mattermost-desktop-bin
maintainer AndreLeclercq
· 1 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads a precompiled binary from the official Mattermost release server, which is a legitimate source for the software, and installs it without executing arbitrary remote code or modifying the build process.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a precompiled binary from the official Mattermost release server, which is a legitimate source for the software, and installs it without executing arbitrary remote code or modifying the build process.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:12
source=("mattermost-desktop-${pkgver}-linux-x64.tar.gz::https://releases.mattermost.com/desktop/${pkgver}/mattermost-desktop-${pkgver}-linux-x64.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: André LECLERCQ <andre.leclercq.io@protonmail.com>
2
pkgname=mattermost-desktop-bin
3
pkgver=6.2.2
4
pkgrel=1
5
pkgdesc="Mattermost Desktop application (precompiled binary)"
6
arch=('x86_64')
7
url="https://mattermost.com/"
8
license=('Apache-2.0')
9
depends=('gtk3' 'nss' 'alsa-lib' 'libxss' 'at-spi2-core' 'libcups' 'libxrandr')
10
provides=('mattermost-desktop')
11
conflicts=('mattermost-desktop')
12
source=("mattermost-desktop-${pkgver}-linux-x64.tar.gz::https://releases.mattermost.com/desktop/${pkgver}/mattermost-desktop-${pkgver}-linux-x64.tar.gz")
13
sha256sums=('c7369925307ccd48d5a8a74be6188a64c4458a61453f4c4ab0a5faa63eb421e8')
14
options=('!strip')
15
16
package() {
17
cd "${srcdir}/mattermost-desktop-${pkgver}-linux-x64"
18
19
# Installation des fichiers dans /opt
20
install -dm755 "${pkgdir}/opt/${pkgname}"
21
cp -r * "${pkgdir}/opt/${pkgname}/"
22
23
# Lien symbolique pour l'exécutable
24
install -dm755 "${pkgdir}/usr/bin"
25
ln -s "/opt/${pkgname}/mattermost-desktop" "${pkgdir}/usr/bin/mattermost-desktop"
26
27
# Fichier .desktop
28
install -dm755 "${pkgdir}/usr/share/applications"
29
cat > "${pkgdir}/usr/share/applications/mattermost-desktop.desktop" << EOF
30
[Desktop Entry]
31
Name=Mattermost
32
Comment=Mattermost Desktop
33
Exec=mattermost-desktop
34
Icon=mattermost-desktop
35
Terminal=false
36
Type=Application
37
Categories=Network;InstantMessaging;
38
StartupNotify=true
39
StartupWMClass=Mattermost
40
EOF
41
42
# Icône
43
install -Dm644 "app_icon.png" "${pkgdir}/usr/share/pixmaps/mattermost-desktop.png"
44
45
# Licences
46
install -Dm644 "LICENSE.txt" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
47
install -Dm644 "NOTICE.txt" "${pkgdir}/usr/share/licenses/${pkgname}/NOTICE"
48
}
49
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |