fluxer-canary-bin
MEDIUM
maintainer Caus
9 votes
scanned 2026-11-01 14:00:44.307000
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:21
source_x86_64=("fluxer-canary-${pkgver}-x64.tar.gz::https://pkgs.fluxer.com/desktop/canary/linux/x64/${pkgver}/tar_gz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Caus <caus@ik.me>
2
# Maintainer: Felitendo
3
# Contributor: Cosmo <cptncosmo@gmail.com>
4
5
pkgname=fluxer-canary-bin
6
pkgver=2026.1031.201021
7
pkgrel=1
8
pkgdesc="Fluxer Canary Desktop Application"
9
arch=('x86_64' 'aarch64')
10
url="https://fluxer.app"
11
license=('AGPL-3.0-only')
12
# libpipewire and systemd-libs: two of the app's native modules link them
13
depends=('gtk3' 'nss' 'alsa-lib' 'libpipewire' 'systemd-libs')
14
options=('!strip')
15
16
# Upstream's .deb entry, with our paths. Its name is the app's desktopName:
17
# Wayland windows and fluxer:// links look the entry up by it.
18
source=("app.fluxer.FluxerDesktopCanary.desktop")
19
sha256sums=('51cd326b0e89ca07d9f54e901689ac4fa6792a3c520e9416ceb5e2c41ed0800f')
20
21
source_x86_64=("fluxer-canary-${pkgver}-x64.tar.gz::https://pkgs.fluxer.com/desktop/canary/linux/x64/${pkgver}/tar_gz")
22
sha256sums_x86_64=('7ded84a3b927e96f916a9bf8b6ac8087ccae2f484dd048b2841273e78bacc955')
23
24
source_aarch64=("fluxer-canary-${pkgver}-arm64.tar.gz::https://pkgs.fluxer.com/desktop/canary/linux/arm64/${pkgver}/tar_gz")
25
sha256sums_aarch64=('5f9b3321f4e0b00031b723d6d023dc065681a10905bb4b5d2697bc86b52c30a2')
26
27
package() {
28
local _dir
29
case "$CARCH" in
30
x86_64) _dir="Fluxer-Canary-${pkgver}-linux-x64" ;;
31
aarch64) _dir="Fluxer-Canary-${pkgver}-linux-arm64" ;;
32
esac
33
# upstream has changed the archive layout before, so fall back to a glob
34
if [ ! -d "$srcdir/$_dir" ]; then
35
_dir=$(cd "$srcdir" && ls -d [Ff]luxer*[Cc]anary*"${pkgver}"*/ 2>/dev/null | head -n1)
36
_dir="${_dir%/}"
37
fi
38
if [ -z "$_dir" ] || [ ! -d "$srcdir/$_dir" ]; then
39
echo "Error: could not find extracted directory for $CARCH" >&2
40
ls -la "$srcdir" >&2
41
return 1
42
fi
43
44
install -d "$pkgdir/opt/$pkgname"
45
cp -a "$srcdir/$_dir/." "$pkgdir/opt/$pkgname/"
46
47
install -d "$pkgdir/usr/bin"
48
ln -s "/opt/$pkgname/fluxer-canary" "$pkgdir/usr/bin/fluxer-canary"
49
50
install -Dm644 "$srcdir/app.fluxer.FluxerDesktopCanary.desktop" \
51
-t "$pkgdir/usr/share/applications"
52
53
# Take the sized icons (128x128.png, ...) and skip icon.png and the
54
# tray templates. A miss would leave the .desktop entry without an icon.
55
local _icon _size _found=0
56
for _icon in "$srcdir/$_dir"/resources/icons/[0-9]*x[0-9]*.png; do
57
[ -f "$_icon" ] || continue
58
_size="$(basename "$_icon" .png)"
59
install -Dm644 "$_icon" \
60
"$pkgdir/usr/share/icons/hicolor/$_size/apps/fluxer-canary.png"
61
_found=1
62
done
63
if [ "$_found" -eq 0 ]; then
64
echo "Error: no icons in $_dir/resources/icons" >&2
65
ls -la "$srcdir/$_dir/resources" >&2
66
return 1
67
fi
68
}
69
Changes since previous scan
--- PKGBUILD @ 2026-11-01 01:59+++ PKGBUILD @ 2026-11-01 14:00@@ -3,7 +3,7 @@ # Contributor: Cosmo <cptncosmo@gmail.com> pkgname=fluxer-canary-bin-pkgver=2026.1031.143117+pkgver=2026.1031.201021 pkgrel=1 pkgdesc="Fluxer Canary Desktop Application" arch=('x86_64' 'aarch64')@@ -19,10 +19,10 @@ sha256sums=('51cd326b0e89ca07d9f54e901689ac4fa6792a3c520e9416ceb5e2c41ed0800f') source_x86_64=("fluxer-canary-${pkgver}-x64.tar.gz::https://pkgs.fluxer.com/desktop/canary/linux/x64/${pkgver}/tar_gz")-sha256sums_x86_64=('35a6e79060a6839815aaa410ea7d4fb3dd707460cb10b104ccf02191d345eef7')+sha256sums_x86_64=('7ded84a3b927e96f916a9bf8b6ac8087ccae2f484dd048b2841273e78bacc955') source_aarch64=("fluxer-canary-${pkgver}-arm64.tar.gz::https://pkgs.fluxer.com/desktop/canary/linux/arm64/${pkgver}/tar_gz")-sha256sums_aarch64=('f27fb07b239c90a75537007079014f65f2762ab6343a0e1deaeaa0a43289a399')+sha256sums_aarch64=('5f9b3321f4e0b00031b723d6d023dc065681a10905bb4b5d2697bc86b52c30a2') package() { local _dirScan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 14:00:44 | Medium | 1 |
| 2026-11-01 01:59:19 | Medium | 1 |
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 19:58:49 | Medium | 1 |
| 2026-10-31 07:58:04 | Medium | 1 |
| 2026-10-31 01:57:41 | Medium | 1 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 09:52:05 | Medium | 1 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 11:50:06 | Medium | 1 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 07:44:04 | Medium | 1 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 07:42:02 | Medium | 1 |
| 2026-10-25 01:41:32 | Medium | 1 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 23:41:29 | Medium | 1 |
| 2026-10-24 00:14:55 | Low | 2 |