microsoft-edge-dev-bin
LOW
maintainer bittin
101 votes
scanned 2026-09-11 15:22:58.728112
Why flagged
The package downloads a prebuilt .deb from Microsoft's official repository (packages.microsoft.com), which is a legitimate source despite not being on all whitelists; the binary is from the vendor and checksums are provided, making supply-chain risk low.
Triggered rules
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt .deb from Microsoft's official repository (packages.microsoft.com), which is a legitimate source despite not being on all whitelists; the binary is from the vendor and checksums are provided, making supply-chain risk low.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:33
source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Luna Jernberg <droidbittin@gmail.com>
2
# Maintainer: Jonas Schwartz <jonas@josc.io>
3
# Maintainer: Vlad <ejiek at mail.ru>
4
# Maintainer: Solomon Choina<shlomochoina@gmail.com>
5
# Maintainer: Christopher Snowhill <kode54@gmail.com>
6
# Contributor: Caleb Maclennan <caleb@alerque.com>
7
# Contributor: intrnl
8
9
_channel=dev
10
_pkgname=microsoft-edge-dev
11
pkgname=microsoft-edge-dev-bin
12
_pkgshortname=msedge-dev
13
pkgver=155.0.4268.0
14
pkgrel=1
15
_uprel=1
16
pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
17
arch=(x86_64)
18
url="https://www.microsoftedgeinsider.com/en-us/download"
19
license=(custom)
20
provides=("microsoft-edge=$pkgver")
21
conflicts=(microsoft-edge)
22
depends=(gtk3 libcups nss alsa-lib libxtst libdrm mesa libxml2-legacy)
23
makedepends=(imagemagick)
24
optdepends=('gnome-keyring: for storing passwords in GNOME keyring'
25
'gtk3: for printing'
26
'kdialog: for file dialogs in KDE'
27
'kwallet: for storing passwords in KWallet'
28
'libpipewire: WebRTC desktop sharing under Wayland'
29
'libunity: for download progress on KDE'
30
'ttf-liberation: fix fonts for some PDFs - CRBug #369991'
31
'xdg-utils')
32
options=(!strip !zipman)
33
source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb"
34
"$_pkgname.sh"
35
"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
36
sha256sums=('bb6daec6efa7c6a62107afa407c0d0c6a0ce30fcad7948d84e39e44965a35f72'
37
'285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a'
38
'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')
39
40
package() {
41
bsdtar -xf data.tar.xz -C "$pkgdir/"
42
43
# suid sandbox
44
chmod 4755 "$pkgdir/opt/microsoft/$_pkgshortname/msedge-sandbox"
45
46
# 256 and 24 are proper colored icons
47
for res in 128 64 48 32; do
48
magick "$pkgdir/opt/microsoft/$_pkgshortname/product_logo_256_dev.png" \
49
-resize "${res}x${res}" \
50
"$pkgdir/opt/microsoft/$_pkgshortname/product_logo_${res}_dev.png"
51
done
52
for res in 22 16; do
53
magick "$pkgdir/opt/microsoft/$_pkgshortname/product_logo_24_dev.png" \
54
-resize "${res}x${res}" \
55
"$pkgdir/opt/microsoft/$_pkgshortname/product_logo_${res}_dev.png"
56
done
57
58
# copy icons where FHS expects them
59
for res in 16 22 24 32 48 64 128 256; do
60
install -Dm644 "$pkgdir/opt/microsoft/$_pkgshortname/product_logo_${res}_dev.png" \
61
"$pkgdir/usr/share/icons/hicolor/${res}x${res}/apps/$_pkgname.png"
62
done
63
64
# User flag aware launcher
65
install -Dm0755 microsoft-edge-dev.sh "$pkgdir/usr/bin/$_pkgname"
66
67
install -Dm0644 'Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf' "$pkgdir/usr/share/licenses/$pkgname/LICENSE.pdf"
68
rm -r "$pkgdir/etc/cron.daily/" "$pkgdir/opt/microsoft/$_pkgshortname/cron/"
69
rm "$pkgdir/opt/microsoft/$_pkgshortname/"product_logo_*.png
70
}
71
72
73
Changes since previous scan
--- PKGBUILD @ 2026-08-14 00:03+++ PKGBUILD @ 2026-09-11 15:22@@ -10,7 +10,7 @@ _pkgname=microsoft-edge-dev pkgname=microsoft-edge-dev-bin _pkgshortname=msedge-dev-pkgver=153.0.4210.0+pkgver=155.0.4268.0 pkgrel=1 _uprel=1 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"@@ -33,7 +33,7 @@ source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb" "$_pkgname.sh" "Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")-sha256sums=('a8764bf68c7c766f1065f545f9c436d357817b2f641bdb6ee58a855e26217f05'+sha256sums=('bb6daec6efa7c6a62107afa407c0d0c6a0ce30fcad7948d84e39e44965a35f72' '285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a' 'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e') Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-11 15:22:58 | Low | 2 |
| 2026-08-14 00:03:41 | Clean | 2 |
| 2026-08-13 09:26:10 | Low | 1 |
| 2026-07-25 00:13:44 | Clean | 2 |
| 2026-07-24 09:27:42 | Low | 1 |
| 2026-06-19 19:07:35 | Clean | 2 |
| 2026-06-18 16:11:54 | Low | 1 |