eden-preview-bin
MEDIUM
maintainer ZachAR3
4 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a prebuilt AppImage from a non-standard host (git.eden-emu.dev), which is not on the standard whitelist; while the host appears project-related, the AppImage is an unverifiable executable that could be tampered with if the release infrastructure were compromised.
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:16
source_x86_64=("${_appimage}::https://git.eden-emu.dev/eden-emu/eden/releases/download/${_upstreamver}/${_pkgname}-Linux-${_upstreamver}-amd64-gcc-standard.AppImage")
Medium
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-07-25) reviewed this and agrees it is MEDIUM (confidence 90%): The package downloads a prebuilt AppImage from a non-standard host (git.eden-emu.dev), which is not on the standard whitelist; while the host appears project-related, the AppImage is an unverifiable executable that could be tampered with if the release infrastructure were compromised.
PKGBUILD
1 offending line(s) highlighted
1
# Based off of: https://daveparrish.net/posts/2019-11-16-Better-AppImage-PKGBUILD-template.html
2
# Maintainer: ZachAR3 <Zach4R3@gmail.com>
3
4
_pkgname=Eden
5
pkgname="eden-preview-bin"
6
pkgver=0.2.1
7
_upstreamver=v0.2.1 # private var used for download URL since "-" isn't valid in pkgver
8
pkgrel=1
9
pkgdesc="The Eden Nintendo Switch emulator AppImage for preview builds such as release candiates using the amd64-gcc-standard version."
10
arch=('x86_64')
11
url="https://git.eden-emu.dev/eden-emu/eden"
12
license=('GPL3')
13
depends=('zlib' 'hicolor-icon-theme')
14
options=(!strip)
15
_appimage="${_pkgname}-Linux-${pkgver}-amd64.AppImage"
16
source_x86_64=("${_appimage}::https://git.eden-emu.dev/eden-emu/eden/releases/download/${_upstreamver}/${_pkgname}-Linux-${_upstreamver}-amd64-gcc-standard.AppImage")
17
sha256sums_x86_64=("2fae658397daf13c118082a3eb65d61a6519967b5e22e6667756baecf6000c5a")
18
19
prepare() {
20
chmod +x "${_appimage}"
21
./"${_appimage}" --appimage-extract
22
}
23
24
# Fix .desktop file executable and icon
25
build() {
26
sed -i \
27
-e "s|^Exec=.*|Exec=/usr/bin/eden-preview|" \
28
-e "s|^Icon=.*|Icon=eden-preview|" \
29
-e "s|^TryExec=.*|TryExec=eden-preview|" \
30
-e "s|^Name=.*|Name=Eden Preview|" \
31
"squashfs-root/dev.eden_emu.eden.desktop"
32
}
33
34
package() {
35
# Create the MIME type XML file (for file associations)
36
cat > eden-preview.xml << EOF
37
<?xml version="1.0" encoding="UTF-8"?>
38
<mime-info xmlns="http://www.freedesktop.org/standards/shared-mime-info">
39
<mime-type type="application/x-nx-nro">
40
<comment>Nintendo Switch NRO Executable</comment>
41
<glob pattern="*.nro"/>
42
</mime-type>
43
<mime-type type="application/x-nx-nso">
44
<comment>Nintendo Switch NSO Executable</comment>
45
<glob pattern="*.nso"/>
46
</mime-type>
47
<mime-type type="application/x-nx-nsp">
48
<comment>Nintendo Switch NSP Package</comment>
49
<glob pattern="*.nsp"/>
50
</mime-type>
51
<mime-type type="application/x-nx-xci">
52
<comment>Nintendo Switch XCI Cartridge Image</comment>
53
<glob pattern="*.xci"/>
54
</mime-type>
55
</mime-info>
56
EOF
57
58
install -Dm644 eden-preview.xml "${pkgdir}/usr/share/mime/packages/eden-preview.xml"
59
60
install -Dm755 "${_appimage}" "${pkgdir}/opt/${pkgname}/${pkgname}.AppImage"
61
install -Dm644 "squashfs-root/dev.eden_emu.eden.desktop" \
62
"${pkgdir}/usr/share/applications/eden-preview.desktop"
63
64
# copy icon
65
install -Dm644 "squashfs-root/dev.eden_emu.eden.svg" \
66
"${pkgdir}/usr/share/icons/hicolor/scalable/apps/eden-preview.svg"
67
68
install -dm755 "${pkgdir}/usr/bin"
69
70
ln -s "/opt/${pkgname}/${pkgname}.AppImage" "${pkgdir}/usr/bin/eden-preview"
71
}
72
73
# Update mime database for file associations
74
post_install() {
75
update-mime-database /usr/share/mime || true
76
}
77
78
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Medium | 2 |
| 2026-09-16 00:03:17 | Medium | 2 |
| 2026-09-15 00:25:31 | Medium | 2 |
| 2026-09-14 00:27:57 | Medium | 2 |
| 2026-09-13 00:19:54 | Medium | 2 |
| 2026-09-12 00:25:17 | Medium | 2 |
| 2026-09-11 00:19:22 | Medium | 2 |
| 2026-09-10 00:22:44 | Medium | 2 |
| 2026-09-09 00:04:09 | Medium | 2 |
| 2026-09-08 00:18:08 | Medium | 2 |
| 2026-09-07 00:30:15 | Medium | 2 |
| 2026-09-06 00:17:06 | Medium | 2 |
| 2026-09-05 00:16:27 | Medium | 2 |
| 2026-09-04 00:03:13 | Medium | 2 |
| 2026-09-03 00:15:47 | Medium | 2 |
| 2026-09-02 00:02:31 | Medium | 2 |
| 2026-09-01 00:11:19 | Medium | 2 |
| 2026-08-31 00:19:57 | Medium | 2 |
| 2026-08-30 00:04:14 | Medium | 2 |
| 2026-08-29 00:29:17 | Medium | 2 |