element-desktop-nightly-bin
maintainer davebloggt
· 13 votes
· scanned 2026-08-18 00:03:42.021799
LOW
View on AUR ↗
Why flagged
The package downloads prebuilt .deb files from the official Element project's domain (packages.element.io), which is a legitimate and expected source for their nightly builds; while not on a standard CDN, it is not a swappable or personal host, and the binaries are verified via sha256sums.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt .deb files from the official Element project's domain (packages.element.io), which is a legitimate and expected source for their nightly builds; while not on a standard CDN, it is not a swappable or personal host, and the binaries are verified via sha256sums.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:13
source_x86_64=("https://packages.element.io/debian/pool/main/e/element-nightly/element-nightly_${pkgver}_amd64.deb")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: David Mehren <david.mehren@udo.edu>
2
3
pkgname=element-desktop-nightly-bin
4
pkgver=2026081701
5
pkgrel=1
6
pkgdesc="All-in-one secure chat app for teams, friends and organisations (nightly .deb build)."
7
arch=('x86_64' 'aarch64')
8
url="https://element.io"
9
license=('Apache')
10
depends=('sqlcipher')
11
source=('element-desktop-nightly.sh')
12
sha256sums=('eec30e5b0e549f7fa9c9c66fd3edb60bc8e0d9d0a77b79d8659cc06deced588d')
13
source_x86_64=("https://packages.element.io/debian/pool/main/e/element-nightly/element-nightly_${pkgver}_amd64.deb")
14
sha256sums_x86_64=('8971580db0558c65ba0d2ff587f30ceb0de2f4e59372cc1ec4329eefb6b2713e')
15
source_aarch64=("https://packages.element.io/debian/pool/main/e/element-nightly/element-nightly_${pkgver}_arm64.deb")
16
sha256sums_aarch64=('f3ab68fd5e7242b939ba5bab73e09e9d10f6235813708fcddea72b6652329823')
17
18
package() {
19
echo "Extracting the data.tar.xz..."
20
bsdtar -xf data.tar.xz -C "$pkgdir/"
21
install -Dm755 "${srcdir}"/element-desktop-nightly.sh "${pkgdir}"/usr/bin/element-desktop-nightly
22
sed -i 's|^Exec=.*|Exec=/usr/bin/element-desktop-nightly %U|' "${pkgdir}"/usr/share/applications/element-desktop-nightly.desktop
23
}
24
Changes since previous scan
--- PKGBUILD @ 2026-08-17 00:18+++ PKGBUILD @ 2026-08-18 00:03@@ -1,7 +1,7 @@ # Maintainer: David Mehren <david.mehren@udo.edu> pkgname=element-desktop-nightly-bin-pkgver=2026081601+pkgver=2026081701 pkgrel=1 pkgdesc="All-in-one secure chat app for teams, friends and organisations (nightly .deb build)." arch=('x86_64' 'aarch64')@@ -11,9 +11,9 @@ source=('element-desktop-nightly.sh') sha256sums=('eec30e5b0e549f7fa9c9c66fd3edb60bc8e0d9d0a77b79d8659cc06deced588d') source_x86_64=("https://packages.element.io/debian/pool/main/e/element-nightly/element-nightly_${pkgver}_amd64.deb")-sha256sums_x86_64=('23419fc655f0d5131a50a0e26a864230294fbd7fd3f11e4f33c558420a324cfa')+sha256sums_x86_64=('8971580db0558c65ba0d2ff587f30ceb0de2f4e59372cc1ec4329eefb6b2713e') source_aarch64=("https://packages.element.io/debian/pool/main/e/element-nightly/element-nightly_${pkgver}_arm64.deb")-sha256sums_aarch64=('89676e7cf78e80d4c3ea03aa37703b604935e64de2674b470f645cf8baaf1ad2')+sha256sums_aarch64=('f3ab68fd5e7242b939ba5bab73e09e9d10f6235813708fcddea72b6652329823') package() { echo "Extracting the data.tar.xz..."Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-18 00:03:42 | LOW | 2 |
| 2026-08-17 11:35:53 | MEDIUM | 1 |
| 2026-08-17 00:18:29 | LOW | 2 |
| 2026-08-16 11:32:23 | MEDIUM | 1 |
| 2026-08-16 00:03:42 | CLEAN | 2 |
| 2026-08-15 11:30:23 | MEDIUM | 1 |
| 2026-08-15 00:26:13 | CLEAN | 2 |
| 2026-08-14 11:29:14 | MEDIUM | 1 |
| 2026-08-14 00:03:41 | LOW | 2 |
| 2026-08-13 11:26:16 | MEDIUM | 1 |
| 2026-08-13 00:17:07 | CLEAN | 2 |
| 2026-08-12 11:23:23 | MEDIUM | 1 |
| 2026-08-12 00:27:08 | CLEAN | 2 |
| 2026-08-11 13:21:13 | MEDIUM | 1 |
| 2026-08-02 00:16:08 | CLEAN | 2 |
| 2026-08-01 11:20:22 | MEDIUM | 1 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 11:17:50 | MEDIUM | 1 |
| 2026-07-31 00:14:10 | CLEAN | 2 |
| 2026-07-30 11:14:12 | MEDIUM | 1 |