kraken-desktop-auto-bin

MEDIUM
maintainer emilss 0 votes scanned 2026-11-06 06:11:22.019786
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:15 source_x86_64=("${pkgname}-${pkgver}-x86_64.zip::https://desktop-downloads.kraken.com/latest/kraken-x86_64-unknown-linux-gnu.zip")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: sssemil <sssemil at github dot com>
2# Contributor: Ergus <spacibba at aol dot com>
3pkgname=kraken-desktop-auto-bin
4pkgver=1.34.1
5pkgrel=1
6pkgdesc="Kraken crypto exchange desktop application"
7arch=('aarch64' 'armv7' 'x86_64')
8url="https://www.kraken.com/desktop"
9license=('custom: commercial')
10provides=('kraken_desktop')
11conflicts=('kraken_desktop')
12
13source=('kraken.png')
14
15source_x86_64=("${pkgname}-${pkgver}-x86_64.zip::https://desktop-downloads.kraken.com/latest/kraken-x86_64-unknown-linux-gnu.zip")
16source_armv7=("${pkgname}-${pkgver}-armv7.zip::https://desktop-downloads.kraken.com/latest/kraken-armv7-unknown-linux-gnueabihf.zip")
17source_aarch64=("${pkgname}-${pkgver}-aarch64.zip::https://desktop-downloads.kraken.com/latest/kraken-aarch64-unknown-linux-gnu.zip")
18sha256sums=('6fc49c5128736ffa958ded6d12f3a1fa819bce5b563e768d479ca01a67517148')
19sha256sums_aarch64=('267b43a879dd3854c54bf0317e4da55ae630e23f117568959be29928643f8aa7')
20sha256sums_armv7=('7d8efa74cdf8a661e5395f84c13881d3b1d45894f3af797acc421d38878d2447')
21sha256sums_x86_64=('f960c3b44b42cddd1cb14fd9ca96f0ccfc3d2c67787211d561e51cce15299dd8')
22
23
24options=('!debug' '!lto' '!strip')
25
26package() {
27
28 install -d -m755 "${pkgdir}/usr/bin"
29 install -d -m755 "${pkgdir}/usr/share/"{applications,icons}
30
31 install -Dm0755 -t "$pkgdir/usr/bin/" "kraken_desktop"
32 install -Dm0644 -t "$pkgdir/usr/share/applications/" "kraken.desktop"
33
34 install -Dm0644 -t "$pkgdir/usr/share/icons/" "kraken.png"
35}
36

Changes since previous scan

--- PKGBUILD @ 2026-10-31 00:07
+++ PKGBUILD @ 2026-11-06 06:11
@@ -1,7 +1,7 @@
# Maintainer: sssemil <sssemil at github dot com>
# Contributor: Ergus <spacibba at aol dot com>
pkgname=kraken-desktop-auto-bin
-pkgver=1.34.0
+pkgver=1.34.1
pkgrel=1
pkgdesc="Kraken crypto exchange desktop application"
arch=('aarch64' 'armv7' 'x86_64')
@@ -16,9 +16,9 @@
source_armv7=("${pkgname}-${pkgver}-armv7.zip::https://desktop-downloads.kraken.com/latest/kraken-armv7-unknown-linux-gnueabihf.zip")
source_aarch64=("${pkgname}-${pkgver}-aarch64.zip::https://desktop-downloads.kraken.com/latest/kraken-aarch64-unknown-linux-gnu.zip")
sha256sums=('6fc49c5128736ffa958ded6d12f3a1fa819bce5b563e768d479ca01a67517148')
-sha256sums_aarch64=('5254607f393f27fafb5d9fe46e8b11d2ba6b545928ec3c70ffdbeddcf188ecbc')
-sha256sums_armv7=('920e1d4e0ebbd62cac2c1d3afe4b92022298d752a2a7fdf5b666c6bfe1fe1fe8')
-sha256sums_x86_64=('bc5014b6fa04baabeee5b5f5ee8a318340805daab24a25e2ba426ae4068cbbec')
+sha256sums_aarch64=('267b43a879dd3854c54bf0317e4da55ae630e23f117568959be29928643f8aa7')
+sha256sums_armv7=('7d8efa74cdf8a661e5395f84c13881d3b1d45894f3af797acc421d38878d2447')
+sha256sums_x86_64=('f960c3b44b42cddd1cb14fd9ca96f0ccfc3d2c67787211d561e51cce15299dd8')
options=('!debug' '!lto' '!strip')

Scan history

Scanned at (UTC)SeverityRules
2026-11-06 06:11:22 Medium 1
2026-10-31 00:07:41 Clean 2
2026-10-30 03:55:04 Medium 1
2026-10-30 00:29:30 Low 2
2026-10-29 00:13:55 Low 2
2026-10-28 00:06:54 Low 2
2026-10-27 00:23:28 Low 2
2026-10-26 00:12:40 Low 2
2026-10-25 00:20:48 Low 2
2026-10-24 00:14:55 Low 2
2026-10-23 00:02:19 Low 2
2026-10-22 03:33:54 Medium 1
2026-10-22 00:13:10 Low 2
2026-10-21 00:12:50 Low 2
2026-10-20 00:10:31 Low 2
2026-10-19 00:03:55 Low 2
2026-10-18 00:06:55 Low 2
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion