eden-preview-bin

maintainer ZachAR3 · 4 votes · scanned 2026-08-03 00:08:14.047287

MEDIUM

Why flagged The package downloads a prebuilt AppImage from a non-standard host (git.eden-emu.dev), which is not on the standard whitelist; while the host appears project-related, the AppImage is an unverifiable executable that could be tampered with if the release infrastructure were compromised.

Triggered rules

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source_x86_64=("${_appimage}::https://git.eden-emu.dev/eden-emu/eden/releases/download/${_upstreamver}/${_pkgname}-Linux-${_upstreamver}-amd64-gcc-standard.AppImage")

MEDIUM AI review llm_review

An AI model (qwen/qwen3-235b-a22b-07-25) reviewed this and agrees it is MEDIUM (confidence 90%): The package downloads a prebuilt AppImage from a non-standard host (git.eden-emu.dev), which is not on the standard whitelist; while the host appears project-related, the AppImage is an unverifiable executable that could be tampered with if the release infrastructure were compromised.

PKGBUILD

1 offending line(s) highlighted

      1# Based off of: https://daveparrish.net/posts/2019-11-16-Better-AppImage-PKGBUILD-template.html
    
      2# Maintainer: ZachAR3 <Zach4R3@gmail.com>
    
      3
    
      4_pkgname=Eden
    
      5pkgname="eden-preview-bin"
    
      6pkgver=0.2.1
    
      7_upstreamver=v0.2.1 # private var used for download URL since "-" isn't valid in pkgver
    
      8pkgrel=1
    
      9pkgdesc="The Eden Nintendo Switch emulator AppImage for preview builds such as release candiates using the amd64-gcc-standard version."
    
      10arch=('x86_64')
    
      11url="https://git.eden-emu.dev/eden-emu/eden"
    
      12license=('GPL3')
    
      13depends=('zlib' 'hicolor-icon-theme')
    
      14options=(!strip)
    
      15_appimage="${_pkgname}-Linux-${pkgver}-amd64.AppImage"
    
      16source_x86_64=("${_appimage}::https://git.eden-emu.dev/eden-emu/eden/releases/download/${_upstreamver}/${_pkgname}-Linux-${_upstreamver}-amd64-gcc-standard.AppImage")
    
      17sha256sums_x86_64=("2fae658397daf13c118082a3eb65d61a6519967b5e22e6667756baecf6000c5a")
    
      18
    
      19prepare() {
    
      20    chmod +x "${_appimage}"
    
      21    ./"${_appimage}" --appimage-extract
    
      22}
    
      23
    
      24# Fix .desktop file executable and icon
    
      25build() {
    
      26  sed -i \
    
      27    -e "s|^Exec=.*|Exec=/usr/bin/eden-preview|" \
    
      28    -e "s|^Icon=.*|Icon=eden-preview|" \
    
      29    -e "s|^TryExec=.*|TryExec=eden-preview|" \
    
      30    -e "s|^Name=.*|Name=Eden Preview|" \
    
      31    "squashfs-root/dev.eden_emu.eden.desktop"
    
      32}
    
      33
    
      34package() {
    
      35    # Create the MIME type XML file (for file associations)
    
      36    cat > eden-preview.xml << EOF
    
      37<?xml version="1.0" encoding="UTF-8"?>
    
      38<mime-info xmlns="http://www.freedesktop.org/standards/shared-mime-info">
    
      39  <mime-type type="application/x-nx-nro">
    
      40    <comment>Nintendo Switch NRO Executable</comment>
    
      41    <glob pattern="*.nro"/>
    
      42  </mime-type>
    
      43  <mime-type type="application/x-nx-nso">
    
      44    <comment>Nintendo Switch NSO Executable</comment>
    
      45    <glob pattern="*.nso"/>
    
      46  </mime-type>
    
      47  <mime-type type="application/x-nx-nsp">
    
      48    <comment>Nintendo Switch NSP Package</comment>
    
      49    <glob pattern="*.nsp"/>
    
      50  </mime-type>
    
      51  <mime-type type="application/x-nx-xci">
    
      52    <comment>Nintendo Switch XCI Cartridge Image</comment>
    
      53    <glob pattern="*.xci"/>
    
      54  </mime-type>
    
      55</mime-info>
    
      56EOF
    
      57
    
      58  install -Dm644 eden-preview.xml "${pkgdir}/usr/share/mime/packages/eden-preview.xml"
    
      59
    
      60  install -Dm755 "${_appimage}" "${pkgdir}/opt/${pkgname}/${pkgname}.AppImage"
    
      61  install -Dm644 "squashfs-root/dev.eden_emu.eden.desktop" \
    
      62    "${pkgdir}/usr/share/applications/eden-preview.desktop"
    
      63
    
      64  # copy icon
    
      65  install -Dm644 "squashfs-root/dev.eden_emu.eden.svg" \
    
      66    "${pkgdir}/usr/share/icons/hicolor/scalable/apps/eden-preview.svg"
    
      67
    
      68  install -dm755 "${pkgdir}/usr/bin"
    
      69
    
      70  ln -s "/opt/${pkgname}/${pkgname}.AppImage" "${pkgdir}/usr/bin/eden-preview"
    
      71}
    
      72
    
      73# Update mime database for file associations
    
      74post_install() {
    
      75  update-mime-database /usr/share/mime || true
    
      76}
    
      77
    
      78

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	MEDIUM	2
2026-08-02 00:16:08	MEDIUM	2
2026-08-01 00:11:18	MEDIUM	2
2026-07-31 00:14:10	MEDIUM	2
2026-07-30 00:17:23	MEDIUM	2
2026-07-29 00:25:53	MEDIUM	2
2026-07-28 00:07:28	MEDIUM	2
2026-07-27 00:24:32	MEDIUM	2
2026-07-26 00:07:32	MEDIUM	2
2026-07-25 00:13:44	MEDIUM	2
2026-07-24 00:02:28	MEDIUM	2
2026-07-23 00:14:47	MEDIUM	2
2026-07-22 00:29:32	MEDIUM	2
2026-07-21 00:24:15	MEDIUM	2
2026-07-20 00:19:49	MEDIUM	2
2026-07-19 00:17:08	MEDIUM	2
2026-07-18 00:14:48	MEDIUM	2
2026-07-17 00:06:16	MEDIUM	2
2026-07-16 00:05:41	MEDIUM	2
2026-07-15 00:09:25	MEDIUM	2