landrop-bin

maintainer whao · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads prebuilt .deb files from the project's official release host (releases.landrop.app), which is plausibly controlled by the project; the files are verified with fixed, matching checksums, and the build process only extracts and installs them in standard locations without executing remote code.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt .deb files from the project's official release host (releases.landrop.app), which is plausibly controlled by the project; the files are verified with fixed, matching checksums, and the build process only extracts and installs them in standard locations without executing remote code.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:27 source_x86_64=("https://releases.landrop.app/landrop-v2-electron/LANDrop-${pkgver}-linux-amd64.deb")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Wei Hao <dolem.hao@gmail.com>
    
      2pkgname=landrop-bin
    
      3_pkgname=landrop
    
      4pkgver=2.7.2
    
      5pkgrel=3
    
      6pkgdesc="Drop any files to any devices on your LAN"
    
      7arch=('x86_64' 'aarch64')
    
      8url="https://landrop.app/"
    
      9license=('custom')
    
      10depends=(
    
      11  'gtk3'
    
      12  'libnotify'
    
      13  'nss'
    
      14  'libxss'
    
      15  'libxtst'
    
      16  'xdg-utils'
    
      17  'at-spi2-core'
    
      18  'util-linux-libs'
    
      19  'libsecret'
    
      20)
    
      21optdepends=(
    
      22  'libappindicator-gtk3: for system tray icon support'
    
      23)
    
      24provides=('landrop')
    
      25conflicts=('landrop' 'landrop-git')
    
      26install="${pkgname}.install"
    
      27source_x86_64=("https://releases.landrop.app/landrop-v2-electron/LANDrop-${pkgver}-linux-amd64.deb")
    
      28source_aarch64=("https://releases.landrop.app/landrop-v2-electron/LANDrop-${pkgver}-linux-arm64.deb")
    
      29sha256sums_x86_64=('2073c1472275811ca36bf29fa3ff319b1a11804cb674b029edca56a1e9d75703')
    
      30sha256sums_aarch64=('0dc5b3ae386567c861bff5b50451a16e81fa1d22fe24021780491f65d8c9bb3f')
    
      31
    
      32prepare() {
    
      33  if [ "$CARCH" = "x86_64" ]; then
    
      34    _debarch="amd64"
    
      35  else
    
      36    _debarch="arm64"
    
      37  fi
    
      38  
    
      39  # Extract the deb package
    
      40  bsdtar -xf "${srcdir}/LANDrop-${pkgver}-linux-${_debarch}.deb" -C "${srcdir}"
    
      41  bsdtar -xf "${srcdir}/data.tar.xz" -C "${srcdir}"
    
      42}
    
      43
    
      44package() {
    
      45  # Copy application files
    
      46  cp -r "${srcdir}/usr" "${pkgdir}/"
    
      47  
    
      48  # Copy opt directory (contains the actual application)
    
      49  mkdir -p "${pkgdir}/opt"
    
      50  cp -r "${srcdir}/opt/LANDrop" "${pkgdir}/opt/"
    
      51  
    
      52  # Fix permissions
    
      53  chmod 755 "${pkgdir}/opt/LANDrop/landrop-v2-electron"
    
      54  chmod 4755 "${pkgdir}/opt/LANDrop/chrome-sandbox"
    
      55  
    
      56  # Create symlink for the binary
    
      57  mkdir -p "${pkgdir}/usr/bin"
    
      58  ln -sf "/opt/LANDrop/landrop-v2-electron" "${pkgdir}/usr/bin/landrop"
    
      59  
    
      60  # Create a proper desktop file
    
      61  cat > "${srcdir}/landrop.desktop" << EOF
    
      62[Desktop Entry]
    
      63Name=LANDrop
    
      64Exec=landrop %U
    
      65Terminal=false
    
      66Type=Application
    
      67Icon=landrop
    
      68StartupWMClass=LANDrop
    
      69Comment=Drop any files to any devices on your LAN.
    
      70Categories=Network;FileTransfer;
    
      71EOF
    
      72  install -Dm644 "${srcdir}/landrop.desktop" "${pkgdir}/usr/share/applications/landrop.desktop"
    
      73  
    
      74  # Make sure we don't install the original desktop file
    
      75  rm -f "${pkgdir}/usr/share/applications/landrop-v2-electron.desktop"
    
      76  
    
      77  # Install icons in multiple sizes for better desktop integration
    
      78  # Use the app icon from resources directory
    
      79  for size in 16 24 32 48 64 96 128 256 512 1024; do
    
      80    install -Dm644 "${srcdir}/opt/LANDrop/resources/app.asar.unpacked/resources/icon/icon.png" \
    
      81      "${pkgdir}/usr/share/icons/hicolor/${size}x${size}/apps/landrop.png"
    
      82  done
    
      83  
    
      84  # Install license files
    
      85  install -Dm644 "${srcdir}/opt/LANDrop/LICENSE.electron.txt" \
    
      86    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.electron.txt"
    
      87}

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2