miru-app-git

maintainer indusy · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The non-standard host (Google Cloud Storage) hosts the official Flutter SDK, a legitimate build dependency; the main application is built from the project's own GitHub repository, and no untrusted executable code is silently injected or executed.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The non-standard host (Google Cloud Storage) hosts the official Flutter SDK, a legitimate build dependency; the main application is built from the project's own GitHub repository, and no untrusted executable code is silently injected or executed.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:26 "https://storage.googleapis.com/flutter_infra_release/releases/stable/linux/flutter_linux_3.16.8-stable.tar.xz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Indusy <indusywu@qq.com>
    
      2
    
      3pkgname=miru-app-git
    
      4_gitname=${pkgname%-git}
    
      5pkgver=20240921.4556f07
    
      6pkgrel=2
    
      7pkgdesc="🎉 A versatile application that is free, open-source, and supports extension sources for videos, comics, and novels, available on Android, Windows, and Web platforms. "
    
      8url=https://github.com/benbensy/miru-app.git
    
      9arch=("x86_64")
    
      10depends=(
    
      11    "gtk3"
    
      12    "mpv"
    
      13)
    
      14optdepends=(
    
      15    "vlc"
    
      16)
    
      17makedepends=(
    
      18    "git"
    
      19    "clang"
    
      20    "cmake"
    
      21    "ninja"
    
      22)
    
      23provides=("${pkgname%-git}")
    
      24license=("GPLv3")
    
      25source=(
    
      26    "https://storage.googleapis.com/flutter_infra_release/releases/stable/linux/flutter_linux_3.16.8-stable.tar.xz"
    
      27    "git+https://github.com/benbensy/miru-app.git"
    
      28    "miru.png::https://github.com/benbensy/miru-app/blob/dev/assets/icon/logo.png?raw=true"
    
      29)
    
      30sha256sums=(
    
      31    '7cb12032cf615a92a7bc9042100f3f2af62df7df3ca3bee27f4b153fe218b239'
    
      32    'SKIP'
    
      33    'df41ad6c2e544cfb066162b8ba1ea1d6b3fdc5a058233a7c0300d87f092d5f08'
    
      34)
    
      35pkgver() {
    
      36    cd "$_gitname"
    
      37    printf "%s.%s" "$(git show -s --format=%cs | tr -d -)" "$(git rev-parse --short HEAD)"
    
      38}
    
      39
    
      40prepare() {
    
      41    cd "$_gitname"
    
      42    git submodule update --init --recursive
    
      43}
    
      44
    
      45build() {
    
      46    local FLUTTER_PATH=$(realpath flutter)
    
      47    export PATH="$FLUTTER_PATH/bin:$PATH"
    
      48    cd "$_gitname"
    
      49    flutter pub get
    
      50    flutter build linux --release
    
      51}
    
      52
    
      53package() {
    
      54    cd "$_gitname"
    
      55
    
      56    install -dm755 ${pkgdir}/opt
    
      57    mv build/linux/x64/release/bundle ${pkgdir}/opt/${_gitname}
    
      58
    
      59    install -dm755 ${pkgdir}/usr/bin
    
      60    ln -s /opt/${_gitname}/miru ${pkgdir}/usr/bin/${_gitname}
    
      61
    
      62    install -Dm 644 assets/icon/logo.png ${pkgdir}/usr/share/pixmaps/${_gitname}.png
    
      63    install -dm 755 "${pkgdir}/usr/share/applications"
    
      64
    
      65    cat >${pkgdir}/usr/share/applications/${_gitname}.desktop <<EOF
    
      66[Desktop Entry]
    
      67Type=Application
    
      68Version=1.0
    
      69Name=Miru
    
      70Comment=Miru App
    
      71Exec=${_gitname}
    
      72Icon=${_gitname}
    
      73Categories=AudioVideo;Video;Player;TV;
    
      74Keywords=animation;anime;movie;player;tv;video;ebook;novel;
    
      75Terminal=false
    
      76EOF
    
      77}
    
      78

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2