omnara-bin
MEDIUM
maintainer nihalxkumar
0 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The package downloads a prebuilt binary from a non-standard host (releases.omnara.com) with no source code available, creating a supply-chain risk if the host is compromised or the download is intercepted.
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:15
source_x86_64=("https://releases.omnara.com/${pkgver}/omnara-linux-x64")
Medium
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 95%): The package downloads a prebuilt binary from a non-standard host (releases.omnara.com) with no source code available, creating a supply-chain risk if the host is compromised or the download is intercepted.
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Nihal Kumar <2tv8xupqg at mozmail dot com>
2
# https://github.com/nihalxkumar/pkgbuilds
3
pkgname=omnara-bin
4
pkgver=0.23.0
5
pkgrel=2
6
pkgdesc="Claude Code & Codex AI coding agent — control AI agents from desktop or phone"
7
arch=('x86_64')
8
url="https://www.omnara.com/"
9
license=('custom') # closed-source proprietary binary
10
depends=('glibc')
11
provides=('omnara')
12
conflicts=('omnara')
13
options=('!strip' '!emptydirs') # prebuilt binary — do not strip
14
15
source_x86_64=("https://releases.omnara.com/${pkgver}/omnara-linux-x64")
16
sha256sums_x86_64=('ec4f1622bf8cc81719af3721881508debebc77621cef891821ddeafb241e505f')
17
18
package() {
19
cd "$srcdir"
20
21
# Install the binary to system PATH
22
install -Dm755 "omnara-linux-x64" "$pkgdir/usr/bin/omnara"
23
24
# Systemd user service upstream daemon behavior.
25
install -Dm644 /dev/stdin "$pkgdir/usr/lib/systemd/user/com.omnara.daemon.service" <<'SERVICE'
26
[Unit]
27
Description=Omnara CLI Background Daemon
28
After=network.target
29
30
[Service]
31
Type=simple
32
ExecStart=/usr/bin/omnara daemon run-service
33
Restart=on-failure
34
RestartSec=5
35
StandardOutput=append:%h/.omnara/logs/daemon/daemon.log
36
StandardError=append:%h/.omnara/logs/daemon/daemon.log
37
WorkingDirectory=%h
38
39
[Install]
40
WantedBy=default.target
41
SERVICE
42
43
# Post-install instructions
44
install -Dm644 /dev/stdin "$pkgdir/usr/share/doc/$pkgname/README.postinst" <<'MSG'
45
Omnara has been installed system-wide.
46
47
# Enable and start the background daemon (required for mobile control):
48
systemctl --user enable --now com.omnara.daemon.service
49
50
# Recommended: keep the daemon alive even when you log out
51
sudo loginctl enable-linger $USER
52
53
# Run Omnara in any project directory
54
omnara
55
56
Logs: ~/.omnara/logs/daemon/daemon.log
57
MSG
58
}
59
60
post_install() {
61
cat /usr/share/doc/omnara-bin/README.postinst
62
}
63
64
post_upgrade() {
65
post_install
66
}
67
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Medium | 2 |
| 2026-10-31 00:07:41 | Medium | 2 |
| 2026-10-30 00:29:30 | Medium | 2 |
| 2026-10-29 00:13:55 | Medium | 2 |
| 2026-10-28 00:06:54 | Medium | 2 |
| 2026-10-27 00:23:28 | Medium | 2 |
| 2026-10-26 00:12:40 | Medium | 2 |
| 2026-10-25 00:20:48 | Medium | 2 |
| 2026-10-24 00:14:55 | Medium | 2 |
| 2026-10-23 00:02:19 | Medium | 2 |
| 2026-10-22 00:13:10 | Medium | 2 |
| 2026-10-21 00:12:50 | Medium | 2 |
| 2026-10-20 00:10:31 | Medium | 2 |
| 2026-10-19 00:03:55 | Medium | 2 |
| 2026-10-18 00:06:55 | Medium | 2 |
| 2026-10-17 00:21:55 | Medium | 2 |
| 2026-10-16 00:12:47 | Medium | 2 |
| 2026-10-15 00:28:05 | Medium | 2 |
| 2026-10-14 00:06:47 | Medium | 2 |
| 2026-10-13 00:23:45 | Medium | 2 |