my-netexperts-bin

MEDIUM

maintainer netexperts 0 votes scanned 2026-10-27 11:50:11.790054

View on AUR

Why flagged

A prebuilt Electron binary tarball is downloaded from the vendor's own domain (netexperts.com.au) with a provided SHA256 checksum; the checksum mitigates swap risk, but it is still an unverifiable prebuilt executable from a small personal/company host rather than a well-known forge release infrastructure, making silent substitution a realistic concern.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source=('https://netexperts.com.au/downloads/My-NetExperts-1.0.0-linux-x64.tar.gz' 'my-netexperts.desktop' 'my-netexperts.png')

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 70%): A prebuilt Electron binary tarball is downloaded from the vendor's own domain (netexperts.com.au) with a provided SHA256 checksum; the checksum mitigates swap risk, but it is still an unverifiable prebuilt executable from a small personal/company host rather than a well-known forge release infrastructure, making silent substitution a realistic concern.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: NetExperts <support@netexperts.com.au>
    
      2pkgname=my-netexperts-bin
    
      3pkgver=1.0.0
    
      4pkgrel=1
    
      5pkgdesc='My NetExperts desktop application with current hosted interface'
    
      6arch=('x86_64')
    
      7url='https://netexperts.com.au'
    
      8license=('custom' 'MIT' 'BSD')
    
      9depends=('gtk3' 'nss' 'alsa-lib' 'libxss' 'libxtst' 'libcups' 'libdrm' 'mesa' 'libxkbcommon' 'at-spi2-core' 'xdg-utils')
    
      10provides=('my-netexperts')
    
      11conflicts=('my-netexperts')
    
      12options=('!strip' '!debug')
    
      13source=('https://netexperts.com.au/downloads/My-NetExperts-1.0.0-linux-x64.tar.gz' 'my-netexperts.desktop' 'my-netexperts.png')
    
      14sha256sums=('772bd88bdd4dec3a6a99afb3408a6535698e9e1f2af4b55cdb030dc285784b58' '2b733a9ae6e4954385e7914ce5cb17a7adb69ca2d7cb3b430af902d3ac6e6035' 'a9c54b6bbdd56d35cabea9be96d9e65738a9299e40ef2a922cd8e6175fb1be34')
    
      15package() {
    
      16 install -dm755 "$pkgdir/opt/my-netexperts" "$pkgdir/usr/bin"
    
      17 cp -a "$srcdir/my-netexperts/." "$pkgdir/opt/my-netexperts/"
    
      18 chmod 4755 "$pkgdir/opt/my-netexperts/chrome-sandbox"
    
      19 ln -s /opt/my-netexperts/my-netexperts "$pkgdir/usr/bin/my-netexperts"
    
      20 install -Dm644 "$srcdir/my-netexperts.desktop" "$pkgdir/usr/share/applications/my-netexperts.desktop"
    
      21 install -Dm644 "$srcdir/my-netexperts.png" "$pkgdir/usr/share/icons/hicolor/512x512/apps/my-netexperts.png"
    
      22 install -Dm644 "$srcdir/my-netexperts/LICENSE.electron.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE.electron.txt"
    
      23}
    
      24

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-27 11:50:11	Medium	3
2026-10-27 11:47:37	Medium	3