munder-difflin-bin
LOW
maintainer fuero
0 votes
scanned 2026-09-24 13:43:45.914206
Why flagged
The package installs a prebuilt AppImage from the project's official GitHub releases, which is a normal distribution method for Electron apps; the source is verifiable and the build process is transparent, posing no active threat.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt AppImage from the project's official GitHub releases, which is a normal distribution method for Electron apps; the source is verifiable and the build process is transparent, posing no active threat.
PKGBUILD
1
_pkgname=munder-difflin
2
pkgname=${_pkgname}-bin
3
# renovate: datasource=github-releases pkgName=chaitanyagiri/munder-difflin
4
pkgver=0.5.2
5
pkgrel=1
6
pkgdesc="Agent harness to run an office of your clones"
7
arch=("x86_64")
8
license=("proprietary")
9
url="https://munderdiffl.in"
10
_appimage=Munder-Difflin-${pkgver}-linux-x86_64.AppImage
11
options=(!strip)
12
noextract=("${_appimage}")
13
sha256sums=('e8637b7a98d7e8b417a25ed78f4e61beec6a42813f0890848caaac8953c7130a')
14
15
source=(
16
#"https://app.harnessmd.com/releases/${_appimage}"
17
"https://github.com/chaitanyagiri/munder-difflin/releases/download/v${pkgver}/${_appimage}"
18
)
19
20
prepare() {
21
chmod u+x ${_appimage}
22
./${_appimage} --appimage-extract
23
}
24
25
package() {
26
local instdir="/usr/lib/${pkgname}"
27
install -dm755 "$pkgdir/usr/share/applications"
28
install -dm755 "$pkgdir/usr/bin"
29
sed -e '/Exec=/d' -e "\$a Exec=/usr/bin/${_pkgname}" squashfs-root/${_pkgname}.desktop \
30
> "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
31
32
cat > ${pkgdir}/usr/bin/${_pkgname} << EOF
33
#/!bin/bash
34
set -euo pipefail
35
exec ${instdir}/${_pkgname} "$@"
36
EOF
37
chmod 0755 ${pkgdir}/usr/bin/${_pkgname}
38
39
rm -rf squashfs-root/usr/lib
40
rm -f squashfs-root/${_pkgname}.desktop
41
install -d "${pkgdir}/usr/share"
42
mv squashfs-root/usr/share/* ${pkgdir}/usr/share/
43
rm -rf squashfs-root/usr
44
45
# Full app tree (bundles its own Electron — no system electron dep needed).
46
# chrome-sandbox is left non-setuid: Electron uses the unprivileged
47
# user-namespace sandbox on Arch (kernel.unprivileged_userns_clone=1).
48
install -dm755 "${pkgdir}$instdir"
49
cp -r squashfs-root/. "${pkgdir}$instdir/"
50
chmod -R u=rwX,go=rX "${pkgdir}$instdir" "${pkgdir}/usr/share/"
51
chmod 0755 ${pkgdir}${instdir}/${_pkgname}
52
}
53
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-24 13:43:45 | Low | 2 |