netexperts-mail-bin

MEDIUM

maintainer netexperts 0 votes scanned 2026-10-27 11:50:11.790054

View on AUR

Why flagged

A prebuilt binary tarball is downloaded from the vendor's own domain (netexperts.com.au) with a provided checksum, but it is an unofficial/personal company host distributing a closed-source Electron app binary that cannot be independently verified; the checksum mitigates swap risk somewhat, but the binary runs with setuid chrome-sandbox and comes from a non-established, low-vote package on a personal company server.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source=('https://netexperts.com.au/downloads/NetExperts-Mail-1.0.0-linux-x64.tar.gz' 'netexperts-mail.desktop' 'netexperts-mail.png')

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 70%): A prebuilt binary tarball is downloaded from the vendor's own domain (netexperts.com.au) with a provided checksum, but it is an unofficial/personal company host distributing a closed-source Electron app binary that cannot be independently verified; the checksum mitigates swap risk somewhat, but the binary runs with setuid chrome-sandbox and comes from a non-established, low-vote package on a personal company server.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: NetExperts <support@netexperts.com.au>
    
      2pkgname=netexperts-mail-bin
    
      3pkgver=1.0.0
    
      4pkgrel=1
    
      5pkgdesc='NetExperts Mail desktop application with current hosted interface'
    
      6arch=('x86_64')
    
      7url='https://netexperts.com.au'
    
      8license=('custom' 'MIT' 'BSD')
    
      9depends=('gtk3' 'nss' 'alsa-lib' 'libxss' 'libxtst' 'libcups' 'libdrm' 'mesa' 'libxkbcommon' 'at-spi2-core' 'xdg-utils')
    
      10provides=('netexperts-mail')
    
      11conflicts=('netexperts-mail')
    
      12options=('!strip' '!debug')
    
      13source=('https://netexperts.com.au/downloads/NetExperts-Mail-1.0.0-linux-x64.tar.gz' 'netexperts-mail.desktop' 'netexperts-mail.png')
    
      14sha256sums=('97e540cd6a393d3b86f8c3538856b27b135ee7fd68acc5d4d63aaa6cac5e849f' '6816e722964e80023e44b492b60c9437647a50c1e0d4556c94c3e772a28d9af8' 'f6bfd24c64d39ce831b192a6a08664dfd1a830010eb797ce67d815687cde5295')
    
      15package() {
    
      16 install -dm755 "$pkgdir/opt/netexperts-mail" "$pkgdir/usr/bin"
    
      17 cp -a "$srcdir/netexperts-mail/." "$pkgdir/opt/netexperts-mail/"
    
      18 chmod 4755 "$pkgdir/opt/netexperts-mail/chrome-sandbox"
    
      19 ln -s /opt/netexperts-mail/netexperts-mail "$pkgdir/usr/bin/netexperts-mail"
    
      20 install -Dm644 "$srcdir/netexperts-mail.desktop" "$pkgdir/usr/share/applications/netexperts-mail.desktop"
    
      21 install -Dm644 "$srcdir/netexperts-mail.png" "$pkgdir/usr/share/icons/hicolor/512x512/apps/netexperts-mail.png"
    
      22 install -Dm644 "$srcdir/netexperts-mail/LICENSE.electron.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE.electron.txt"
    
      23}
    
      24

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-27 11:50:11	Medium	3
2026-10-27 11:47:37	Medium	3