microsoft-edge-dev-bin
MEDIUM
maintainer bittin
101 votes
scanned 2026-10-26 00:12:40.318206
Why flagged
The package downloads a prebuilt .deb binary from Microsoft's official repository, which is a trusted source for the software, but the static analyzer flags the host as non-standard; however, the download is of a legitimate, signed package from the vendor's own domain, making the actual risk low, though the unverifiable nature of prebuilt binaries from any source carries inherent supply-chain risk.
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:33
source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb"
Medium
AI review of an ambiguous pattern
llm_review
The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 95%): The package downloads a prebuilt .deb binary from Microsoft's official repository, which is a trusted source for the software, but the static analyzer flags the host as non-standard; however, the download is of a legitimate, signed package from the vendor's own domain, making the actual risk low, though the unverifiable nature of prebuilt binaries from any source carries inherent supply-chain risk.
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Luna Jernberg <droidbittin@gmail.com>
2
# Maintainer: Jonas Schwartz <jonas@josc.io>
3
# Maintainer: Vlad <ejiek at mail.ru>
4
# Maintainer: Solomon Choina<shlomochoina@gmail.com>
5
# Maintainer: Christopher Snowhill <kode54@gmail.com>
6
# Contributor: Caleb Maclennan <caleb@alerque.com>
7
# Contributor: intrnl
8
9
_channel=dev
10
_pkgname=microsoft-edge-dev
11
pkgname=microsoft-edge-dev-bin
12
_pkgshortname=msedge-dev
13
pkgver=157.0.4329.0
14
pkgrel=1
15
_uprel=1
16
pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
17
arch=(x86_64)
18
url="https://www.microsoftedgeinsider.com/en-us/download"
19
license=(custom)
20
provides=("microsoft-edge=$pkgver")
21
conflicts=(microsoft-edge)
22
depends=(gtk3 libcups nss alsa-lib libxtst libdrm mesa libxml2-legacy)
23
makedepends=(imagemagick)
24
optdepends=('gnome-keyring: for storing passwords in GNOME keyring'
25
'gtk3: for printing'
26
'kdialog: for file dialogs in KDE'
27
'kwallet: for storing passwords in KWallet'
28
'libpipewire: WebRTC desktop sharing under Wayland'
29
'libunity: for download progress on KDE'
30
'ttf-liberation: fix fonts for some PDFs - CRBug #369991'
31
'xdg-utils')
32
options=(!strip !zipman)
33
source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb"
34
"$_pkgname.sh"
35
"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
36
sha256sums=('da9c085c073f011976f870917a4c4dcbac0e79ed67673d75210a8836fd908be6'
37
'285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a'
38
'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')
39
40
package() {
41
bsdtar -xf data.tar.xz -C "$pkgdir/"
42
43
# suid sandbox
44
chmod 4755 "$pkgdir/opt/microsoft/$_pkgshortname/msedge-sandbox"
45
46
# 256 and 24 are proper colored icons
47
for res in 128 64 48 32; do
48
magick "$pkgdir/opt/microsoft/$_pkgshortname/product_logo_256_dev.png" \
49
-resize "${res}x${res}" \
50
"$pkgdir/opt/microsoft/$_pkgshortname/product_logo_${res}_dev.png"
51
done
52
for res in 22 16; do
53
magick "$pkgdir/opt/microsoft/$_pkgshortname/product_logo_24_dev.png" \
54
-resize "${res}x${res}" \
55
"$pkgdir/opt/microsoft/$_pkgshortname/product_logo_${res}_dev.png"
56
done
57
58
# copy icons where FHS expects them
59
for res in 16 22 24 32 48 64 128 256; do
60
install -Dm644 "$pkgdir/opt/microsoft/$_pkgshortname/product_logo_${res}_dev.png" \
61
"$pkgdir/usr/share/icons/hicolor/${res}x${res}/apps/$_pkgname.png"
62
done
63
64
# User flag aware launcher
65
install -Dm0755 microsoft-edge-dev.sh "$pkgdir/usr/bin/$_pkgname"
66
67
install -Dm0644 'Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf' "$pkgdir/usr/share/licenses/$pkgname/LICENSE.pdf"
68
rm -r "$pkgdir/etc/cron.daily/" "$pkgdir/opt/microsoft/$_pkgshortname/cron/"
69
rm "$pkgdir/opt/microsoft/$_pkgshortname/"product_logo_*.png
70
}
71
72
73
Changes since previous scan
--- PKGBUILD @ 2026-10-14 00:06+++ PKGBUILD @ 2026-10-26 00:12@@ -10,7 +10,7 @@ _pkgname=microsoft-edge-dev pkgname=microsoft-edge-dev-bin _pkgshortname=msedge-dev-pkgver=156.0.4301.0+pkgver=157.0.4329.0 pkgrel=1 _uprel=1 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"@@ -33,7 +33,7 @@ source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb" "$_pkgname.sh" "Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")-sha256sums=('1a0d8213654ace3767705397b6b693db0d5c8bf221cb8500e8fcf9c7dd2c2fd2'+sha256sums=('da9c085c073f011976f870917a4c4dcbac0e79ed67673d75210a8836fd908be6' '285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a' 'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e') Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-26 00:12:40 | Medium | 2 |
| 2026-10-25 00:20:48 | Medium | 2 |
| 2026-10-24 00:14:55 | Medium | 2 |
| 2026-10-23 00:02:19 | Medium | 2 |
| 2026-10-22 00:13:10 | Medium | 2 |
| 2026-10-21 00:12:50 | Medium | 2 |
| 2026-10-20 00:10:31 | Medium | 2 |
| 2026-10-19 00:03:55 | Medium | 2 |
| 2026-10-18 00:06:55 | Medium | 2 |
| 2026-10-17 00:21:55 | Medium | 2 |
| 2026-10-16 00:12:47 | Medium | 2 |
| 2026-10-15 00:28:05 | Medium | 2 |
| 2026-10-14 13:20:15 | Medium | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |
| 2026-10-12 00:18:51 | Low | 2 |
| 2026-10-11 00:26:05 | Low | 2 |
| 2026-10-10 00:11:52 | Low | 2 |
| 2026-10-09 00:05:33 | Low | 2 |
| 2026-10-08 00:28:03 | Low | 2 |