ham2k-power-logger-bin

LOW

maintainer 9M2PJU 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

Prebuilt AppImage downloaded from updates.ham2k.net, which appears to be the project's own update infrastructure (matching the ham2k.com domain), with proper sha256 checksums provided; the main concern is that this is a non-whitelisted host serving a prebuilt binary, but it is plausibly the official vendor domain rather than an unrelated swappable host.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 70%): Prebuilt AppImage downloaded from updates.ham2k.net, which appears to be the project's own update infrastructure (matching the ham2k.com domain), with proper sha256 checksums provided; the main concern is that this is a non-whitelisted host serving a prebuilt binary, but it is plausibly the official vendor domain rather than an unrelated swappable host.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:18 source_x86_64=("halo-${_edition}-${pkgver}-(${_build})-x64.AppImage::https://updates.ham2k.net/halo-${_edition}/linux-x64/26.9/halo-${_edition}-${pkgver}-(${_build})-x64.AppImage")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: 9M2PJU <9m2pju@gmail.com>
    
      2
    
      3pkgname=ham2k-power-logger-bin
    
      4_pkgname=ham2k-power-logger
    
      5pkgver=26.9.0
    
      6_build=179
    
      7_edition=next
    
      8pkgrel=1
    
      9pkgdesc="Next-generation amateur radio logging app by Ham2K (pre-compiled binary)"
    
      10arch=('x86_64' 'aarch64')
    
      11url="https://ham2k.com/"
    
      12license=('MPL-2.0')
    
      13depends=('gtk3' 'libsecret' 'curl')
    
      14options=('!strip')
    
      15provides=('ham2k-power-logger' 'ham2k-polo' 'polo')
    
      16conflicts=('ham2k-power-logger' 'ham2k-polo')
    
      17
    
      18source_x86_64=("halo-${_edition}-${pkgver}-(${_build})-x64.AppImage::https://updates.ham2k.net/halo-${_edition}/linux-x64/26.9/halo-${_edition}-${pkgver}-(${_build})-x64.AppImage")
    
      19source_aarch64=("halo-${_edition}-${pkgver}-(${_build})-arm64.AppImage::https://updates.ham2k.net/halo-${_edition}/linux-arm64/26.9/halo-${_edition}-${pkgver}-(${_build})-arm64.AppImage")
    
      20
    
      21sha256sums_x86_64=('7fe1de6f834292959364d940c807c5e581e1c7f2f26bc66e2c715d9692dd578b')
    
      22sha256sums_aarch64=('514d834bc3b485f8dc61259ce546e6d19b779f84ef182184ba01519484b6fdfd')
    
      23
    
      24prepare() {
    
      25  cd "${srcdir}"
    
      26  if [ "${CARCH}" = "x86_64" ]; then
    
      27    _appimage="halo-${_edition}-${pkgver}-(${_build})-x64.AppImage"
    
      28  elif [ "${CARCH}" = "aarch64" ]; then
    
      29    _appimage="halo-${_edition}-${pkgver}-(${_build})-arm64.AppImage"
    
      30  fi
    
      31
    
      32  chmod +x "${_appimage}"
    
      33  rm -rf squashfs-root
    
      34  ./"${_appimage}" --appimage-extract > /dev/null 2>&1
    
      35}
    
      36
    
      37package() {
    
      38  cd "${srcdir}/squashfs-root"
    
      39
    
      40  # Install main program files to /opt
    
      41  install -d "${pkgdir}/opt/${_pkgname}"
    
      42  cp -a data lib "${pkgdir}/opt/${_pkgname}/"
    
      43  install -Dm755 ham2k_logger "${pkgdir}/opt/${_pkgname}/ham2k_logger"
    
      44
    
      45  # Symlinks in /usr/bin
    
      46  install -d "${pkgdir}/usr/bin"
    
      47  ln -sf "/opt/${_pkgname}/ham2k_logger" "${pkgdir}/usr/bin/ham2k-power-logger"
    
      48  ln -sf "/opt/${_pkgname}/ham2k_logger" "${pkgdir}/usr/bin/ham2k_logger"
    
      49  ln -sf "/opt/${_pkgname}/ham2k_logger" "${pkgdir}/usr/bin/polo"
    
      50
    
      51  # Desktop file
    
      52  install -d "${pkgdir}/usr/share/applications"
    
      53  sed -e 's|^Exec=.*|Exec=/usr/bin/ham2k-power-logger %f|' \
    
      54      -e 's|^Categories=.*|Categories=Utility;HamRadio;|' \
    
      55      com.ham2k.logger.next.desktop > "${pkgdir}/usr/share/applications/com.ham2k.logger.next.desktop"
    
      56
    
      57  # Icon
    
      58  install -Dm644 share/icons/hicolor/512x512/apps/com.ham2k.logger.next.png \
    
      59    "${pkgdir}/usr/share/icons/hicolor/512x512/apps/com.ham2k.logger.next.png"
    
      60  install -Dm644 com.ham2k.logger.next.png \
    
      61    "${pkgdir}/usr/share/pixmaps/com.ham2k.logger.next.png"
    
      62
    
      63  # MIME type for .h2kext extensions
    
      64  if [ -f share/mime/packages/com.ham2k.logger.next.xml ]; then
    
      65    install -Dm644 share/mime/packages/com.ham2k.logger.next.xml \
    
      66      "${pkgdir}/usr/share/mime/packages/com.ham2k.logger.next.xml"
    
      67  fi
    
      68}
    
      69

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	3
2026-10-16 00:12:47	Low	3
2026-10-15 00:28:05	Low	3
2026-10-14 05:20:58	Low	3
2026-10-14 05:19:21	Medium	2