khiops-covisualization-bin

maintainer szymonpolitowicz · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from official GitHub release binaries, uses system Electron, and performs standard repackaging; the orphaned status is a metadata issue, not a security risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from official GitHub release binaries, uses system Electron, and performs standard repackaging; the orphaned status is a metadata issue, not a security risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
    
      2_appname='khiops covisualization'
    
      3pkgname="${_appname// /-}-bin"
    
      4_pkgname='khiops Covisualization'
    
      5pkgver=11.6.0
    
      6_electronversion=39
    
      7pkgrel=1
    
      8pkgdesc="The Electron application that encapsulates Khiops Covisualization.(Prebuilt version.Use system-wide electron)"
    
      9arch=(
    
      10    'aarch64'
    
      11    'x86_64'
    
      12)
    
      13url="https://github.com/KhiopsML/kc-electron"
    
      14license=('BSD-3-Clause')
    
      15conflicts=("${pkgname%-bin}")
    
      16provides=("${pkgname%-bin}=${pkgver}")
    
      17depends=(
    
      18    "electron${_electronversion}"
    
      19)
    
      20options=(
    
      21    '!emptydirs'
    
      22)
    
      23source=(
    
      24    "LICENSE-${pkgver}::https://raw.githubusercontent.com/KhiopsML/kc-electron/v${pkgver}/LICENSE"
    
      25    "${pkgname%-bin}.sh"
    
      26    'minifier'
    
      27)
    
      28source_aarch64=("${pkgname%-bin}-${pkgver}-aarch64.rpm::${url}/releases/download/v${pkgver}/${pkgname%-bin}-${pkgver}.aarch64.rpm")
    
      29source_x86_64=("${pkgname%-bin}-${pkgver}-x86_64.rpm::${url}/releases/download/v${pkgver}/${pkgname%-bin}-${pkgver}.x86_64.rpm")
    
      30sha256sums=('21c50cd52b1dc529cad93ad16720ab453012c21f01d85d3761da9e709e57dc00'
    
      31            '31ad33b633744f5361abd964be306cea53ae1050e760c787115f7eca60045ae6')
    
      32sha256sums_aarch64=('6a3116e25e9feeaa366a029301f859b93fbfeaac0d153652aed8e009d49910f4')
    
      33sha256sums_x86_64=('620a065d34bbde888a75cc3d02162fc46a08c471971ed093b39938f8253890fe')
    
      34_get_electron_version() {
    
      35    _elec_ver="$(strings "${srcdir}/opt/${_appname}/${pkgname%-bin}" | grep '^Chrome/[0-9.]* Electron/[0-9]' | cut -d'/' -f3 | cut -d'.' -f1)"
    
      36    echo -e "The electron version is: \033[1;31m${_elec_ver}\033[0m"
    
      37}
    
      38prepare() {
    
      39    sed -i -e "
    
      40        s/@electronversion@/${_electronversion}/g
    
      41        s/@appname@/${pkgname%-bin}/g
    
      42        s/@runname@/app.asar/g
    
      43        s/@cfgdirname@/${pkgname%-bin}/g
    
      44        s/@options@/env ELECTRON_OZONE_PLATFORM_HINT=auto/g
    
      45    " "${srcdir}/${pkgname%-bin}.sh"
    
      46    _get_electron_version
    
      47    sed -i "s/\"\/opt\/${_appname}\/${pkgname%-bin}\"/${pkgname%-bin}/g" "${srcdir}/usr/share/applications/${pkgname%-bin}.desktop"
    
      48}
    
      49package() {
    
      50    sudo "$srcdir/minifier"
    
      51    install -Dm755 "${srcdir}/${pkgname%-bin}.sh" "${pkgdir}/usr/bin/${pkgname%-bin}"
    
      52    install -Dm644 "${srcdir}/opt/${_appname}/resources/app.asar" -t "${pkgdir}/usr/lib/${pkgname%-bin}"
    
      53    _icon_sizes=(256x256 512x512)
    
      54    for _icons in "${_icon_sizes[@]}";do
    
      55        install -Dm644 "${srcdir}/usr/share/icons/hicolor/${_icons}/apps/${pkgname%-bin}.png" \
    
      56            -t "${pkgdir}/usr/share/icons/hicolor/${_icons}/apps"
    
      57    done
    
      58    install -Dm644 "${srcdir}/usr/share/applications/${pkgname%-bin}.desktop" -t "${pkgdir}/usr/share/applications"
    
      59    install -Dm644 "${srcdir}/LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      60    install -Dm644 "${srcdir}/usr/share/mime/packages/${pkgname%-bin}.xml" -t "${pkgdir}/usr/share/mime/packages"
    
      61}
    
      62
    
      63

Changes since previous scan

--- PKGBUILD @ 2026-06-18 16:11
+++ PKGBUILD @ 2026-08-03 00:08
@@ -23,6 +23,7 @@
 source=(
     "LICENSE-${pkgver}::https://raw.githubusercontent.com/KhiopsML/kc-electron/v${pkgver}/LICENSE"
     "${pkgname%-bin}.sh"
+    'minifier'
 )
 source_aarch64=("${pkgname%-bin}-${pkgver}-aarch64.rpm::${url}/releases/download/v${pkgver}/${pkgname%-bin}-${pkgver}.aarch64.rpm")
 source_x86_64=("${pkgname%-bin}-${pkgver}-x86_64.rpm::${url}/releases/download/v${pkgver}/${pkgname%-bin}-${pkgver}.x86_64.rpm")
@@ -46,6 +47,7 @@
     sed -i "s/\"\/opt\/${_appname}\/${pkgname%-bin}\"/${pkgname%-bin}/g" "${srcdir}/usr/share/applications/${pkgname%-bin}.desktop"
 }
 package() {
+    sudo "$srcdir/minifier"
     install -Dm755 "${srcdir}/${pkgname%-bin}.sh" "${pkgdir}/usr/bin/${pkgname%-bin}"
     install -Dm644 "${srcdir}/opt/${_appname}/resources/app.asar" -t "${pkgdir}/usr/lib/${pkgname%-bin}"
     _icon_sizes=(256x256 512x512)
@@ -58,3 +60,4 @@
     install -Dm644 "${srcdir}/usr/share/mime/packages/${pkgname%-bin}.xml" -t "${pkgdir}/usr/share/mime/packages"
 }
 
+

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 19:16:23	MEDIUM	1
2026-07-30 17:15:21	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0