khiops-visualization-bin

maintainer kalevilindroos · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package installs a prebuilt RPM from the project's official GitHub repository, which is a normal distribution method for Electron apps; the source is verifiable via checksums and hosts no unreviewed remote code execution.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package installs a prebuilt RPM from the project's official GitHub repository, which is a normal distribution method for Electron apps; the source is verifiable via checksums and hosts no unreviewed remote code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
    
      2_appname='khiops visualization'
    
      3pkgname="${_appname// /-}-bin"
    
      4_pkgname='khiops Visualization'
    
      5pkgver=11.5.0
    
      6_electronversion=39
    
      7pkgrel=1
    
      8pkgdesc="The Electron application that encapsulates Khiops Visualization.(Prebuilt version.Use system-wide electron)"
    
      9arch=(
    
      10    'aarch64'
    
      11    'x86_64'
    
      12)
    
      13url="https://github.com/KhiopsML/kv-electron"
    
      14license=('BSD-3-Clause')
    
      15conflicts=("${pkgname%-bin}")
    
      16provides=("${pkgname%-bin}=${pkgver}")
    
      17depends=(
    
      18    "electron${_electronversion}"
    
      19)
    
      20options=(
    
      21    '!emptydirs'
    
      22)
    
      23source=(
    
      24    "LICENSE-${pkgver}::https://raw.githubusercontent.com/KhiopsML/kv-electron/v${pkgver}/LICENSE"
    
      25    "${pkgname%-bin}.sh"
    
      26)
    
      27source_aarch64=("${pkgname%-bin}-${pkgver}-aarch64.rpm::${url}/releases/download/v${pkgver}/${pkgname%-bin}-${pkgver}.aarch64.rpm")
    
      28source_x86_64=("${pkgname%-bin}-${pkgver}-x86_64.rpm::${url}/releases/download/v${pkgver}/${pkgname%-bin}-${pkgver}.x86_64.rpm")
    
      29sha256sums=('21c50cd52b1dc529cad93ad16720ab453012c21f01d85d3761da9e709e57dc00'
    
      30            '31ad33b633744f5361abd964be306cea53ae1050e760c787115f7eca60045ae6')
    
      31sha256sums_aarch64=('30400ca331a9fc613ffd92d4911803afd55c080ee79bb9cb762d8c1daf7a93ad')
    
      32sha256sums_x86_64=('3313d8fd0485b494eee362a54e7b1464109665fec49de280c2405233f7e58c40')
    
      33_get_electron_version() {
    
      34    _elec_ver="$(strings "${srcdir}/opt/${_appname}/${pkgname%-bin}" | grep '^Chrome/[0-9.]* Electron/[0-9]' | cut -d'/' -f3 | cut -d'.' -f1)"
    
      35    echo -e "The electron version is: \033[1;31m${_elec_ver}\033[0m"
    
      36}
    
      37prepare() {
    
      38    sed -i -e "
    
      39        s/@electronversion@/${_electronversion}/g
    
      40        s/@appname@/${pkgname%-bin}/g
    
      41        s/@runname@/app.asar/g
    
      42        s/@cfgdirname@/${pkgname%-bin}/g
    
      43        s/@options@/env ELECTRON_OZONE_PLATFORM_HINT=auto/g
    
      44    " "${srcdir}/${pkgname%-bin}.sh"
    
      45    _get_electron_version
    
      46    sed -i "s/\"\/opt\/${_appname}\/${pkgname%-bin}\"/${pkgname%-bin}/g" "${srcdir}/usr/share/applications/${pkgname%-bin}.desktop"
    
      47}
    
      48package() {
    
      49    install -Dm755 "${srcdir}/${pkgname%-bin}.sh" "${pkgdir}/usr/bin/${pkgname%-bin}"
    
      50    install -Dm644 "${srcdir}/opt/${_appname}/resources/app.asar" -t "${pkgdir}/usr/lib/${pkgname%-bin}"
    
      51    _icon_sizes=(256x256 512x512)
    
      52    for _icons in "${_icon_sizes[@]}";do
    
      53        install -Dm644 "${srcdir}/usr/share/icons/hicolor/${_icons}/apps/${pkgname%-bin}.png" \
    
      54            -t "${pkgdir}/usr/share/icons/hicolor/${_icons}/apps"
    
      55    done
    
      56    install -Dm644 "${srcdir}/usr/share/applications/${pkgname%-bin}.desktop" -t "${pkgdir}/usr/share/applications"
    
      57    install -Dm644 "${srcdir}/usr/share/mime/packages/${pkgname%-bin}.xml" -t "${pkgdir}/usr/share/mime/packages"
    
      58    install -Dm644 "${srcdir}/LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      59}
    
      60

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 19:16:23	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0