librepods-rust-bin

maintainer MALWARE · 1 votes · scanned 2026-08-18 00:03:42.021799

MEDIUM

Why flagged The package downloads a prebuilt binary from a GitHub release under a personal fork (ImMALWARE/aur-librepods-rust-bin), which is an untrusted and potentially swappable source, creating a supply-chain risk despite valid checksums.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

MEDIUM AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 90%): The package downloads a prebuilt binary from a GitHub release under a personal fork (ImMALWARE/aur-librepods-rust-bin), which is an untrusted and potentially swappable source, creating a supply-chain risk despite valid checksums.

PKGBUILD

      1pkgname=librepods-rust-bin
    
      2pkgver=1
    
      3pkgrel=1
    
      4pkgdesc="AirPods management application for Linux (Rust edition)"
    
      5arch=('x86_64')
    
      6url="https://github.com/librepods-org/librepods"
    
      7license=('AGPL-3.0-or-later')
    
      8depends=('bluez' 'dbus' 'libpulse' 'hicolor-icon-theme' 'glibc')
    
      9provides=('librepods')
    
      10conflicts=('librepods' 'librepods-git' 'librepods-rust-git')
    
      11
    
      12_repo="ImMALWARE/aur-librepods-rust-bin"
    
      13source=(
    
      14    "librepods-${pkgver}::https://github.com/${_repo}/releases/download/librepods-${pkgver}/librepods"
    
      15    "icon.png::https://raw.githubusercontent.com/${_repo}/librepods-${pkgver}/linux-rust/assets/icon.png"
    
      16    "LICENSE::https://raw.githubusercontent.com/${_repo}/librepods-${pkgver}/LICENSE"
    
      17)
    
      18sha256sums=('2cf9b4de280a74940265d902bb8f4429ef8318e5c2f61de1f23abffe575e4591'
    
      19            '6785d3943faa390146e641fcca5562862b45d25540b2f3f325d5904045246481'
    
      20            '20b067f86de375aae6db0f283ab2e65de24d537733b89bd58432c101259d84cf')
    
      21
    
      22package() {
    
      23    install -Dm755 "${srcdir}/librepods-${pkgver}" "${pkgdir}/usr/bin/librepods"
    
      24
    
      25    install -Dm644 "${srcdir}/icon.png" "${pkgdir}/usr/share/icons/hicolor/256x256/apps/librepods.png"
    
      26    install -Dm644 "${srcdir}/icon.png" "${pkgdir}/usr/share/pixmaps/librepods.png"
    
      27
    
      28    install -dm755 "${pkgdir}/usr/share/applications"
    
      29    cat > "${pkgdir}/usr/share/applications/librepods.desktop" <<EOF
    
      30[Desktop Entry]
    
      31Name=LibrePods
    
      32Comment=AirPods management application for Linux
    
      33Exec=librepods
    
      34Icon=librepods
    
      35Terminal=false
    
      36Type=Application
    
      37Categories=Utility;AudioVideo;
    
      38EOF
    
      39
    
      40    install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      41}
    
      42

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	MEDIUM	2
2026-08-17 00:18:29	MEDIUM	2
2026-08-16 00:03:42	MEDIUM	2
2026-08-15 00:26:13	MEDIUM	2
2026-08-14 11:29:14	MEDIUM	2