eden-nightly-bin
LOW
maintainer harshnj
4 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The package downloads a prebuilt AppImage from the project's own nightly release infrastructure (nightly.eden-emu.dev), which is plausibly official; while the host is not a standard forge, it is project-specific and the AppImage is from a tagged build, making supply-chain risk low despite the non-whitelisted host.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt AppImage from the project's own nightly release infrastructure (nightly.eden-emu.dev), which is plausibly official; while the host is not a standard forge, it is project-specific and the AppImage is from a tagged build, making supply-chain risk low despite the non-whitelisted host.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:21
source=("${_appimage}::https://nightly.eden-emu.dev/${_upstream_tag}/${_appimage}")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Harsh Narayan Jha <harshnj at proton dot me>
2
# Contributor: mdmrk <mariodavo.20@gmail.com>
3
_pkgname=Eden
4
pkgname=eden-nightly-bin
5
6
_tagstamp=1791929232
7
_buildcommit=a594c8d60e
8
_upstream_tag="v${_tagstamp}.${_buildcommit}"
9
10
pkgver="${_tagstamp}.${_buildcommit}"
11
pkgrel=1
12
pkgdesc="Nightly release of the Eden Nintendo Switch emulator (PGO optimized)"
13
arch=('x86_64')
14
url="https://git.eden-emu.dev/eden-ci/nightly"
15
license=('GPL-3.0-or-later')
16
depends=('hicolor-icon-theme')
17
options=(!strip)
18
provides=('eden')
19
conflicts=('eden')
20
_appimage="Eden-Linux-${_buildcommit}-amd64-clang-pgo.AppImage"
21
source=("${_appimage}::https://nightly.eden-emu.dev/${_upstream_tag}/${_appimage}")
22
sha256sums=('adc332fb191629996f32e37973137c96ba75655c08ad9b3bf616dafed714678c')
23
24
prepare() {
25
chmod +x "${_appimage}"
26
"./${_appimage}" --appimage-extract
27
}
28
29
build() {
30
sed -i \
31
-e "s|^Exec=.*|Exec=/usr/bin/eden|" \
32
-e "s|^Icon=.*|Icon=eden|" \
33
-e "s|^TryExec=.*|TryExec=eden|" \
34
-e "s|^Name=.*|Name=Eden (Nightly)|" \
35
squashfs-root/*.desktop
36
}
37
38
package() {
39
install -Dm755 "${_appimage}" "${pkgdir}/opt/${pkgname}/${pkgname}.AppImage"
40
install -Dm644 squashfs-root/*.desktop \
41
"${pkgdir}/usr/share/applications/eden-nightly.desktop"
42
43
# Install icon (SVG if available, fallback to PNG)
44
if compgen -G "squashfs-root/*.svg" > /dev/null; then
45
install -Dm644 squashfs-root/*.svg \
46
"${pkgdir}/usr/share/icons/hicolor/scalable/apps/eden.svg"
47
elif compgen -G "squashfs-root/*.png" > /dev/null; then
48
install -Dm644 squashfs-root/*.png \
49
"${pkgdir}/usr/share/pixmaps/eden.png"
50
fi
51
52
install -dm755 "${pkgdir}/usr/bin"
53
ln -s "/opt/${pkgname}/${pkgname}.AppImage" "${pkgdir}/usr/bin/eden"
54
55
# Install MIME types
56
cat > eden-nightly.xml << EOF
57
<?xml version="1.0" encoding="UTF-8"?>
58
<mime-info xmlns="http://www.freedesktop.org/standards/shared-mime-info">
59
<mime-type type="application/x-nx-nro">
60
<glob pattern="*.nro"/>
61
</mime-type>
62
<mime-type type="application/x-nx-nso">
63
<glob pattern="*.nso"/>
64
</mime-type>
65
<mime-type type="application/x-nx-nsp">
66
<glob pattern="*.nsp"/>
67
</mime-type>
68
<mime-type type="application/x-nx-xci">
69
<glob pattern="*.xci"/>
70
</mime-type>
71
</mime-info>
72
EOF
73
install -Dm644 eden-nightly.xml "${pkgdir}/usr/share/mime/packages/eden-nightly.xml"
74
}
75
76
post_install() {
77
update-mime-database /usr/share/mime &> /dev/null || true
78
update-desktop-database -q || true
79
}
80
81
post_upgrade() {
82
post_install
83
}
84
85
post_remove() {
86
update-mime-database /usr/share/mime &> /dev/null || true
87
update-desktop-database -q || true
88
}
89
Changes since previous scan
--- PKGBUILD @ 2026-10-30 00:29+++ PKGBUILD @ 2026-11-01 00:21@@ -3,8 +3,8 @@ _pkgname=Eden pkgname=eden-nightly-bin -_tagstamp=1791849564-_buildcommit=4dc69c06f7+_tagstamp=1791929232+_buildcommit=a594c8d60e _upstream_tag="v${_tagstamp}.${_buildcommit}" pkgver="${_tagstamp}.${_buildcommit}"@@ -19,7 +19,7 @@ conflicts=('eden') _appimage="Eden-Linux-${_buildcommit}-amd64-clang-pgo.AppImage" source=("${_appimage}::https://nightly.eden-emu.dev/${_upstream_tag}/${_appimage}")-sha256sums=('e1f52d0f5e4edf688329fdbb906598399e9fde8237709b9e9a2b4627a3ee13de')+sha256sums=('adc332fb191629996f32e37973137c96ba75655c08ad9b3bf616dafed714678c') prepare() { chmod +x "${_appimage}"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 15:56:05 | Medium | 1 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 15:20:15 | Medium | 1 |