision}.snap::https://api.snapcraft.io/api/v1/snaps/download/${_snap_id}_${_snap_revision}.snap"
    
      57)
    
      58source=('ecosiabrowser.sh' 'LICENSE')
    
      59noextract=("${pkgname}-${pkgver}-${_snap_revision}.snap")
    
      60sha256sums=('43dd05c17af7504ed0267b8909e44e3aa1a03b1819415ab1559c143fc8a36efb'
    
      61            'b744f25f86ee55eb6d3ec5ff5d6c5a88ad55392a49ecf69cee9c669124fbf1f2')
    
      62sha256sums_x86_64=('f6951358f1afa48e01dcc97761aaf3fc937bc9cc417e8661dd92c1bebca7d62d')
    
      63
    
      64prepare() {
    
      65  rm -rf snap-root
    
      66  unsquashfs -q -d snap-root \
    
      67    "${pkgname}-${pkgver}-${_snap_revision}.snap" \
    
      68    opt/ecosia \
    
      69    usr/share/applications/org.ecosia.Browser.desktop \
    
      70    app/share/icons/hicolor/scalable/apps/org.ecosia.Browser.svg \
    
      71    app/share/metainfo/org.ecosia.Browser.metainfo.xml
    
      72
    
      73  # The Snap desktop file points at the icon's path inside its confinement.
    
      74  sed -i 's|^Icon=/app/share/icons/hicolor/scalable/apps/org\.ecosia\.Browser\.svg$|Icon=org.ecosia.Browser|' \
    
      75    snap-root/usr/share/applications/org.ecosia.Browser.desktop
    
      76}
    
      77
    
      78package() {
    
      79  install -d "${pkgdir}/opt"
    
      80  cp -a snap-root/opt/ecosia "${pkgdir}/opt/ecosia"
    
      81
    
      82  install -Dm755 ecosiabrowser.sh "${pkgdir}/usr/bin/ecosiabrowser"
    
      83  install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      84  install -Dm644 snap-root/usr/share/applications/org.ecosia.Browser.desktop \
    
      85    "${pkgdir}/usr/share/applications/org.ecosia.Browser.desktop"
    
      86  install -Dm644 snap-root/app/share/icons/hicolor/scalable/apps/org.ecosia.Browser.svg \
    
      87    "${pkgdir}/usr/share/icons/hicolor/scalable/apps/org.ecosia.Browser.svg"
    
      88  install -Dm644 snap-root/app/share/metainfo/org.ecosia.Browser.metainfo.xml \
    
      89    "${pkgdir}/usr/share/metainfo/org.ecosia.Browser.metainfo.xml"
    
      90}
    
      91

Changes since previous scan

--- PKGBUILD @ 2026-09-04 00:03
+++ PKGBUILD @ 2026-09-17 00:27
@@ -1,7 +1,7 @@
 # Maintainer: Theo <teoulas@duck.com>
 
 pkgname=ecosia-browser-bin
-pkgver=150.1.7871.10
+pkgver=152.0.7977.8
 pkgrel=1
 pkgdesc='Ecosia Browser (prebuilt binary)'
 arch=('x86_64')
@@ -18,7 +18,6 @@
   'gtk3'
   'hicolor-icon-theme'
   'libcups'
-  'libdrm'
   'libgcc'
   'libx11'
   'libxcb'
@@ -28,7 +27,6 @@
   'libxfixes'
   'libxkbcommon'
   'libxrandr'
-  'libxss'
   'mesa'
   'nspr'
   'nss'
@@ -53,14 +51,15 @@
 options=('!strip' '!debug')
 
 _snap_id='2MakkUunZD1vJLykl5QmmVDQAZdE84wY'
-_snap_revision=3
+_snap_revision=6
 source_x86_64=(
   "${pkgname}-${pkgver}-${_snap_revision}.snap::https://api.snapcraft.io/api/v1/snaps/download/${_snap_id}_${_snap_revision}.snap"
 )
-source=('ecosiabrowser.sh')
+source=('ecosiabrowser.sh' 'LICENSE')
 noextract=("${pkgname}-${pkgver}-${_snap_revision}.snap")
-sha256sums=('43dd05c17af7504ed0267b8909e44e3aa1a03b1819415ab1559c143fc8a36efb')
-sha256sums_x86_64=('81385d48b89fb869e9ebb0ad8d46a76c6860395a73e60804611cd20b748c4b75')
+sha256sums=('43dd05c17af7504ed0267b8909e44e3aa1a03b1819415ab1559c143fc8a36efb'
+            'b744f25f86ee55eb6d3ec5ff5d6c5a88ad55392a49ecf69cee9c669124fbf1f2')
+sha256sums_x86_64=('f6951358f1afa48e01dcc97761aaf3fc937bc9cc417e8661dd92c1bebca7d62d')
 
 prepare() {
   rm -rf snap-root
@@ -81,6 +80,7 @@
   cp -a snap-root/opt/ecosia "${pkgdir}/opt/ecosia"
 
   install -Dm755 ecosiabrowser.sh "${pkgdir}/usr/bin/ecosiabrowser"
+  install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
   install -Dm644 snap-root/usr/share/applications/org.ecosia.Browser.desktop \
     "${pkgdir}/usr/share/applications/org.ecosia.Browser.desktop"
   install -Dm644 snap-root/app/share/icons/hicolor/scalable/apps/org.ecosia.Browser.svg \

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 07:57:01	Medium	1
2026-09-04 00:03:13	Medium	2
2026-09-03 00:15:47	Medium	2
2026-09-02 00:02:31	Medium	2
2026-09-01 00:11:19	Medium	2
2026-08-31 00:19:57	Medium	2
2026-08-30 00:04:14	Medium	2