eden-nightly-bin
LOW
maintainer harshnj
4 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a prebuilt AppImage from the project's own nightly release infrastructure (nightly.eden-emu.dev), which is plausibly official; while the host is not a standard forge, it is project-specific and the AppImage is expected for nightly builds, making this a normal distribution method rather than a supply-chain risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt AppImage from the project's own nightly release infrastructure (nightly.eden-emu.dev), which is plausibly official; while the host is not a standard forge, it is project-specific and the AppImage is expected for nightly builds, making this a normal distribution method rather than a supply-chain risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:21
source=("${_appimage}::https://nightly.eden-emu.dev/${_upstream_tag}/${_appimage}")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Harsh Narayan Jha <harshnj at proton dot me>
2
# Contributor: mdmrk <mariodavo.20@gmail.com>
3
_pkgname=Eden
4
pkgname=eden-nightly-bin
5
6
_tagstamp=1789420436
7
_buildcommit=ee73920d28
8
_upstream_tag="v${_tagstamp}.${_buildcommit}"
9
10
pkgver="${_tagstamp}.${_buildcommit}"
11
pkgrel=1
12
pkgdesc="Nightly release of the Eden Nintendo Switch emulator (PGO optimized)"
13
arch=('x86_64')
14
url="https://git.eden-emu.dev/eden-ci/nightly"
15
license=('GPL-3.0-or-later')
16
depends=('hicolor-icon-theme')
17
options=(!strip)
18
provides=('eden')
19
conflicts=('eden')
20
_appimage="Eden-Linux-${_buildcommit}-amd64-clang-pgo.AppImage"
21
source=("${_appimage}::https://nightly.eden-emu.dev/${_upstream_tag}/${_appimage}")
22
sha256sums=('07da8205a79a4cb3975d9f12628e4011fe8ada389374527fa9ae149c05f5ea01')
23
24
prepare() {
25
chmod +x "${_appimage}"
26
"./${_appimage}" --appimage-extract
27
}
28
29
build() {
30
sed -i \
31
-e "s|^Exec=.*|Exec=/usr/bin/eden|" \
32
-e "s|^Icon=.*|Icon=eden|" \
33
-e "s|^TryExec=.*|TryExec=eden|" \
34
-e "s|^Name=.*|Name=Eden (Nightly)|" \
35
squashfs-root/*.desktop
36
}
37
38
package() {
39
install -Dm755 "${_appimage}" "${pkgdir}/opt/${pkgname}/${pkgname}.AppImage"
40
install -Dm644 squashfs-root/*.desktop \
41
"${pkgdir}/usr/share/applications/eden-nightly.desktop"
42
43
# Install icon (SVG if available, fallback to PNG)
44
if compgen -G "squashfs-root/*.svg" > /dev/null; then
45
install -Dm644 squashfs-root/*.svg \
46
"${pkgdir}/usr/share/icons/hicolor/scalable/apps/eden.svg"
47
elif compgen -G "squashfs-root/*.png" > /dev/null; then
48
install -Dm644 squashfs-root/*.png \
49
"${pkgdir}/usr/share/pixmaps/eden.png"
50
fi
51
52
install -dm755 "${pkgdir}/usr/bin"
53
ln -s "/opt/${pkgname}/${pkgname}.AppImage" "${pkgdir}/usr/bin/eden"
54
55
# Install MIME types
56
cat > eden-nightly.xml << EOF
57
<?xml version="1.0" encoding="UTF-8"?>
58
<mime-info xmlns="http://www.freedesktop.org/standards/shared-mime-info">
59
<mime-type type="application/x-nx-nro">
60
<glob pattern="*.nro"/>
61
</mime-type>
62
<mime-type type="application/x-nx-nso">
63
<glob pattern="*.nso"/>
64
</mime-type>
65
<mime-type type="application/x-nx-nsp">
66
<glob pattern="*.nsp"/>
67
</mime-type>
68
<mime-type type="application/x-nx-xci">
69
<glob pattern="*.xci"/>
70
</mime-type>
71
</mime-info>
72
EOF
73
install -Dm644 eden-nightly.xml "${pkgdir}/usr/share/mime/packages/eden-nightly.xml"
74
}
75
76
post_install() {
77
update-mime-database /usr/share/mime &> /dev/null || true
78
update-desktop-database -q || true
79
}
80
81
post_upgrade() {
82
post_install
83
}
84
85
post_remove() {
86
update-mime-database /usr/share/mime &> /dev/null || true
87
update-desktop-database -q || true
88
}
89
Changes since previous scan
--- PKGBUILD @ 2026-09-15 00:25+++ PKGBUILD @ 2026-09-17 00:27@@ -3,8 +3,8 @@ _pkgname=Eden pkgname=eden-nightly-bin -_tagstamp=1789071363-_buildcommit=ed566919f4+_tagstamp=1789420436+_buildcommit=ee73920d28 _upstream_tag="v${_tagstamp}.${_buildcommit}" pkgver="${_tagstamp}.${_buildcommit}"@@ -19,7 +19,7 @@ conflicts=('eden') _appimage="Eden-Linux-${_buildcommit}-amd64-clang-pgo.AppImage" source=("${_appimage}::https://nightly.eden-emu.dev/${_upstream_tag}/${_appimage}")-sha256sums=('8ca96384563ae927eea96f4678205ae3fcdd8e60209af7f00b4201e2bddcd5c6')+sha256sums=('07da8205a79a4cb3975d9f12628e4011fe8ada389374527fa9ae149c05f5ea01') prepare() { chmod +x "${_appimage}"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 11:19:45 | Medium | 1 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 11:16:56 | Medium | 1 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 05:22:12 | Medium | 1 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 15:19:51 | Medium | 1 |
| 2026-09-09 00:04:09 | Medium | 2 |
| 2026-09-08 00:18:08 | Medium | 2 |
| 2026-09-07 05:13:32 | Medium | 2 |
| 2026-09-07 00:30:15 | Medium | 2 |
| 2026-09-06 19:12:22 | Medium | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |