inkscape-appimg
maintainer misaka10987
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The source is a prebuilt AppImage from the official project's own download page (inkscape.org), which is a trusted host for the project;虽非标准主机但属项目官方发布渠道,且无代码执行或远程加载行为,风险低
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a prebuilt AppImage from the official project's own download page (inkscape.org), which is a trusted host for the project;虽非标准主机但属项目官方发布渠道,且无代码执行或远程加载行为,风险低
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:29
"inkscape.appimage::https://inkscape.org/gallery/item/56343/Inkscape-ebf0e94-x86_64.AppImage"
PKGBUILD
1 offending line(s) highlighted
1
# This is an example PKGBUILD file. Use this as a start to creating your own,
2
# and remove these comments. For more information, see 'man PKGBUILD'.
3
# NOTE: Please fill out the license field for your package! If it is unknown,
4
# then please put 'unknown'.
5
6
# Maintainer: misaka10987 <misaka10987@outlook.com>
7
pkgname=inkscape-appimg
8
pkgver=1.4.2
9
pkgrel=2
10
epoch=
11
pkgdesc=""
12
arch=('x86_64')
13
url="https://inkscape.org/"
14
license=('GPL')
15
groups=()
16
depends=()
17
makedepends=()
18
checkdepends=()
19
optdepends=()
20
provides=('inkscape')
21
conflicts=()
22
replaces=()
23
backup=()
24
# Symbol stripping breaks AppImage
25
options=(!strip)
26
install=
27
changelog=
28
source=(
29
"inkscape.appimage::https://inkscape.org/gallery/item/56343/Inkscape-ebf0e94-x86_64.AppImage"
30
)
31
noextract=(
32
'inkscape.appimage'
33
)
34
sha256sums=(
35
'99c333c03ce77e207942ddcd5c8a5b77cde89959a23651bc7872ae880cf4ba6b'
36
)
37
validpgpkeys=()
38
39
prepare() {
40
chmod +x ./inkscape.appimage
41
echo 'Extracting AppImage'
42
./inkscape.appimage --appimage-extract > /dev/null
43
}
44
45
build() {
46
cp ./squashfs-root/usr/share/applications/org.inkscape.Inkscape.desktop ./inkscape.desktop
47
cp -r ./squashfs-root/usr/share/icons .
48
}
49
50
check() {
51
:
52
}
53
54
package() {
55
install -Dm755 "$srcdir/inkscape.appimage" "$pkgdir/usr/bin/inkscape"
56
install -Dm644 "$srcdir/inkscape.desktop" "$pkgdir/usr/share/applications/inkscape.desktop"
57
cp -Tr "$srcdir/icons" "$pkgdir/usr/share/icons"
58
chmod 755 -R "$pkgdir/usr/share/icons"
59
}
60
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |