opentaikohub-bin

maintainer evatoth · 0 votes · scanned 2026-08-03 00:08:14.047287

MEDIUM

Why flagged The package installs a prebuilt .deb from GitHub releases, which is an unverifiable executable binary; if the source were swapped, it could lead to code execution.

Triggered rules

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

MEDIUM AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 90%): The package installs a prebuilt .deb from GitHub releases, which is an unverifiable executable binary; if the source were swapped, it could lead to code execution.

PKGBUILD

      1# Maintainer: Alfie Rayner <aa.rayner@outlook.com>
    
      2pkgname=opentaikohub-bin
    
      3_pkgname=OpenTaiko-Hub
    
      4pkgver=0.1.6
    
      5pkgrel=2
    
      6pkgdesc="Description of your app"
    
      7arch=('x86_64')
    
      8url="https://github.com/OpenTaiko/OpenTaiko-Hub"
    
      9license=('mit')
    
      10depends=('cairo' 'desktop-file-utils' 'gdk-pixbuf2' 'glib2' 'gtk3' 'hicolor-icon-theme' 'libsoup' 'pango' 'webkit2gtk-4.1')
    
      11options=('!strip' '!emptydirs')
    
      12install=${pkgname}.install
    
      13source_x86_64=("https://github.com/OpenTaiko/OpenTaiko-Hub/releases/download/v$pkgver/OpenTaiko.Hub_"$pkgver"_amd64.deb")
    
      14sha256sums_x86_64=('7fad267f8e1b8e75effe15fa60b7575d5613a6cfa7973441abcf156fde59b277')
    
      15package() {
    
      16    tar -xz -f data.tar.gz -C "${pkgdir}"
    
      17
    
      18    # Ищем десктоп-файл
    
      19    local desktop_file=$(find "${pkgdir}" -name "*.desktop")
    
      20
    
      21    # 1. Прописываем наши переменные окружения
    
      22    sed -i 's|Exec=OpenTaiko-Hub|Exec=env WEBKIT_DISABLE_COMPOSITING_MODE=1 GDK_BACKEND=x11 OpenTaiko-Hub|g' "$desktop_file"
    
      23
    
      24    # 2. Добавляем рабочую директорию, чтобы он видел настройки
    
      25    # Вставляем строку Path после Exec
    
      26    sed -i '/^Exec=/a Path=/usr/lib/OpenTaiko Hub/' "$desktop_file"
    
      27}
    
      28

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	MEDIUM	2
2026-08-02 00:16:08	MEDIUM	2
2026-08-01 00:11:18	MEDIUM	2
2026-07-31 00:14:10	MEDIUM	2
2026-07-30 17:15:21	MEDIUM	2
2026-06-18 16:11:54	CLEAN	0