ieumoffice-bin

MEDIUM

maintainer nahdd123 0 votes scanned 2026-10-29 07:52:02.761978

View on AUR

Why flagged

The package installs a prebuilt binary from a non-official, unverifiable source (project's website, not GitHub releases), which could be silently swapped, posing a supply-chain risk despite matching checksums.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 85%): The package installs a prebuilt binary from a non-official, unverifiable source (project's website, not GitHub releases), which could be silently swapped, posing a supply-chain risk despite matching checksums.

PKGBUILD

      1# Maintainer: nahdd123 <nahdd123@gmail.com>
    
      2pkgname=ieumoffice-bin
    
      3_name=IeumOffice
    
      4pkgver=0.12.8
    
      5pkgrel=1
    
      6pkgdesc='IeumOffice - desktop office suite for DOCX/XLSX/PPTX/PDF/HWP/Markdown (prebuilt binary)'
    
      7arch=('x86_64')
    
      8url='https://ieumoffice.com'
    
      9_gh='https://github.com/pblsketch/openoffice'
    
      10license=('Apache-2.0')
    
      11depends=('gtk3' 'nss' 'libxss' 'libnotify' 'alsa-lib' 'libxtst'
    
      12         'at-spi2-core' 'cups' 'libdrm' 'mesa' 'libxkbcommon')
    
      13provides=("${pkgname%-bin}")
    
      14conflicts=("${pkgname%-bin}")
    
      15options=('!strip' '!debug')
    
      16source=("${url}/releases/download/v${pkgver}/ieumoffice-${pkgver}.x86_64.rpm"
    
      17        "LICENSE-${pkgver}::${_gh}/raw/v${pkgver}/LICENSE")
    
      18sha512sums=('272ba9528a05db35cf1425acbdb62de79b67da856ad7f1382cc2e7f7e40bb4487b899061c89adcfcbc215d5bed839722ccab9840855eba4111ffaf72dd0a504b'
    
      19            'e351f5ca50c8c31fb7c97043090d20afe7a3a1d725123f3e811236b7a83b1e7f2443ebf58e2cbd229e2b8d5a9ebc8c04c7c06bdacb8fa88973b9aaf1696e8811')
    
      20
    
      21package() {
    
      22  bsdtar -xf "${srcdir}/ieumoffice-${pkgver}.x86_64.rpm" -C "${pkgdir}"
    
      23
    
      24  install -Dm644 "${srcdir}/LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      25
    
      26  # CLI on PATH
    
      27  install -d "${pkgdir}/usr/bin"
    
      28  ln -s "/opt/${_name}/ieumoffice" "${pkgdir}/usr/bin/ieumoffice"
    
      29
    
      30  # .desktop: point to PATH binary so the app is discoverable without absolute /opt path
    
      31  sed -i "s|^Exec=.*|Exec=/usr/bin/ieumoffice %U|" \
    
      32    "${pkgdir}/usr/share/applications/ieumoffice.desktop"
    
      33}
    
      34

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-29 07:52:02	Medium	2