mongodb-compass-readonly-bin
maintainer dpeukert
· 1 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads a prebuilt RPM from MongoDB's official download domain, which is a standard and trusted source for this software, despite not being on a static whitelist; the installed files are binaries and data from the official vendor, not executed remote code or obfuscated payloads.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt RPM from MongoDB's official download domain, which is a standard and trusted source for this software, despite not being on a static whitelist; the installed files are binaries and data from the official vendor, not executed remote code or obfuscated payloads.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:27
"$pkgname-$pkgver.rpm::https://downloads.mongodb.com/compass/$_betaprefix$_pkgname-$_pkgver.x86_64.rpm"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Daniel Peukert <daniel@peukert.cc>
2
# Maintainer: "Amhairghin" Oscar Garcia Amor (https://ogarcia.me)
3
_pkgname='mongodb-compass-readonly'
4
_edition=' Readonly'
5
pkgname="$_pkgname-bin"
6
_pkgver='1.49.11'
7
pkgver="$(printf '%s' "$_pkgver" | tr '-' '.')"
8
pkgrel='1'
9
pkgdesc='The official GUI for MongoDB - Readonly Edition - binary version'
10
arch=('x86_64')
11
url='https://www.mongodb.com/products/compass'
12
license=('SSPL-1.0')
13
depends=(
14
# electron
15
'c-ares' 'dav1d' 'flac' 'fontconfig' 'freetype2' 'gcc-libs' 'glibc' 'gtk3'
16
'harfbuzz' 'icu' 'libdrm' 'libevent' 'libffi' 'libjpeg-turbo' 'libpng' 'libpulse'
17
'libwebp' 'libxml2' 'libxslt' 'minizip' 'nss' 'opus' 'zlib'
18
# compass
19
'krb5' 'libsecret'
20
)
21
optdepends=('org.freedesktop.secrets')
22
options=('!debug')
23
provides=("$_pkgname=$pkgver")
24
conflicts=("$_pkgname")
25
_betaprefix="$([[ "$_pkgname" =~ -beta$ ]] && printf 'beta/' || printf '')"
26
source=(
27
"$pkgname-$pkgver.rpm::https://downloads.mongodb.com/compass/$_betaprefix$_pkgname-$_pkgver.x86_64.rpm"
28
)
29
b2sums=('2a6de7fbd54417af8f242f225aadf69380f9c5fcf08e441935cc534d7f3482c03132a39f19fa0787401d3339c4181f91df2ae34e57d6dafeca4230f49acc1f6e')
30
31
check() {
32
_checkoutput="$(ELECTRON_OZONE_PLATFORM_HINT='auto' "$srcdir/usr/lib/$_pkgname/MongoDB Compass$_edition" --no-sandbox --version)"
33
printf '%s\n' "$_checkoutput"
34
printf '%s\n' "$_checkoutput" | grep -q "^MongoDB Compass$_edition $pkgver$"
35
}
36
37
package() {
38
cd "$srcdir/"
39
40
install -dm755 "$pkgdir/usr/lib/"
41
cp -r "usr/lib/$_pkgname/" "$pkgdir/usr/lib/$_pkgname/"
42
43
# Fix permissions
44
find "$pkgdir" -type d -exec chmod 755 {} +
45
find "$pkgdir" -type f -exec chmod 644 {} +
46
chmod +x "$pkgdir/usr/lib/$_pkgname/chrome_crashpad_handler"
47
chmod +x "$pkgdir/usr/lib/$_pkgname/chrome-sandbox"
48
chmod +x "$pkgdir/usr/lib/$_pkgname/MongoDB Compass$_edition"
49
50
install -dm755 "$pkgdir/usr/bin/"
51
ln -sf "/usr/lib/$_pkgname/MongoDB Compass$_edition" "$pkgdir/usr/bin/$_pkgname"
52
53
install -Dm644 "usr/share/applications/$_pkgname.desktop" "$pkgdir/usr/share/applications/$_pkgname.desktop"
54
install -Dm644 "usr/share/pixmaps/$_pkgname.png" "$pkgdir/usr/share/pixmaps/$_pkgname.png"
55
56
install -dm755 "$pkgdir/usr/share/licenses/$pkgname/"
57
58
ln -sf "/usr/lib/$_pkgname/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/SSPL-1.0"
59
ln -sf "/usr/lib/$_pkgname/LICENSES.chromium.html" "$pkgdir/usr/share/licenses/$pkgname/LICENSES.chromium.html"
60
}
61
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |