mitos-editor-bin

MEDIUM

maintainer trojkat 1 votes scanned 2026-10-20 23:29:39.094751

View on AUR

Why flagged

The package installs a prebuilt binary from a GitHub release without source availability or build-from-scratch, creating an unverifiable supply-chain risk despite the checksum.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 95%): The package installs a prebuilt binary from a GitHub release without source availability or build-from-scratch, creating an unverifiable supply-chain risk despite the checksum.

PKGBUILD

      1# Maintainer: GianlucaHex <gianlucamastrolonardo10 at gmail dot com>
    
      2
    
      3pkgname=mitos-editor-bin
    
      4_pkgname=mitos
    
      5_debrev=1
    
      6pkgver=0.1.0
    
      7pkgrel=1
    
      8pkgdesc='A fast and minimal modal text editor'
    
      9arch=('x86_64')
    
      10url='https://github.com/mitos-editor/mitos'
    
      11license=('MPL-2.0')
    
      12depends=('gcc-libs' 'glibc')
    
      13options=(!strip !debug)
    
      14source=("$url/releases/download/v$pkgver/${_pkgname}_${pkgver}-${_debrev}_amd64.deb")
    
      15sha256sums=('d7abfee78ede9f7e88022e9146f5938eac89642f0d454025d24fb2058a853aee')
    
      16
    
      17build() {
    
      18  mkdir -p "$srcdir/deb/data"
    
      19  bsdtar -xf "${_pkgname}_${pkgver}-${_debrev}_amd64.deb" -C "$srcdir/deb"
    
      20  bsdtar -xf "$srcdir/deb/data.tar.xz" -C "$srcdir/deb/data"
    
      21}
    
      22
    
      23check() {
    
      24  "$srcdir/deb/data/usr/lib/mitos/ms" --version | grep -q "^mitos $pkgver "
    
      25}
    
      26
    
      27package() {
    
      28  local debdir="$srcdir/deb/data"
    
      29
    
      30  install -Dm755 "$debdir/usr/bin/ms" "$pkgdir/usr/bin/ms"
    
      31  install -Dm755 "$debdir/usr/lib/mitos/ms" "$pkgdir/usr/lib/mitos/ms"
    
      32  cp -a "$debdir/usr/lib/mitos/runtime" "$pkgdir/usr/lib/mitos/"
    
      33
    
      34  install -Dm644 "$debdir/usr/share/applications/Mitos.desktop" \
    
      35    "$pkgdir/usr/share/applications/Mitos.desktop"
    
      36
    
      37  install -Dm644 "$debdir/usr/share/bash-completion/completions/ms" \
    
      38    "$pkgdir/usr/share/bash-completion/completions/ms"
    
      39  install -Dm644 "$debdir/usr/share/fish/vendor_completions.d/ms.fish" \
    
      40    "$pkgdir/usr/share/fish/vendor_completions.d/ms.fish"
    
      41  install -Dm644 "$debdir/usr/share/zsh/vendor-completions/_ms" \
    
      42    "$pkgdir/usr/share/zsh/vendor-completions/_ms"
    
      43
    
      44  install -Dm644 "$debdir/usr/share/doc/mitos/LICENSE" \
    
      45    "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      46  install -Dm644 "$debdir/usr/share/doc/mitos/README.md" \
    
      47    "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      48  install -Dm644 "$debdir/usr/share/doc/mitos/copyright" \
    
      49    "$pkgdir/usr/share/doc/$pkgname/copyright"
    
      50}
    
      51

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-20 23:29:39	Medium	2
2026-10-20 21:29:05	Medium	2