element-desktop-nightly-bin
LOW
maintainer davebloggt
13 votes
scanned 2026-10-02 00:00:32.890515
Why flagged
The package downloads prebuilt .deb files from the official Element project's domain (packages.element.io), which is a legitimate source; despite the non-whitelisted host, this is a standard practice for AUR binary packages and the checksums are verified, reducing risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt .deb files from the official Element project's domain (packages.element.io), which is a legitimate source; despite the non-whitelisted host, this is a standard practice for AUR binary packages and the checksums are verified, reducing risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:13
source_x86_64=("https://packages.element.io/debian/pool/main/e/element-nightly/element-nightly_${pkgver}_amd64.deb")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: David Mehren <david.mehren@udo.edu>
2
3
pkgname=element-desktop-nightly-bin
4
pkgver=2026092501
5
pkgrel=1
6
pkgdesc="All-in-one secure chat app for teams, friends and organisations (nightly .deb build)."
7
arch=('x86_64' 'aarch64')
8
url="https://element.io"
9
license=('Apache')
10
depends=('sqlcipher')
11
source=('element-desktop-nightly.sh')
12
sha256sums=('eec30e5b0e549f7fa9c9c66fd3edb60bc8e0d9d0a77b79d8659cc06deced588d')
13
source_x86_64=("https://packages.element.io/debian/pool/main/e/element-nightly/element-nightly_${pkgver}_amd64.deb")
14
sha256sums_x86_64=('741697d31ca0025532012d43e95021dd612325f91f4f79ff043cec4f99b05801')
15
source_aarch64=("https://packages.element.io/debian/pool/main/e/element-nightly/element-nightly_${pkgver}_arm64.deb")
16
sha256sums_aarch64=('cbe39076eafeb5c0ae504164dcd4288798d17ccf8ebf9f976e1f6deb687dc951')
17
18
package() {
19
echo "Extracting the data.tar.xz..."
20
bsdtar -xf data.tar.xz -C "$pkgdir/"
21
install -Dm755 "${srcdir}"/element-desktop-nightly.sh "${pkgdir}"/usr/bin/element-desktop-nightly
22
sed -i 's|^Exec=.*|Exec=/usr/bin/element-desktop-nightly %U|' "${pkgdir}"/usr/share/applications/element-desktop-nightly.desktop
23
}
24
Changes since previous scan
--- PKGBUILD @ 2026-09-26 00:12+++ PKGBUILD @ 2026-10-02 00:00@@ -1,7 +1,7 @@ # Maintainer: David Mehren <david.mehren@udo.edu> pkgname=element-desktop-nightly-bin-pkgver=2026092401+pkgver=2026092501 pkgrel=1 pkgdesc="All-in-one secure chat app for teams, friends and organisations (nightly .deb build)." arch=('x86_64' 'aarch64')@@ -11,9 +11,9 @@ source=('element-desktop-nightly.sh') sha256sums=('eec30e5b0e549f7fa9c9c66fd3edb60bc8e0d9d0a77b79d8659cc06deced588d') source_x86_64=("https://packages.element.io/debian/pool/main/e/element-nightly/element-nightly_${pkgver}_amd64.deb")-sha256sums_x86_64=('90424f668e18856baa13085781093808abb22abe0e1eebcc6eea25c05c48bcd0')+sha256sums_x86_64=('741697d31ca0025532012d43e95021dd612325f91f4f79ff043cec4f99b05801') source_aarch64=("https://packages.element.io/debian/pool/main/e/element-nightly/element-nightly_${pkgver}_arm64.deb")-sha256sums_aarch64=('6cee16368b0eda6f132e8b36b5dffbda1b1ccec88bb42427c03c00d01b82d854')+sha256sums_aarch64=('cbe39076eafeb5c0ae504164dcd4288798d17ccf8ebf9f976e1f6deb687dc951') package() { echo "Extracting the data.tar.xz..."Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-02 00:00:32 | Low | 2 |
| 2026-10-01 00:02:06 | Low | 2 |
| 2026-09-30 00:20:07 | Low | 2 |
| 2026-09-29 00:07:46 | Low | 2 |
| 2026-09-28 00:28:32 | Low | 2 |
| 2026-09-27 00:07:07 | Low | 2 |
| 2026-09-26 11:15:02 | Medium | 1 |
| 2026-09-26 00:12:15 | Low | 2 |
| 2026-09-25 11:11:47 | Medium | 1 |
| 2026-09-25 00:03:36 | Low | 2 |
| 2026-09-24 11:42:45 | Medium | 1 |
| 2026-09-24 00:24:14 | Low | 2 |
| 2026-09-23 11:40:33 | Medium | 1 |
| 2026-09-23 00:28:13 | Low | 2 |
| 2026-09-22 11:37:52 | Medium | 1 |
| 2026-09-22 00:15:14 | Low | 2 |
| 2026-09-21 13:34:51 | Medium | 1 |
| 2026-09-21 00:26:32 | Low | 2 |
| 2026-09-20 11:33:17 | Medium | 1 |
| 2026-09-20 00:25:31 | Low | 2 |