lightdm-slick-greeter-mint-theme
MEDIUM
maintainer Santi-Burgos
2 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The PKGBUILD downloads a wallpaper from an untrusted external host (bing.com) during package build using wget, which is not listed in source=() and has no checksum verification, creating a potential supply-chain risk if the endpoint were compromised.
Triggered rules
Medium
External download from an untrusted host, not in source=()
external_download_not_in_source
curl/wget fetches a URL on a non-allowlisted host that is not part of source=(), so it is not checksum-verified by makepkg.
-
PKGBUILD:69
wget -O slick-greeter.png "http://www.bing.com/$(wget -q -O- https://binged.it/2ZButYc | sed -e 's/<[^>]*>//g' | cut -d / -f2 | cut -d \& -f1)"
Medium
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 95%): The PKGBUILD downloads a wallpaper from an untrusted external host (bing.com) during package build using wget, which is not listed in source=() and has no checksum verification, creating a potential supply-chain risk if the endpoint were compromised.
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Santiago Burgos <santiago.burgos1089@gmail.com>
2
3
pkgname=lightdm-slick-greeter-mint-theme
4
_pkgname=slick-greeter
5
pkgver=2.2.7
6
pkgrel=1
7
pkgdesc="A slick-looking LightDM greeter. With additional options enabled"
8
arch=('x86_64')
9
url="https://github.com/linuxmint/${_pkgname}"
10
license=('GPL3')
11
depends=(
12
'cairo'
13
'freetype2'
14
'gtk3'
15
'libcanberra'
16
'libxext'
17
'lightdm-guest'
18
'mint-themes'
19
'pixman'
20
'python-gobject'
21
'xapp'
22
'xorg-server'
23
)
24
optdepends=(
25
'cinnamon-styles-artwork: enable full artwork theme in Cinnamon'
26
'lightdm-settings: allow configuration of slick-greeter'
27
'mint-l-theme: enable additional Mint themes'
28
'numlockx: enable numerical keypad on supported keyboard'
29
)
30
makedepends=(
31
'meson'
32
'vala'
33
)
34
provides=(
35
'lightdm-slick-greeter'
36
)
37
conflicts=(
38
'lightdm-slick-greeter'
39
)
40
backup=("etc/lightdm/${_pkgname}.conf")
41
install="${_pkgname}.install"
42
source=(
43
"${_pkgname}-$pkgver.tar.gz::${url}/archive/${pkgver}.tar.gz"
44
"${_pkgname}.conf"
45
)
46
sha256sums=(
47
'f685da6ca9d97329b4b200077d12db0ad4f9964d4515479e6c00bba721ab0626'
48
'6ce9dda9e5f343e142926e7ed7aa127137214b823362653745cfe1f9d56c4492'
49
)
50
51
build() {
52
arch-meson "${_pkgname}-${pkgver}" build
53
meson compile -C build
54
}
55
56
package() {
57
meson install -C build --no-rebuild --destdir "$pkgdir"
58
59
# adjust launcher name
60
mv "${pkgdir}/usr/share/xgreeters/${_pkgname}.desktop" \
61
"${pkgdir}/usr/share/xgreeters/lightdm-slick-greeter.desktop"
62
63
# Install default conf
64
install -Dm644 "${srcdir}/${_pkgname}.conf" -t "${pkgdir}/etc/lightdm/"
65
66
# Download latest Bing wallpaper from internet
67
# Credits to https://forum.linuxconfig.org/t/how-to-download-bing-wallpaper-with-bash-shell-one-liner/3457
68
cd "${srcdir}"
69
wget -O slick-greeter.png "http://www.bing.com/$(wget -q -O- https://binged.it/2ZButYc | sed -e 's/<[^>]*>//g' | cut -d / -f2 | cut -d \& -f1)"
70
71
# Installing downloaded Bing wallpaper as slick-greeter wallpaper
72
install -Dm644 "${srcdir}/${_pkgname}.png" -t "${pkgdir}/usr/share/${_pkgname}/"
73
}
74
75
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Medium | 2 |
| 2026-09-16 00:03:17 | Medium | 2 |
| 2026-09-15 00:25:31 | Medium | 2 |
| 2026-09-14 00:27:57 | Medium | 2 |
| 2026-09-13 00:19:54 | Medium | 2 |
| 2026-09-12 00:25:17 | Medium | 2 |
| 2026-09-11 00:19:22 | Medium | 2 |
| 2026-09-10 00:22:44 | Medium | 2 |
| 2026-09-09 00:04:09 | Medium | 2 |
| 2026-09-08 00:18:08 | Medium | 2 |
| 2026-09-07 00:30:15 | Medium | 2 |
| 2026-09-06 00:17:06 | Medium | 2 |
| 2026-09-05 00:16:27 | Medium | 2 |
| 2026-09-04 00:03:13 | Medium | 2 |
| 2026-09-03 00:15:47 | Medium | 2 |
| 2026-09-02 00:02:31 | Medium | 2 |
| 2026-09-01 00:11:19 | Medium | 2 |
| 2026-08-31 00:19:57 | Medium | 2 |
| 2026-08-30 00:04:14 | Medium | 2 |
| 2026-08-29 00:29:17 | Medium | 2 |