msedit-mod-bin

MEDIUM

maintainer MaxWagner 0 votes scanned 2026-10-06 08:02:16.298752

View on AUR

Why flagged

The package installs a prebuilt binary from a non-official, personal fork's GitHub release without a verifiable build process, creating a supply-chain risk if the release artifact is tampered with or swapped.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 90%): The package installs a prebuilt binary from a non-official, personal fork's GitHub release without a verifiable build process, creating a supply-chain risk if the release artifact is tampered with or swapped.

PKGBUILD

      1# Maintainer: Vladimir Maryasov <mx.wg@yandex.ru>
    
      2#
    
      3# Prebuilt (compiler-free) package of the maryasov modified Microsoft Edit.
    
      4# The binary is produced by the `release` GitHub Actions workflow in the fork
    
      5# (branch `mk`) and published to the rolling `nightly` GitHub Release:
    
      6#   https://github.com/maryasov/edit/releases/tag/nightly
    
      7#
    
      8# Install:  makepkg -si
    
      9# Update:   after a new `mk` push, refresh checksums with `updpkgsums`
    
      10#           (or `makepkg -g >> PKGBUILD`), then `makepkg -si`.
    
      11#           For a no-fuss rolling setup you may set sha256sums to 'SKIP'
    
      12#           (accepts any content from your own CI).
    
      13
    
      14_pkgbase=msedit
    
      15pkgname="$_pkgbase-mod-bin"
    
      16pkgver=2.0.0.r505.gfd2e67a
    
      17pkgrel=1
    
      18pkgdesc="A simple editor for simple needs (Microsoft Edit) — maryasov modified build (prebuilt)"
    
      19arch=('x86_64')
    
      20url="https://github.com/maryasov/edit"
    
      21license=('MIT')
    
      22depends=('icu')
    
      23provides=("$_pkgbase")
    
      24conflicts=("$_pkgbase" "$_pkgbase-git" "$_pkgbase-mod-git")
    
      25source_x86_64=("$_pkgbase-x86_64.tar.zst::https://github.com/maryasov/edit/releases/download/nightly/msedit-x86_64.tar.zst")
    
      26sha256sums_x86_64=('b87d2931b1e7e3a35de378d15cbfaf94680c9fe3f7ca1ba0a166d17913b5c273')
    
      27
    
      28package() {
    
      29	cd "$srcdir"
    
      30	install -Dm755 msedit          "$pkgdir/usr/bin/$_pkgbase"
    
      31	install -Dm644 msedit.1        "$pkgdir/usr/share/man/man1/$_pkgbase.1"
    
      32	install -Dm644 msedit.desktop  "$pkgdir/usr/share/applications/$_pkgbase.desktop"
    
      33	install -Dm644 msedit.svg      "$pkgdir/usr/share/icons/hicolor/scalable/apps/$_pkgbase.svg"
    
      34	install -Dm644 LICENSE         "$pkgdir/usr/share/licenses/$_pkgbase/LICENSE"
    
      35}

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 08:02:16	Medium	2