navicat17-premium-zh-cn
MEDIUM
maintainer logan_reed
1 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The package downloads a prebuilt AppImage executable from a non-whitelisted host (dn.navicat.com), which is not a standard code forge or official project domain, creating a supply-chain risk if the host is compromised or the download is intercepted.
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:15
source_x86_64=("${_pkgname}-x86_64-${pkgver}.AppImage::https://dn.navicat.com/download/navicat17-premium-cs-x86_64.AppImage")
Medium
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 95%): The package downloads a prebuilt AppImage executable from a non-whitelisted host (dn.navicat.com), which is not a standard code forge or official project domain, creating a supply-chain risk if the host is compromised or the download is intercepted.
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: logan_reed <liulingzhang.work@icloud.com>
2
3
_pkgname=navicat17-premium-cs
4
pkgname=navicat17-premium-zh-cn
5
pkgver=18.0.3
6
pkgrel=1
7
pkgdesc="Navicat Premium is a multi-connection database development tool. (Chinese Simplified)"
8
arch=('x86_64' 'aarch64')
9
url='https://www.navicat.com.cn/products/navicat-premium'
10
license=('LicenseRef-Navicat')
11
depends=('fontconfig' 'freetype2' 'hicolor-icon-theme')
12
conflicts=('navicat' 'navicat-premium' 'navicat17-premium')
13
provides=("navicat=$pkgver")
14
source=("navicat.sh")
15
source_x86_64=("${_pkgname}-x86_64-${pkgver}.AppImage::https://dn.navicat.com/download/navicat17-premium-cs-x86_64.AppImage")
16
source_aarch64=("${_pkgname}-aarch64-${pkgver}.AppImage::https://dn.navicat.com/download/navicat17-premium-cs-aarch64.AppImage")
17
18
b2sums=('7c5ff753c2800d2dc7b0194d7ee5b4ac0b2e9d056fb69205e52b0c3e3c50d2335caaeca6ff9a3f41bd22d89e9f3c320dbbbacf965608a4d3e94d7bded942cf85')
19
b2sums_x86_64=('c633020961f2fabe7a37f5998f41644ec425010d98ef75ae42bce0e3cbd7488691b93740f1123c12a4a28cd65022f596bc5fb3c0bd3dd1acdf040cb29d53489f')
20
b2sums_aarch64=('a0891e62a0d9fa4613afc21e5fd2d91020a48723cc1993ca5fa8827abd362d601463e7eab446ed8ff5f56abe9c8a7276f7a63808f97b5a4171cdbf71bc3897c5')
21
22
options=('!strip' '!debug')
23
24
prepare() {
25
cd "${srcdir}/" && rm -rf "squashfs-root"
26
chmod +x "${srcdir}/${_pkgname}-${CARCH}-${pkgver}.AppImage"
27
"${srcdir}/${_pkgname}-${CARCH}-${pkgver}.AppImage" --appimage-extract
28
}
29
30
package() {
31
install -d "${pkgdir}/opt/${_pkgname}"
32
cp -a "${srcdir}/squashfs-root/." "${pkgdir}/opt/${_pkgname}/"
33
34
# Desktop entry
35
install -Dm644 "squashfs-root/navicat.desktop" \
36
"${pkgdir}/usr/share/applications/navicat.desktop"
37
sed -i 's|Icon=.*|Icon=navicat-icon|' "${pkgdir}/usr/share/applications/navicat.desktop"
38
39
# Icon
40
install -Dm644 "squashfs-root/navicat-icon.png" \
41
"${pkgdir}/usr/share/icons/hicolor/256x256/apps/navicat-icon.png"
42
43
# Launcher
44
install -Dm755 "${srcdir}/navicat.sh" "${pkgdir}/usr/bin/navicat"
45
46
# Remove Debian copyright files
47
rm -rf "${pkgdir}/opt/${_pkgname}/usr/share/doc"
48
rm -rf "${pkgdir}/opt/${_pkgname}/share/doc"
49
}
50
Changes since previous scan
--- PKGBUILD @ 2026-10-27 00:23+++ PKGBUILD @ 2026-11-01 00:21@@ -2,7 +2,7 @@ _pkgname=navicat17-premium-cs pkgname=navicat17-premium-zh-cn-pkgver=18.0.2+pkgver=18.0.3 pkgrel=1 pkgdesc="Navicat Premium is a multi-connection database development tool. (Chinese Simplified)" arch=('x86_64' 'aarch64')Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Medium | 2 |
| 2026-10-31 00:07:41 | Medium | 2 |
| 2026-10-30 00:29:30 | Medium | 2 |
| 2026-10-29 00:13:55 | Medium | 2 |
| 2026-10-28 00:06:54 | Medium | 2 |
| 2026-10-27 13:48:00 | Medium | 2 |
| 2026-10-27 00:23:28 | Medium | 2 |
| 2026-10-26 00:12:40 | Medium | 2 |
| 2026-10-25 00:20:48 | Medium | 2 |
| 2026-10-24 00:14:55 | Medium | 2 |
| 2026-10-23 00:02:19 | Medium | 2 |
| 2026-10-22 00:13:10 | Medium | 2 |
| 2026-10-21 00:12:50 | Medium | 2 |
| 2026-10-20 00:10:31 | Medium | 2 |
| 2026-10-19 00:03:55 | Medium | 2 |
| 2026-10-18 00:06:55 | Medium | 2 |
| 2026-10-17 00:21:55 | Medium | 2 |
| 2026-10-16 00:12:47 | Medium | 2 |
| 2026-10-15 00:28:05 | Medium | 2 |
| 2026-10-14 00:06:47 | Medium | 2 |