omnidb-app

MEDIUM

maintainer tippfehlr 5 votes scanned 2026-08-26 00:12:07.713121

View on AUR

Why flagged

The package downloads a prebuilt Debian binary from GitHub releases, which is an unverifiable executable artifact; if the source were swapped, it could lead to code execution, constituting a supply-chain risk.

Triggered rules

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

Medium AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 90%): The package downloads a prebuilt Debian binary from GitHub releases, which is an unverifiable executable artifact; if the source were swapped, it could lead to code execution, constituting a supply-chain risk.

PKGBUILD

      1# Maintainer: madflow <madflow@web.de>
    
      2pkgname="omnidb-app"
    
      3pkgver=2.17.0
    
      4pkgrel=1
    
      5pkgdesc="Web tool for database management. This is a standalone version that can be used to connect to any database server."
    
      6arch=('x86_64')
    
      7url="https://omnidb.org/"
    
      8license=('MIT')
    
      9depends=('python')
    
      10source_x86_64=("https://github.com/OmniDB/OmniDB/releases/download/${pkgver}/omnidb-app_${pkgver}-debian-amd64.deb")
    
      11options=("!strip")
    
      12sha256sums_x86_64=('4fa5c2d2a7e79b408538633031c7c0fbdc216e74d862f0c86267cf703d42aec4')
    
      13
    
      14package() {
    
      15    cd "$pkgdir"
    
      16    tar xf "$srcdir/data.tar.xz"
    
      17}
    
      18

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-26 00:12:07	Medium	2
2026-08-25 23:28:42	Medium	2
2026-06-18 16:11:54	Clean	0