lmbionic-bin

LOW

maintainer matheusvilano 0 votes scanned 2026-09-22 21:41:45.490777

View on AUR

Why flagged

AppImage is downloaded from bionic-installers.lmstudio.ai, which is plausibly the official LM Studio/Bionic distribution infrastructure matching the declared project URL (lmstudio.ai); checksums are provided and non-SKIP for the AppImage itself, so the binary is verifiable. The only SKIP'd checksum is for the .desktop file (pure data). No obfuscation, no exfiltration, no piped-to-shell execution beyond normal AppImage packaging.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 70%): AppImage is downloaded from bionic-installers.lmstudio.ai, which is plausibly the official LM Studio/Bionic distribution infrastructure matching the declared project URL (lmstudio.ai); checksums are provided and non-SKIP for the AppImage itself, so the binary is verifiable. The only SKIP'd checksum is for the .desktop file (pure data). No obfuscation, no exfiltration, no piped-to-shell execution beyond normal AppImage packaging.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:23 source_x86_64=("${_appname}.AppImage::https://bionic-installers.lmstudio.ai/linux/x64/1.1.4-3/Bionic-1.1.4-3-x64.AppImage")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Matheus Vilano <aur.negotiate177@passinbox.com>
    
      2
    
      3_appname="Bionic"
    
      4_srcname="lmbionic"
    
      5_binname="lm-bionic"
    
      6_iconame="bionic"
    
      7_lnkname="ai-elementlabs.lmbionic"
    
      8
    
      9pkgname=lmbionic-bin
    
      10pkgver=1.1.4
    
      11pkgrel=1
    
      12pkgdesc="LM Studio Bionic - Agent for open models, natively local"
    
      13arch=("x86_64" "aarch64")
    
      14url="https://lmstudio.ai"
    
      15license=("EULA")
    
      16depends=("fuse-common" "zlib" "hicolor-icon-theme" "gtk3" "nss" "libxcrypt-compat")
    
      17options=("!strip")
    
      18install="${_srcname}.install"
    
      19provides=("${pkgname}")
    
      20conflicts=("${pkgname}")
    
      21source=("${_srcname}.png"
    
      22        "${_srcname}.desktop")
    
      23source_x86_64=("${_appname}.AppImage::https://bionic-installers.lmstudio.ai/linux/x64/1.1.4-3/Bionic-1.1.4-3-x64.AppImage")
    
      24source_aarch64=("${_appname}.AppImage::https://bionic-installers.lmstudio.ai/linux/arm64/1.1.4-3/Bionic-1.1.4-3-arm64.AppImage")
    
      25sha256sums=("099f025c7e7ef8f53e4741e3438f83b05b46b6e6a8e7677a09295467edfb3bb1"
    
      26            "SKIP")
    
      27sha256sums_x86_64=("190b2df9f12a7903d06c006c6f2ad417c96fe5788f1351ec49900b3e13169733")
    
      28sha256sums_aarch64=("aac47689312eacc7c0e9367fa1462aae526f6bcce6b6db46271e1b0004b7822a")
    
      29
    
      30prepare()
    
      31{
    
      32  chmod +x "${srcdir}/${_appname}.AppImage"
    
      33}
    
      34
    
      35package()
    
      36{
    
      37  # Create installation directory
    
      38  install -dm755 "$pkgdir/opt/${pkgname}"
    
      39
    
      40  # Install AppImage
    
      41  install -Dm755 "${srcdir}/${_appname}.AppImage" "$pkgdir/opt/${pkgname}/${_appname}.AppImage"
    
      42
    
      43  # Install static icon
    
      44  install -Dm644 "${srcdir}/${_srcname}.png" "$pkgdir/usr/share/icons/hicolor/512x512/apps/${_iconame}.png"
    
      45  install -Dm644 "${srcdir}/${_srcname}.png" "$pkgdir/usr/share/pixmaps/${_iconame}.png"
    
      46
    
      47  # Desktop entry
    
      48  install -Dm644 "$srcdir/${_srcname}.desktop" "$pkgdir/usr/share/applications/${_lnkname}.desktop"
    
      49
    
      50  # Symlink to binary
    
      51  install -dm755 "$pkgdir/usr/bin"
    
      52  ln -s /opt/${pkgname}/${_appname}.AppImage "$pkgdir/usr/bin/${_binname}"
    
      53}
    
      54

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-22 21:41:45	Low	3
2026-09-22 21:39:17	Medium	2