eden-nightly-bin
maintainer harshnj
· 4 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads a prebuilt AppImage from the project's own nightly release infrastructure (nightly.eden-emu.dev), which is plausibly official; while the host is not a standard forge, it is project-specific and the AppImage is a standard delivery format, so the supply-chain risk is low despite the non-whitelisted host.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt AppImage from the project's own nightly release infrastructure (nightly.eden-emu.dev), which is plausibly official; while the host is not a standard forge, it is project-specific and the AppImage is a standard delivery format, so the supply-chain risk is low despite the non-whitelisted host.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:21
source=("${_appimage}::https://nightly.eden-emu.dev/${_upstream_tag}/${_appimage}")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Harsh Narayan Jha <harshnj at proton dot me>
2
# Contributor: mdmrk <mariodavo.20@gmail.com>
3
_pkgname=Eden
4
pkgname=eden-nightly-bin
5
6
_tagstamp=1785005728
7
_buildcommit=0133caf702
8
_upstream_tag="v${_tagstamp}.${_buildcommit}"
9
10
pkgver="${_tagstamp}.${_buildcommit}"
11
pkgrel=1
12
pkgdesc="Nightly release of the Eden Nintendo Switch emulator (PGO optimized)"
13
arch=('x86_64')
14
url="https://git.eden-emu.dev/eden-ci/nightly"
15
license=('GPL-3.0-or-later')
16
depends=('hicolor-icon-theme')
17
options=(!strip)
18
provides=('eden')
19
conflicts=('eden')
20
_appimage="Eden-Linux-${_buildcommit}-amd64-clang-pgo.AppImage"
21
source=("${_appimage}::https://nightly.eden-emu.dev/${_upstream_tag}/${_appimage}")
22
sha256sums=('8d44340bd2d74b2d0adafb5902aab2cbc65728fc58c64be61b315a145cf3f769')
23
24
prepare() {
25
chmod +x "${_appimage}"
26
"./${_appimage}" --appimage-extract
27
}
28
29
build() {
30
sed -i \
31
-e "s|^Exec=.*|Exec=/usr/bin/eden|" \
32
-e "s|^Icon=.*|Icon=eden|" \
33
-e "s|^TryExec=.*|TryExec=eden|" \
34
-e "s|^Name=.*|Name=Eden (Nightly)|" \
35
squashfs-root/*.desktop
36
}
37
38
package() {
39
install -Dm755 "${_appimage}" "${pkgdir}/opt/${pkgname}/${pkgname}.AppImage"
40
install -Dm644 squashfs-root/*.desktop \
41
"${pkgdir}/usr/share/applications/eden-nightly.desktop"
42
43
# Install icon (SVG if available, fallback to PNG)
44
if compgen -G "squashfs-root/*.svg" > /dev/null; then
45
install -Dm644 squashfs-root/*.svg \
46
"${pkgdir}/usr/share/icons/hicolor/scalable/apps/eden.svg"
47
elif compgen -G "squashfs-root/*.png" > /dev/null; then
48
install -Dm644 squashfs-root/*.png \
49
"${pkgdir}/usr/share/pixmaps/eden.png"
50
fi
51
52
install -dm755 "${pkgdir}/usr/bin"
53
ln -s "/opt/${pkgname}/${pkgname}.AppImage" "${pkgdir}/usr/bin/eden"
54
55
# Install MIME types
56
cat > eden-nightly.xml << EOF
57
<?xml version="1.0" encoding="UTF-8"?>
58
<mime-info xmlns="http://www.freedesktop.org/standards/shared-mime-info">
59
<mime-type type="application/x-nx-nro">
60
<glob pattern="*.nro"/>
61
</mime-type>
62
<mime-type type="application/x-nx-nso">
63
<glob pattern="*.nso"/>
64
</mime-type>
65
<mime-type type="application/x-nx-nsp">
66
<glob pattern="*.nsp"/>
67
</mime-type>
68
<mime-type type="application/x-nx-xci">
69
<glob pattern="*.xci"/>
70
</mime-type>
71
</mime-info>
72
EOF
73
install -Dm644 eden-nightly.xml "${pkgdir}/usr/share/mime/packages/eden-nightly.xml"
74
}
75
76
post_install() {
77
update-mime-database /usr/share/mime &> /dev/null || true
78
update-desktop-database -q || true
79
}
80
81
post_upgrade() {
82
post_install
83
}
84
85
post_remove() {
86
update-mime-database /usr/share/mime &> /dev/null || true
87
update-desktop-database -q || true
88
}
89
Changes since previous scan
--- PKGBUILD @ 2026-07-27 00:24+++ PKGBUILD @ 2026-08-03 00:08@@ -3,8 +3,8 @@ _pkgname=Eden pkgname=eden-nightly-bin -_tagstamp=1784920450-_buildcommit=a90ba7f6ac+_tagstamp=1785005728+_buildcommit=0133caf702 _upstream_tag="v${_tagstamp}.${_buildcommit}" pkgver="${_tagstamp}.${_buildcommit}"@@ -19,7 +19,7 @@ conflicts=('eden') _appimage="Eden-Linux-${_buildcommit}-amd64-clang-pgo.AppImage" source=("${_appimage}::https://nightly.eden-emu.dev/${_upstream_tag}/${_appimage}")-sha256sums=('592a07e1b1e910b43d6ea37fb67d128df20e676556d2e10d9a4c5fe3209954b2')+sha256sums=('8d44340bd2d74b2d0adafb5902aab2cbc65728fc58c64be61b315a145cf3f769') prepare() { chmod +x "${_appimage}"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 05:34:42 | MEDIUM | 1 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 07:31:44 | MEDIUM | 1 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 15:29:50 | MEDIUM | 1 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 07:13:42 | MEDIUM | 1 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |