larksuite-bin

maintainer miaoer · 8 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt .deb from the official larksuite.com domain, which is the project's own release infrastructure, making it a legitimate source despite the non-whitelisted host; the download is verified by b2sums and the payload is a standard binary package, not an executable script or obfuscated payload.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The package downloads a prebuilt .deb from the official larksuite.com domain, which is the project's own release infrastructure, making it a legitimate source despite the non-whitelisted host; the download is verified by b2sums and the payload is a standard binary package, not an executable script or obfuscated payload.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:19 source=(Lark-linux_x64-${pkgver}.deb::https://www.larksuite.com/api/package_info?platform=10

PKGBUILD

1 offending line(s) highlighted

      1# Mostly a copy of feishu-bin's PKGBUILD with s/feishu/lark/
    
      2# Contributor: Sabit Maulana <sbtmul@gmail.com>
    
      3# Maintainer: aliu <double-a, r-o-n to the 0-1-3-0 at ur gmail.com>
    
      4pkgname=larksuite-bin
    
      5pkgver=7.66.11
    
      6_pkgtyp=stable
    
      7pkgrel=1
    
      8pkgdesc="Collaboration suite service for office messaging, calendars, meetings, docs..."
    
      9arch=('x86_64')
    
      10url="https://www.larksuite.com"
    
      11_licensever=20260122
    
      12license=("LicenseRef-Lark-User-${_licensever}")
    
      13depends=('gtk3' 'nspr' 'nss' 'libpulse' 'libmfx' 'alsa-lib')
    
      14optdepends=('appmenu-gtk-module: Appmenu support')
    
      15makedepends=('curl')
    
      16replaces=('bytedance-lark-dev-bin')
    
      17provides=("bytedance-lark=$pkgver" "lark=$pkgver")
    
      18options=('!emptydirs')
    
      19source=(Lark-linux_x64-${pkgver}.deb::https://www.larksuite.com/api/package_info?platform=10
    
      20	LICENSE-${_licensever}.html::http://www.larksuite.com/en_us/user-terms-of-service
    
      21	LICENSE-US-${_licensever}.html::http://www.larksuite.com/en_us/user-terms-of-service-us
    
      22	dlagent-lark.sh
    
      23	dlagent-license.sh
    
      24	dlagent-license-global.sh
    
      25	dlagent-license-US.sh
    
      26)
    
      27DLAGENTS=("https::/usr/bin/sh ${startdir}/dlagent-lark.sh %o %u"
    
      28	"http::/usr/bin/sh ${startdir}/dlagent-license.sh %o %u"
    
      29)
    
      30b2sums=('32adf8bb01cae75db2b16f103b929330fdd84783d8e0cba56466edb4fa9399c89c35f13c96c8d78fad291fa62ee9fc7d60f8029fac5be1e690e9fadb280f73e9'
    
      31        'c3501dceef7f7ce21515d59560a245c8c2812af15ee076bc0610a1424e2e87c3a2be6568e85e4bf2aa5184e704ff37ad5bf67b4fdb79a1550179b45444132ef3'
    
      32        'a447d907e149618e3ac34361b0f0a10b56a28a0be6ec0a143dfc1697404c7049a3afae7ffd62466b4acfd28753f96a2869f3ab06e31620c570b9ff4fd8b74b5b'
    
      33        '0fe599804f2812e4ba13967d449fa5b41f4dd1949e91ac3c59c3bf95da93c1bf4099ea5088a9877e1b97f8a222e4e6189d965b65a4d2ed1d70736052942257f3'
    
      34        'a9a0df1536abd656d64691c1ff82c531e246f327ed06e32607cb3f06dde0bf418aceeec9b1080ac25b012b8efdc14732ae0a1e1ef7d3f78fa3c81e86a4105b3c'
    
      35        '8a6ddf4bccf0cc469af51c5ca68c3b27329b5506606f05a955b86c5c69e2e7f132b0e4f7748656038c13af4e7c074bf142e72715f713591e32bc05980bbb4358'
    
      36        'e5cb99f2a2440b5c2c8a64e45a8bba379db675270bdef72788ea0e0aa9122c867b2438710ba5c6b117a122305f4a6e22c4e70e136df764c6d0a71ebf17496d78')
    
      37
    
      38package() {
    
      39	# License
    
      40	install -Dm644 LICENSE-${_licensever}.html "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE-${_licensever}.html"
    
      41	install -Dm644 LICENSE-US-${_licensever}.html "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE-US-${_licensever}.html"
    
      42
    
      43	# Extract package data
    
      44	tar xpvf "${srcdir}/data.tar.xz" --xattrs-include='*' --numeric-owner -C "${pkgdir}"
    
      45
    
      46	# Modify files
    
      47	cd "${pkgdir}"
    
      48
    
      49	sed -i 's/StartupNotify=true/StartupNotify=true\nStartupWMClass=lark/g' "${pkgdir}/usr/share/applications/bytedance-lark.desktop"
    
      50
    
      51	sed -i "s/bytedance-lark-${_pkgtyp}/lark/g" "${pkgdir}/usr/share/applications/bytedance-lark.desktop"
    
      52	sed -i "s/bytedance-lark-${_pkgtyp}/lark/g" "${pkgdir}/usr/share/menu/bytedance-lark.menu"
    
      53	sed -i "s/bytedance-lark/lark/g" "${pkgdir}/usr/share/menu/bytedance-lark.menu"
    
      54	sed -i 's/bytedance-lark/lark/g' "${pkgdir}/usr/share/appdata/bytedance-lark.appdata.xml"
    
      55	sed -i 's/bytedance-lark/lark/g' "${pkgdir}/opt/bytedance/lark/bytedance-lark"
    
      56
    
      57	mv usr/share/menu/{bytedance-,}lark.menu
    
      58	mv usr/share/applications/{bytedance-,}lark.desktop
    
      59	mv usr/share/appdata/{bytedance-,}lark.appdata.xml
    
      60	mv usr/share/man/man1/{bytedance-lark-${_pkgtyp},lark}.1.gz
    
      61	mv usr/share/doc/{bytedance-lark-${_pkgtyp},lark}
    
      62
    
      63	## Move non-standard /opt files to /usr/lib
    
      64	install -d "usr/lib/lark/" && mv -T "opt/bytedance/lark" "usr/lib/lark"
    
      65
    
      66	### Update /usr/bin to point there
    
      67	rm "usr/bin/bytedance-lark-${_pkgtyp}"
    
      68	ln -s '/usr/lib/lark/bytedance-lark' "usr/bin/lark"
    
      69
    
      70	# Icons
    
      71	for size in 16 24 32 48 64 128 256; do
    
      72		install -d "usr/share/icons/hicolor/${size}x${size}/apps/"
    
      73		ln -s "/usr/lib/lark/product_logo_${size}.png" "usr/share/icons/hicolor/${size}x${size}/apps/bytedance-lark.png"
    
      74	done
    
      75
    
      76	# Fix directory permissions
    
      77	find "${pkgdir}" -type d -exec chmod 755 {} +
    
      78}
    
      79

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 03:17:12	MEDIUM	1
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2