fluxer-bin
MEDIUM
maintainer Felitendo
25 votes
scanned 2026-11-01 14:00:44.307000
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:29
source_x86_64=("fluxer-${pkgver}-x64.tar.gz::https://api.fluxer.app/dl/desktop/stable/linux/x64/${pkgver}/tar_gz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Felitendo
2
# Contributor: Cosmo <cptncosmo@gmail.com>
3
# This PKGBUILD is updated automatically:
4
# https://github.com/Felitendo/PKGBUILDS
5
6
pkgname=fluxer-bin
7
# Upstream versions are date-based (see pkg.sh). They sort above the 0.0.x
8
# scheme the package used before.
9
pkgver=2026.1101.102918
10
pkgrel=1
11
pkgdesc="Fluxer Desktop Application"
12
arch=('x86_64' 'aarch64')
13
url="https://fluxer.app"
14
license=('AGPL-3.0-only')
15
# libpipewire and systemd-libs: two of the app's native modules link them
16
depends=('gtk3' 'nss' 'alsa-lib' 'libpipewire' 'systemd-libs')
17
# /usr/bin/fluxer is also installed by fluxer-git on the AUR and by the
18
# "fluxer" package in upstream's own pacman repository:
19
# provides/conflicts makes that an either/or instead of a file conflict
20
provides=('fluxer')
21
conflicts=('fluxer')
22
options=('!strip')
23
24
# Upstream's .deb entry, with our paths. Its name is the app's desktopName:
25
# Wayland windows and fluxer:// links look the entry up by it.
26
source=("app.fluxer.FluxerDesktop.desktop")
27
sha256sums=('d14f917714dd3cb1bfe84911f973690fba79ee04b1dffb88a88d75581c38c3f7')
28
29
source_x86_64=("fluxer-${pkgver}-x64.tar.gz::https://api.fluxer.app/dl/desktop/stable/linux/x64/${pkgver}/tar_gz")
30
sha256sums_x86_64=('6e33953f4160dc11d9fc227fc7adaa9cc6af9140b25f518e5ccf1e99c24cc2ef')
31
32
source_aarch64=("fluxer-${pkgver}-arm64.tar.gz::https://api.fluxer.app/dl/desktop/stable/linux/arm64/${pkgver}/tar_gz")
33
sha256sums_aarch64=('5af99fefb13b78992e31431ca4a3d2f3d10d1662cee34ecb3ecf42720f886d5e')
34
35
package() {
36
local _dir
37
case "$CARCH" in
38
x86_64) _dir="Fluxer-${pkgver}-linux-x64" ;;
39
aarch64) _dir="Fluxer-${pkgver}-linux-arm64" ;;
40
esac
41
# upstream has changed the archive layout before - fall back to a glob
42
if [ ! -d "$srcdir/$_dir" ]; then
43
_dir=$(cd "$srcdir" && ls -d [Ff]luxer*"${pkgver}"*/ 2>/dev/null | head -n1)
44
_dir="${_dir%/}"
45
fi
46
if [ -z "$_dir" ] || [ ! -d "$srcdir/$_dir" ]; then
47
echo "Error: could not find extracted directory for $CARCH" >&2
48
ls -la "$srcdir" >&2
49
return 1
50
fi
51
52
install -d "$pkgdir/opt/$pkgname"
53
cp -a "$srcdir/$_dir/." "$pkgdir/opt/$pkgname/"
54
55
install -d "$pkgdir/usr/bin"
56
ln -s "/opt/$pkgname/fluxer" "$pkgdir/usr/bin/fluxer"
57
58
install -Dm644 "$srcdir/app.fluxer.FluxerDesktop.desktop" -t "$pkgdir/usr/share/applications"
59
60
# The bundle carries a full icon set, named after the size it holds.
61
# The glob takes those and leaves icon.png and the tray templates, which
62
# carry no size, alone.
63
local _icon _size _found=0
64
for _icon in "$srcdir/$_dir"/resources/icons/[0-9]*x[0-9]*.png; do
65
[ -f "$_icon" ] || continue
66
_size="$(basename "$_icon" .png)"
67
install -Dm644 "$_icon" \
68
"$pkgdir/usr/share/icons/hicolor/$_size/apps/fluxer.png"
69
_found=1
70
done
71
# the .desktop entry points at this icon, so a silent miss would ship a
72
# window with no icon at all
73
if [ "$_found" -eq 0 ]; then
74
echo "Error: no icons in $_dir/resources/icons" >&2
75
ls -la "$srcdir/$_dir/resources" >&2
76
return 1
77
fi
78
}
79
Changes since previous scan
--- PKGBUILD @ 2026-11-01 07:59+++ PKGBUILD @ 2026-11-01 14:00@@ -6,7 +6,7 @@ pkgname=fluxer-bin # Upstream versions are date-based (see pkg.sh). They sort above the 0.0.x # scheme the package used before.-pkgver=2026.1101.41644+pkgver=2026.1101.102918 pkgrel=1 pkgdesc="Fluxer Desktop Application" arch=('x86_64' 'aarch64')@@ -27,10 +27,10 @@ sha256sums=('d14f917714dd3cb1bfe84911f973690fba79ee04b1dffb88a88d75581c38c3f7') source_x86_64=("fluxer-${pkgver}-x64.tar.gz::https://api.fluxer.app/dl/desktop/stable/linux/x64/${pkgver}/tar_gz")-sha256sums_x86_64=('6f3a6e551796800f5b17f6599bab8d4badb900c3ea87501aea8f887f4f1ea6d2')+sha256sums_x86_64=('6e33953f4160dc11d9fc227fc7adaa9cc6af9140b25f518e5ccf1e99c24cc2ef') source_aarch64=("fluxer-${pkgver}-arm64.tar.gz::https://api.fluxer.app/dl/desktop/stable/linux/arm64/${pkgver}/tar_gz")-sha256sums_aarch64=('f2c0ba768efd823e699988aab71a80f1e1527bdbf34479eee6622c4e51240b5e')+sha256sums_aarch64=('5af99fefb13b78992e31431ca4a3d2f3d10d1662cee34ecb3ecf42720f886d5e') package() { local _dirScan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 14:00:44 | Medium | 1 |
| 2026-11-01 07:59:34 | Medium | 2 |
| 2026-11-01 01:59:19 | Medium | 1 |
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 19:58:49 | Medium | 1 |
| 2026-10-31 07:58:04 | Medium | 1 |
| 2026-10-31 01:57:41 | Medium | 1 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 09:52:05 | Medium | 1 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 11:50:06 | Medium | 1 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 07:44:04 | Medium | 1 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 07:42:02 | Medium | 1 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |