matedit-bin

MEDIUM

maintainer InTeaReable 0 votes scanned 2026-09-28 13:20:45.422575

View on AUR

Why flagged

The package installs a prebuilt binary from a GitHub release with unverifiable checksums (SKIP), creating a supply-chain risk if the source were compromised.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 90%): The package installs a prebuilt binary from a GitHub release with unverifiable checksums (SKIP), creating a supply-chain risk if the source were compromised.

PKGBUILD

      1# Maintainer: InTeaReable <leyn.the.cat@gmail.com>
    
      2
    
      3pkgname=matedit-bin
    
      4pkgver=20260928
    
      5pkgrel=2
    
      6pkgdesc="Material editor for PrimeXT"
    
      7arch=('x86_64')
    
      8url="https://github.com/hgruntt/MatEdit"
    
      9license=('GPL-3.0-only')
    
      10depends=('libglvnd')
    
      11provides=('matedit')
    
      12conflicts=('matedit')
    
      13
    
      14source=(
    
      15    "MatEdit-linux-x64-gcc.tar.gz::https://github.com/hgruntt/MatEdit/releases/download/nightly/MatEdit-linux-x64-gcc.tar.gz"
    
      16    "icon.png::https://raw.githubusercontent.com/hgruntt/MatEdit/main/icon.png"
    
      17)
    
      18
    
      19sha256sums=('SKIP' 'SKIP')
    
      20
    
      21prepare() {
    
      22    mkdir -p "$srcdir/matedit"
    
      23
    
      24    tar -xf "$srcdir/MatEdit-linux-x64-gcc.tar.gz" \
    
      25        -C "$srcdir/matedit"
    
      26
    
      27    if [[ ! -f "$srcdir/matedit/MaterialEditor" ]]; then
    
      28        error "MaterialEditor was not found in the release archive"
    
      29        return 1
    
      30    fi
    
      31
    
      32    cat > "$srcdir/matedit.desktop" <<'EOF'
    
      33[Desktop Entry]
    
      34Name=MatEdit
    
      35GenericName=Material Editor
    
      36Comment=Material editor for PrimeXT
    
      37Exec=matedit-bin
    
      38Icon=matedit
    
      39Terminal=false
    
      40Type=Application
    
      41Categories=Graphics;3DGraphics;Development;
    
      42StartupWMClass=MaterialEditor
    
      43EOF
    
      44}
    
      45
    
      46package() {
    
      47    install -Dm755 \
    
      48        "$srcdir/matedit/MaterialEditor" \
    
      49        "$pkgdir/usr/bin/matedit-bin"
    
      50
    
      51    install -Dm644 \
    
      52        "$srcdir/matedit.desktop" \
    
      53        "$pkgdir/usr/share/applications/matedit.desktop"
    
      54
    
      55    install -Dm644 \
    
      56        "$srcdir/icon.png" \
    
      57        "$pkgdir/usr/share/icons/hicolor/256x256/apps/matedit.png"
    
      58}

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-28 13:20:45	Medium	2