hamrs-appimage
maintainer not_anonymous
· 1 votes
· scanned 2026-08-03 00:08:14.047287
MEDIUM
View on AUR ↗
Why flagged
The package downloads a prebuilt AppImage from a non-standard host (S3 bucket), which is an unverifiable executable that could be silently swapped, posing a supply-chain risk despite checksums being present.
Triggered rules
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:19
source=("https://$__pkgname-dist.s3.amazonaws.com/$_pkgname-$pkgver-linux-x86_64.AppImage"
MEDIUM
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-07-25) reviewed this and agrees it is MEDIUM (confidence 95%): The package downloads a prebuilt AppImage from a non-standard host (S3 bucket), which is an unverifiable executable that could be silently swapped, posing a supply-chain risk despite checksums being present.
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: not_anonymous <nmlibertarian@gmail.com>
2
# Contributor: Sean Snell <ssnell@lakecs.net>
3
# Submission: not_anonymous <nmlibertarian@gmail.com>
4
5
pkgname=hamrs-appimage
6
_pkgname=hamrs-pro
7
__pkgname=hamrs
8
_install_path="/opt/appimages"
9
pkgver=2.51.0
10
pkgrel=1
11
pkgdesc="Ham Radio portable logger tailored for activities like Parks on the Air, Field Day, and others."
12
arch=('x86_64')
13
url="https://hamrs.app/"
14
license=('LicenseRef-custom:electron')
15
depends=('fuse2' 'hicolor-icon-theme' 'zlib' 'hamradio-menus')
16
provides=('hamrs')
17
conflicts=('hamrs')
18
options=(!strip)
19
source=("https://$__pkgname-dist.s3.amazonaws.com/$_pkgname-$pkgver-linux-x86_64.AppImage"
20
"hamrs-pro.png")
21
22
prepare() {
23
chmod a+x "$_pkgname-$pkgver-linux-$arch.AppImage"
24
"./$_pkgname-$pkgver-linux-$arch.AppImage" --appimage-extract > /dev/null
25
sed 's|AppRun|/opt/appimages/hamrs-pro.AppImage|g;s|Utility|HamRadio|g' -i "$srcdir/squashfs-root/$_pkgname.desktop"
26
}
27
28
package() {
29
install -Dm755 "$srcdir/$_pkgname-$pkgver-linux-$arch.AppImage" "$pkgdir/$_install_path/$_pkgname.AppImage"
30
install -Dm644 "$srcdir/squashfs-root/$_pkgname.desktop" "$pkgdir/usr/share/applications/$_pkgname.desktop"
31
32
for _icons in 1024x1024;do
33
install -Dm644 "$srcdir/squashfs-root/usr/share/icons/hicolor/$_icons/apps/$_pkgname.png" \
34
"$pkgdir/usr/share/icons/hicolor/$_icons/apps/$_pkgname.png"
35
done
36
install -Dm644 "$srcdir/$_pkgname.png" \
37
"$pkgdir/usr/share/icons/hicolor/32x32/apps/$_pkgname.png"
38
39
install -Dm644 "$srcdir/squashfs-root/LICENSE.electron.txt" -t "$pkgdir/usr/share/licenses/$pkgname"
40
}
41
md5sums=('23fa52cb61c5b2a575028efab9e683a0'
42
'8b675923edac47fcec1d0f79affde717')
43
sha256sums=('1627e4de962f4cbf5d82599bec5fc9528489147d6db8e0b5e7034ccdd8cb1c8a'
44
'34fd872afa2dc85872f8ec6f4f4cd4380d480cb4d069ecd869e2bb8ed2c4d97c')
45
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | MEDIUM | 2 |
| 2026-08-02 00:16:08 | MEDIUM | 2 |
| 2026-08-01 00:11:18 | MEDIUM | 2 |
| 2026-07-31 00:14:10 | MEDIUM | 2 |
| 2026-07-30 00:17:23 | MEDIUM | 2 |
| 2026-07-29 00:25:53 | MEDIUM | 2 |
| 2026-07-28 00:07:28 | MEDIUM | 2 |
| 2026-07-27 00:24:32 | MEDIUM | 2 |
| 2026-07-26 00:07:32 | MEDIUM | 2 |
| 2026-07-25 00:13:44 | MEDIUM | 2 |
| 2026-07-24 00:02:28 | MEDIUM | 2 |
| 2026-07-23 00:14:47 | MEDIUM | 2 |
| 2026-07-22 00:29:32 | MEDIUM | 2 |
| 2026-07-21 00:24:15 | MEDIUM | 2 |
| 2026-07-20 00:19:49 | MEDIUM | 2 |
| 2026-07-19 00:17:08 | MEDIUM | 2 |
| 2026-07-18 00:14:48 | MEDIUM | 2 |
| 2026-07-17 00:06:16 | MEDIUM | 2 |
| 2026-07-16 00:05:41 | MEDIUM | 2 |
| 2026-07-15 00:09:25 | MEDIUM | 2 |