navicat17-premium-cs
MEDIUM
maintainer duanluan
1 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a prebuilt AppImage from a non-standard host (dn.navicat.com), which is an unverifiable executable binary; if the source were swapped, it could execute arbitrary code, constituting a supply-chain risk.
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:11
source_x86_64=("navicat17-premium-cs-x86_64-${pkgver}.AppImage::https://dn.navicat.com/download/navicat17-premium-cs-x86_64.AppImage")
Medium
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 95%): The package downloads a prebuilt AppImage from a non-standard host (dn.navicat.com), which is an unverifiable executable binary; if the source were swapped, it could execute arbitrary code, constituting a supply-chain risk.
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: duanluan <duanluan@outlook.com>
2
3
pkgname=navicat17-premium-cs
4
pkgver=17.3.10
5
pkgrel=1
6
pkgdesc='Navicat Premium is a multi-connection database development tool. (Chinese Simplified)'
7
arch=('x86_64' 'aarch64')
8
url='https://www.navicat.com.cn/products/navicat-premium'
9
license=('NOASSERTION')
10
options=('!strip')
11
source_x86_64=("navicat17-premium-cs-x86_64-${pkgver}.AppImage::https://dn.navicat.com/download/navicat17-premium-cs-x86_64.AppImage")
12
source_aarch64=("navicat17-premium-cs-aarch64-${pkgver}.AppImage::https://dn.navicat.com/download/navicat17-premium-cs-aarch64.AppImage")
13
sha256sums_x86_64=('e9d90e5f25127da984d26d48796b028d560f2559643a6e565f0d2df36cca149c')
14
sha256sums_aarch64=('7023cea7eaa5841f266e1d59fd9e17e6bca3cbd80c51cdd888486c952c04abba')
15
16
package() {
17
cd "${srcdir}"
18
19
chmod +x "${srcdir}/navicat17-premium-cs-${CARCH}-${pkgver}.AppImage"
20
"${srcdir}/navicat17-premium-cs-${CARCH}-${pkgver}.AppImage" --appimage-extract
21
22
install -dm755 "${pkgdir}/opt/${pkgname}"
23
cp -a "${srcdir}/squashfs-root/." "${pkgdir}/opt/${pkgname}/"
24
25
# Prefer Arch's system copies low-level libraries to avoid
26
# symbol-version conflicts with host libmount/libudev users.
27
rm -f \
28
"${pkgdir}/opt/${pkgname}/usr/lib/libsystemd.so"* \
29
"${pkgdir}/opt/${pkgname}/usr/lib/libudev.so"* \
30
"${pkgdir}/opt/${pkgname}/usr/lib/libblkid.so"* \
31
"${pkgdir}/opt/${pkgname}/usr/lib/libselinux.so"*
32
33
install -Dm644 "${srcdir}/squashfs-root/usr/share/applications/navicat.desktop" \
34
"${pkgdir}/usr/share/applications/navicat.desktop"
35
install -Dm644 "${srcdir}/squashfs-root/usr/share/icons/hicolor/256x256/apps/navicat-icon.png" \
36
"${pkgdir}/usr/share/icons/hicolor/256x256/apps/navicat-icon.png"
37
38
install -dm755 "${pkgdir}/usr/bin"
39
ln -s "/opt/${pkgname}/AppRun" "${pkgdir}/usr/bin/navicat"
40
41
sed -i \
42
-e 's|^Exec=.*|Exec=navicat %U|' \
43
-e 's|^Icon=.*|Icon=navicat-icon|' \
44
-e 's|^Categories=.*|Categories=Development;Database;|' \
45
"${pkgdir}/usr/share/applications/navicat.desktop"
46
}
47
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Medium | 2 |
| 2026-09-16 00:03:17 | Medium | 2 |
| 2026-09-15 00:25:31 | Medium | 2 |
| 2026-09-14 00:27:57 | Medium | 2 |
| 2026-09-13 00:19:54 | Medium | 2 |
| 2026-09-12 00:25:17 | Medium | 2 |
| 2026-09-11 00:19:22 | Medium | 2 |
| 2026-09-10 00:22:44 | Medium | 2 |
| 2026-09-09 00:04:09 | Medium | 2 |
| 2026-09-08 00:18:08 | Medium | 2 |
| 2026-09-07 00:30:15 | Medium | 2 |
| 2026-09-06 00:17:06 | Medium | 2 |
| 2026-09-05 00:16:27 | Medium | 2 |
| 2026-09-04 00:03:13 | Medium | 2 |
| 2026-09-03 00:15:47 | Medium | 2 |
| 2026-09-02 00:02:31 | Medium | 2 |
| 2026-09-01 00:11:19 | Medium | 2 |
| 2026-08-31 00:19:57 | Medium | 2 |
| 2026-08-30 00:04:14 | Medium | 2 |
| 2026-08-29 00:29:17 | Medium | 2 |