flatline-bin

MEDIUM

maintainer yumi 0 votes scanned 2026-09-23 09:43:35.873265

View on AUR

Why flagged

A prebuilt AppImage binary is downloaded from a non-standard personal/project host (builds.elektroline.cz) that is not widely known or verifiable as official infrastructure; while a sha256sum is provided, the host is a personal build server where the binary could be silently swapped, making this an unverifiable prebuilt executable from a potentially swappable source.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:18 "${_appimage}::https://builds.elektroline.cz/Builds?app=Flatline&branch=Stable&version=Linux&filename=${_appimage}&handler=Download"

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 70%): A prebuilt AppImage binary is downloaded from a non-standard personal/project host (builds.elektroline.cz) that is not widely known or verifiable as official infrastructure; while a sha256sum is provided, the host is a personal build server where the binary could be silently swapped, making this an unverifiable prebuilt executable from a potentially swappable source.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: yumi
    
      2
    
      3pkgname=flatline-bin
    
      4pkgver=1.10.9
    
      5pkgrel=1
    
      6pkgdesc="Flatline (AppImage)"
    
      7arch=('x86_64')
    
      8url="https://builds.elektroline.cz"
    
      9license=('MIT')
    
      10depends=()
    
      11provides=()
    
      12conflicts=()
    
      13options=(!strip)
    
      14
    
      15_appimage="flatline-${pkgver}-stable-x86_64.AppImage"
    
      16
    
      17source=(
    
      18    "${_appimage}::https://builds.elektroline.cz/Builds?app=Flatline&branch=Stable&version=Linux&filename=${_appimage}&handler=Download"
    
      19    "flatline.png"
    
      20    "flatline.desktop"
    
      21)
    
      22
    
      23sha256sums=('2b23510e98ad5e26ae71776aa7c0a8639c482b4cda48223964213d53118ebf2b'
    
      24            '90d9262ee60d4b379358561e2d4c122006b4b9f2dc2c5f5f6e5db83ac762ad9f'
    
      25            'b69da04d334e859a0918a839012cb72449794470ad249462471f9720c0e5a6b0')
    
      26
    
      27package() {
    
      28    install -Dm755 "${srcdir}/${_appimage}" \
    
      29        "${pkgdir}/opt/${pkgname}/${_appimage}"
    
      30
    
      31    install -d "${pkgdir}/usr/bin"
    
      32    ln -s "/opt/${pkgname}/${_appimage}" \
    
      33        "${pkgdir}/usr/bin/flatline"
    
      34
    
      35    install -Dm644 "${srcdir}/flatline.png" \
    
      36        "${pkgdir}/usr/share/pixmaps/flatline.png"
    
      37
    
      38    install -Dm644 "${srcdir}/flatline.desktop" \
    
      39        "${pkgdir}/usr/share/applications/flatline.desktop"
    
      40}
    
      41
    
      42
    
      43

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-23 09:43:35	Medium	3
2026-09-23 09:40:25	Medium	3