loop-desktop-bin

MEDIUM

maintainer voidptr_t 0 votes scanned 2026-10-22 09:38:28.586742

View on AUR

Why flagged

Installs a prebuilt binary tarball from 'artifacts.wilix.dev', a non-standard artifact host unrelated to the official loop.ru domain, making it unverifiable and potentially swappable; however, a checksum is provided and the host appears to be a dedicated artifact repository for this project.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:43 "https://artifacts.wilix.dev/repository/loop-files/loop-${pkgver}/${_pkgname}-${pkgver}-linux-x64.tar.gz"

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 65%): Installs a prebuilt binary tarball from 'artifacts.wilix.dev', a non-standard artifact host unrelated to the official loop.ru domain, making it unverifiable and potentially swappable; however, a checksum is provided and the host appears to be a dedicated artifact repository for this project.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Georgy Kulish <g.kulish@moyklass.com>
    
      2
    
      3pkgname=loop-desktop-bin
    
      4_pkgname=loop-desktop
    
      5pkgver=6.0.3
    
      6pkgrel=1
    
      7pkgdesc='Desktop client for the Loop team messenger'
    
      8arch=('x86_64')
    
      9url='https://loop.ru'
    
      10license=('Apache-2.0')
    
      11depends=(
    
      12  alsa-lib
    
      13  at-spi2-core
    
      14  cairo
    
      15  dbus
    
      16  expat
    
      17  glib2
    
      18  gtk3
    
      19  libcups
    
      20  libnotify
    
      21  libsecret
    
      22  libx11
    
      23  libxcb
    
      24  libxcomposite
    
      25  libxdamage
    
      26  libxext
    
      27  libxfixes
    
      28  libxkbcommon
    
      29  libxrandr
    
      30  mesa
    
      31  nspr
    
      32  nss
    
      33  pango
    
      34  systemd-libs
    
      35  xdg-utils
    
      36)
    
      37optdepends=('pciutils: GPU device information')
    
      38makedepends=('imagemagick')
    
      39provides=("$_pkgname")
    
      40conflicts=("$_pkgname")
    
      41options=('!strip' '!debug')
    
      42source=(
    
      43  "https://artifacts.wilix.dev/repository/loop-files/loop-${pkgver}/${_pkgname}-${pkgver}-linux-x64.tar.gz"
    
      44  'https://www.apache.org/licenses/LICENSE-2.0.txt'
    
      45  "${_pkgname}.desktop"
    
      46)
    
      47sha256sums=(
    
      48  'c6a6c44935181ee99d55bc5c68c8bcdfcc20095047d3929fb01641f903b03619'
    
      49  'cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30'
    
      50  'c3d1494413ac12555c3124a370414a24e1ba20f8edf785aa8c85fc581dd7fcb3'
    
      51)
    
      52
    
      53prepare() {
    
      54  local size
    
      55  local srcpng="${srcdir}/${_pkgname}-${pkgver}-linux-x64/${_pkgname}.png"
    
      56
    
      57  for size in 16 24 32 48 64 128 256; do
    
      58    magick "$srcpng" -resize "${size}x${size}" "${srcdir}/${_pkgname}-${size}.png"
    
      59  done
    
      60}
    
      61
    
      62package() {
    
      63  local src="${srcdir}/${_pkgname}-${pkgver}-linux-x64"
    
      64  local dest="${pkgdir}/usr/lib/${_pkgname}"
    
      65  local size
    
      66
    
      67  install -dm755 "$dest"
    
      68  cp -a "${src}/." "$dest/"
    
      69  chmod 4755 "${dest}/chrome-sandbox"
    
      70  # Upstream helper writes a desktop file with the Mattermost URL scheme.
    
      71  rm -f "${dest}/create_desktop_file.sh"
    
      72
    
      73  install -dm755 "${pkgdir}/usr/bin"
    
      74  ln -s "/usr/lib/${_pkgname}/${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
    
      75
    
      76  install -Dm644 "${srcdir}/${_pkgname}.desktop" \
    
      77    "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
    
      78
    
      79  for size in 16 24 32 48 64 128 256; do
    
      80    install -Dm644 "${srcdir}/${_pkgname}-${size}.png" \
    
      81      "${pkgdir}/usr/share/icons/hicolor/${size}x${size}/apps/${_pkgname}.png"
    
      82  done
    
      83  install -Dm644 "${src}/${_pkgname}.png" \
    
      84    "${pkgdir}/usr/share/icons/hicolor/512x512/apps/${_pkgname}.png"
    
      85
    
      86  install -Dm644 "${srcdir}/LICENSE-2.0.txt" \
    
      87    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      88  install -Dm644 "${src}/LICENSE.electron.txt" \
    
      89    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.electron.txt"
    
      90  install -Dm644 "${src}/LICENSES.chromium.html" \
    
      91    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSES.chromium.html"
    
      92}
    
      93

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-22 09:38:28	Medium	3
2026-10-22 09:34:24	Medium	2