harbor-stremio-beta-bin

maintainer harborstremio · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt .deb from a GitHub release, which is a common and generally acceptable practice for binary packages; the source is verifiable via checksum, and no obfuscated or malicious behavior is present in the PKGBUILD.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt .deb from a GitHub release, which is a common and generally acceptable practice for binary packages; the source is verifiable via checksum, and no obfuscated or malicious behavior is present in the PKGBUILD.

PKGBUILD

      1# Maintainer: Aditya Hebballe <adityahebballe@proton.me>
    
      2pkgname=harbor-stremio-beta-bin
    
      3_pkgname=harbor
    
      4pkgver=0.9.115
    
      5pkgrel=2
    
      6pkgdesc='A Stremio client built for adventure (beta binary release)'
    
      7arch=('x86_64')
    
      8url='https://github.com/harborstremio/harbor'
    
      9license=('MIT')
    
      10depends=('ffmpeg' 'gst-libav' 'gst-plugins-bad' 'gst-plugins-good' 'gtk3' 'libayatana-appindicator' 'mpv' 'webkit2gtk-4.1' 'yt-dlp')
    
      11makedepends=('libarchive')
    
      12provides=('harbor-stremio-beta' 'harbor')
    
      13conflicts=('harbor-stremio-bin' 'harbor-stremio' 'harbor' 'harbor-stremio-git')
    
      14source=("Harbor_${pkgver}-${pkgrel}_amd64.deb::https://github.com/harborstremio-linux/harbor-linux-builds/releases/download/beta-v0.9.115/Harbor_0.9.115_amd64.deb")
    
      15sha256sums=('f894e463019369b15c378ef4dcdabd440dbaa4cd0fe563f8dd9e4944f8fdb8a3')
    
      16package() {
    
      17  local extract="$srcdir/deb-extract"
    
      18  rm -rf "$extract"; mkdir -p "$extract"
    
      19  bsdtar --no-same-owner -xf "$srcdir/Harbor_${pkgver}-${pkgrel}_amd64.deb" -C "$extract"
    
      20  bsdtar --no-same-owner -xf "$(find "$extract" -maxdepth 1 -type f -name 'data.tar.*' -print -quit)" -C "$pkgdir"
    
      21  rm -f "$pkgdir/usr/bin/ffmpeg" "$pkgdir/usr/bin/ffprobe" "$pkgdir/usr/bin/yt-dlp"
    
      22  if [[ -x "$pkgdir/usr/bin/harbor" && ! -e "$pkgdir/usr/bin/harbor-stremio" ]]; then ln -s harbor "$pkgdir/usr/bin/harbor-stremio"; fi
    
      23}
    
      24

Changes since previous scan

--- PKGBUILD @ 2026-07-29 00:25
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,54 +1,24 @@
 # Maintainer: Aditya Hebballe <adityahebballe@proton.me>
-
 pkgname=harbor-stremio-beta-bin
 _pkgname=harbor
-pkgver=0.9.114
-pkgrel=1
+pkgver=0.9.115
+pkgrel=2
 pkgdesc='A Stremio client built for adventure (beta binary release)'
 arch=('x86_64')
 url='https://github.com/harborstremio/harbor'
 license=('MIT')
-
-depends=(
-  'ffmpeg'
-  'gst-libav'
-  'gst-plugins-bad'
-  'gst-plugins-good'
-  'gtk3'
-  'libayatana-appindicator'
-  'mpv'
-  'webkit2gtk-4.1'
-  'yt-dlp'
-)
-
+depends=('ffmpeg' 'gst-libav' 'gst-plugins-bad' 'gst-plugins-good' 'gtk3' 'libayatana-appindicator' 'mpv' 'webkit2gtk-4.1' 'yt-dlp')
 makedepends=('libarchive')
-
 provides=('harbor-stremio-beta' 'harbor')
 conflicts=('harbor-stremio-bin' 'harbor-stremio' 'harbor' 'harbor-stremio-git')
-
-source=("Harbor_${pkgver}-${pkgrel}_amd64.deb::https://github.com/AdityaHebballe/harbor-linux-builds/releases/download/beta-v0.9.114-da51e52f3bb0/Harbor_0.9.114_amd64.deb")
-sha256sums=('b3c74f7606bd623f4cefe2e8c8ad0475ffc01498f9937e882426a527fd22a9b3')
-
+source=("Harbor_${pkgver}-${pkgrel}_amd64.deb::https://github.com/harborstremio-linux/harbor-linux-builds/releases/download/beta-v0.9.115/Harbor_0.9.115_amd64.deb")
+sha256sums=('f894e463019369b15c378ef4dcdabd440dbaa4cd0fe563f8dd9e4944f8fdb8a3')
 package() {
-  rm -rf "$srcdir/deb-extract"
-  mkdir -p "$srcdir/deb-extract"
-  bsdtar --no-same-owner -xf "$srcdir/Harbor_${pkgver}-${pkgrel}_amd64.deb" -C "$srcdir/deb-extract"
-
-  local data_archive
-  data_archive="$(find "$srcdir/deb-extract" -maxdepth 1 -type f -name 'data.tar.*' | head -n 1)"
-  if [[ -z "$data_archive" ]]; then
-    echo "Debian data archive not found" >&2
-    return 1
-  fi
-
-  bsdtar --no-same-owner -xf "$data_archive" -C "$pkgdir"
-
-  rm -f "$pkgdir/usr/bin/ffmpeg" \
-        "$pkgdir/usr/bin/ffprobe" \
-        "$pkgdir/usr/bin/yt-dlp"
-
-  if [[ -x "$pkgdir/usr/bin/harbor" && ! -e "$pkgdir/usr/bin/harbor-stremio" ]]; then
-    ln -s harbor "$pkgdir/usr/bin/harbor-stremio"
-  fi
+  local extract="$srcdir/deb-extract"
+  rm -rf "$extract"; mkdir -p "$extract"
+  bsdtar --no-same-owner -xf "$srcdir/Harbor_${pkgver}-${pkgrel}_amd64.deb" -C "$extract"
+  bsdtar --no-same-owner -xf "$(find "$extract" -maxdepth 1 -type f -name 'data.tar.*' -print -quit)" -C "$pkgdir"
+  rm -f "$pkgdir/usr/bin/ffmpeg" "$pkgdir/usr/bin/ffprobe" "$pkgdir/usr/bin/yt-dlp"
+  if [[ -x "$pkgdir/usr/bin/harbor" && ! -e "$pkgdir/usr/bin/harbor-stremio" ]]; then ln -s harbor "$pkgdir/usr/bin/harbor-stremio"; fi
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 13:11:48	LOW	2
2026-07-29 11:11:22	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 05:37:03	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 23:33:54	LOW	2
2026-07-26 09:32:02	LOW	2
2026-07-26 00:07:32	MEDIUM	2
2026-07-25 00:13:44	MEDIUM	2
2026-07-24 13:27:52	MEDIUM	2
2026-07-24 00:02:28	LOW	2
2026-07-23 23:26:18	LOW	2
2026-07-23 17:25:21	LOW	2