marky-appimage

maintainer Cleboost · 1 votes · scanned 2026-08-18 00:03:42.021799

MEDIUM

Why flagged The package installs a prebuilt AppImage from GitHub Releases, which is executable code that could be swapped by an attacker if the source is compromised, though the project is legitimate and checksums are provided.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

MEDIUM AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 95%): The package installs a prebuilt AppImage from GitHub Releases, which is executable code that could be swapped by an attacker if the source is compromised, though the project is legitimate and checksums are provided.

PKGBUILD

      1# Maintainer: Cleboost <clement.balarot@gmail.com>
    
      2# Contributor: missing-aur project <https://github.com/Cleboost/missing-aur>
    
      3
    
      4pkgname=marky-appimage
    
      5pkgver=0.1.3
    
      6pkgrel=1
    
      7pkgdesc="Fast native markdown viewer with live reload and folder workspaces (AppImage)"
    
      8url="https://github.com/GRVYDEV/marky"
    
      9arch=("x86_64" "aarch64")
    
      10depends=("fuse2")
    
      11options=("!strip")
    
      12license=("Apache-2.0")
    
      13
    
      14source_x86_64=("marky-appimage-${pkgver}-x86_64.AppImage::${url}/releases/download/v${pkgver}/Marky_${pkgver}_amd64.AppImage" "marky.png::https://raw.githubusercontent.com/GRVYDEV/marky/main/src-tauri/icons/128x128@2x.png" "marky.desktop::https://raw.githubusercontent.com/Cleboost/missing-aur/main/packages/marky/marky.desktop")
    
      15source_aarch64=("marky-appimage-${pkgver}-aarch64.AppImage::${url}/releases/download/v${pkgver}/Marky_${pkgver}_arm64.AppImage" "marky.png::https://raw.githubusercontent.com/GRVYDEV/marky/main/src-tauri/icons/128x128@2x.png" "marky.desktop::https://raw.githubusercontent.com/Cleboost/missing-aur/main/packages/marky/marky.desktop")
    
      16sha256sums_x86_64=('d54a17866e9599774aad802a32395edb057ee13a3101a93efb008e2b3124d7b0'
    
      17                   '6c7660390d65217fe8de0892862254f47aee77e0af7096c75b8bfe168c5403f7'
    
      18                   '983e2bc77f9836a8cb871e2b7e980b3bd1ea42b9f48124dd7114bda38ae2c537')
    
      19sha256sums_aarch64=('c44b89f720ea91766281d179ff7676acf66ea5406deada1f37135b371b99bc5b'
    
      20                    '6c7660390d65217fe8de0892862254f47aee77e0af7096c75b8bfe168c5403f7'
    
      21                    '983e2bc77f9836a8cb871e2b7e980b3bd1ea42b9f48124dd7114bda38ae2c537')
    
      22
    
      23prepare() {
    
      24  if [ "${CARCH}" = "x86_64" ]; then
    
      25    chmod +x "${srcdir}/marky-appimage-${pkgver}-x86_64.AppImage"
    
      26  elif [ "${CARCH}" = "aarch64" ]; then
    
      27    chmod +x "${srcdir}/marky-appimage-${pkgver}-aarch64.AppImage"
    
      28  fi
    
      29}
    
      30
    
      31package() {
    
      32  if [ "${CARCH}" = "x86_64" ]; then
    
      33    install -Dm755 "${srcdir}/marky-appimage-${pkgver}-x86_64.AppImage" "${pkgdir}/opt/marky-appimage/marky.AppImage"
    
      34  elif [ "${CARCH}" = "aarch64" ]; then
    
      35    install -Dm755 "${srcdir}/marky-appimage-${pkgver}-aarch64.AppImage" "${pkgdir}/opt/marky-appimage/marky.AppImage"
    
      36  fi
    
      37  install -dm755 "${pkgdir}/usr/bin"
    
      38  ln -sf "/opt/marky-appimage/marky.AppImage" "${pkgdir}/usr/bin/marky"
    
      39  install -Dm644 "${srcdir}/marky.png" "${pkgdir}/usr/share/icons/hicolor/256x256/apps/marky.png"
    
      40  install -Dm644 "${srcdir}/marky.desktop" "${pkgdir}/usr/share/applications/marky.desktop"
    
      41}
    
      42
    
      43

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	MEDIUM	2
2026-08-17 00:18:29	MEDIUM	2
2026-08-16 00:03:42	MEDIUM	2
2026-08-15 00:26:13	MEDIUM	2
2026-08-14 00:03:41	MEDIUM	2
2026-08-13 00:17:07	MEDIUM	2
2026-08-12 13:23:33	MEDIUM	2