palemoon-gtk3

MEDIUM

maintainer zebra2711 4 votes scanned 2026-10-09 04:10:27.772257

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:32 source=(git+"https://repo.palemoon.org/MoonchildProductions/${_repo}?signed#commit=${_commit}"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Zebar2711 <zebra2711t@gmail.com>
    
      2# Contributor: Michal Wojdyla < micwoj9292 at gmail dot com >
    
      3# Contributor: WorMzy Tykashi <wormzy.tykashi@gmail.com>
    
      4# Contributor: artiom <a.mv at gmx dot fr>
    
      5# Contributor: ilikenwf
    
      6# Contributor: American_Jesus
    
      7# Contributor: Mufflone
    
      8# Contributor: switchnode
    
      9
    
      10### Enable NPAPI plugins
    
      11: "${_npapi:=""}"
    
      12
    
      13pkgname=palemoon-gtk3
    
      14_pkgname=palemoon
    
      15_repo=Pale-Moon
    
      16epoch=1
    
      17pkgver=35.0.2
    
      18# Commit ID can be found at https://repo.palemoon.org/MoonchildProductions/Pale-Moon/tags
    
      19_commit=964e969389
    
      20pkgrel=1
    
      21pkgdesc="Open source web browser based on Firefox focusing on efficiency."
    
      22arch=('i686' 'x86_64')
    
      23url="https://www.palemoon.org/"
    
      24license=('MPL-2.0')
    
      25provides=('palemoon')
    
      26conflicts=('palemoon')
    
      27depends=('gtk3' 'dbus-glib' 'desktop-file-utils' 'libxt' 'mime-types' 'alsa-lib')
    
      28makedepends=('python' 'unzip' 'zip' 'yasm' 'libpulse' 'git')
    
      29optdepends=('libpulse: PulseAudio audio driver'
    
      30            'ffmpeg: various video and audio support'
    
      31	          'gtk2: Required for NPAPI plugins')
    
      32source=(git+"https://repo.palemoon.org/MoonchildProductions/${_repo}?signed#commit=${_commit}"
    
      33        git+"https://repo.palemoon.org/MoonchildProductions/UXP"
    
      34        mozconfig.in)
    
      35validpgpkeys=('3DAD8CD107197488D2A2A0BD40481E7B8FCF9CEC')
    
      36sha1sums=('5794fe0b1fe96a90a405ac935b07f70883ab716a'
    
      37          'SKIP'
    
      38          '1b8d0a61a6239f05a0b33e19b51429ca4933fa52')
    
      39sha256sums=('a317040b1916b7f5170236c7a96d25f3b77be868bf7e0e4c7ae1b1b5a137631d'
    
      40            'SKIP'
    
      41            '8b7740ae6cf141d959029acf15cc4cd7a67e4b1679871d8812454655a0ef0361')
    
      42
    
      43if [ "$_npapi" = "yes" ]; then
    
      44  makedepends+=('gtk2')
    
      45fi
    
      46
    
      47prepare() {
    
      48  sed 's#%SRCDIR%#'"${srcdir}"'#g' mozconfig.in > mozconfig
    
      49  if [ "$_npapi" != "yes" ]; then
    
      50    cat >> "$srcdir/mozconfig" <<EOF
    
      51ac_add_options --disable-npapi
    
      52EOF
    
      53  fi
    
      54  cd ${_repo}
    
      55  git submodule init
    
      56  git config submodule.platform.url "${srcdir}/UXP"
    
      57  git -c protocol.file.allow=always submodule update
    
      58}
    
      59
    
      60build() {
    
      61  cd ${_repo}
    
      62
    
      63  # Remove option not supported by ld.gold to prevent configure failure
    
      64  export LDFLAGS="${LDFLAGS/-Wl,-z,pack-relative-relocs/}"
    
      65  export MOZBUILD_STATE_PATH="${srcdir}/mozbuild"
    
      66  export MOZCONFIG="${srcdir}/mozconfig"
    
      67  export CPPFLAGS="${CPPFLAGS} -O2"
    
      68
    
      69  ./mach build
    
      70}
    
      71
    
      72package() {
    
      73  cd pmbuild
    
      74  make package
    
      75  cd dist
    
      76  install -d "${pkgdir}"/usr/{bin,lib}
    
      77  cp -r palemoon/ "${pkgdir}/usr/lib/${_pkgname}"
    
      78  cat > "${pkgdir}/usr/bin/palemoon" << EOF
    
      79#!/bin/bash
    
      80
    
      81# Override system env to avoid that unable to open app
    
      82# SIGSEGV bug detail:
    
      83# gdk_x11_window_get_xid:
    
      84# assertion 'GDK_IS_X11_WINDOW (window)' failed
    
      85export GDK_BACKEND=x11
    
      86
    
      87exec /lib/palemoon/palemoon "\${@}"
    
      88EOF
    
      89  chmod +x "${pkgdir}/usr/bin/palemoon"
    
      90
    
      91  # icons
    
      92  install -Dm644 palemoon/browser/chrome/icons/default/default16.png \
    
      93    "${pkgdir}/usr/share/icons/hicolor/16x16/apps/${_pkgname}.png"
    
      94  install -Dm644 palemoon/browser/chrome/icons/default/default32.png \
    
      95    "${pkgdir}/usr/share/icons/hicolor/32x32/apps/${_pkgname}.png"
    
      96  install -Dm644 palemoon/browser/chrome/icons/default/default48.png \
    
      97    "${pkgdir}/usr/share/icons/hicolor/48x48/apps/${_pkgname}.png"
    
      98  install -Dm644 palemoon/browser/icons/mozicon128.png \
    
      99    "${pkgdir}/usr/share/icons/hicolor/128x128/apps/${_pkgname}.png"
    
      100
    
      101  # install desktop file
    
      102  install -Dm644 "${srcdir}/${_repo}/palemoon/branding/official/palemoon.desktop" "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
    
      103}
    
      104

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-09 04:10
@@ -14,10 +14,10 @@
 _pkgname=palemoon
 _repo=Pale-Moon
 epoch=1
-pkgver=34.2.2
+pkgver=35.0.2
 # Commit ID can be found at https://repo.palemoon.org/MoonchildProductions/Pale-Moon/tags
-_commit=9210d7e558
-pkgrel=2
+_commit=964e969389
+pkgrel=1
 pkgdesc="Open source web browser based on Firefox focusing on efficiency."
 arch=('i686' 'x86_64')
 url="https://www.palemoon.org/"
@@ -33,10 +33,10 @@
         git+"https://repo.palemoon.org/MoonchildProductions/UXP"
         mozconfig.in)
 validpgpkeys=('3DAD8CD107197488D2A2A0BD40481E7B8FCF9CEC')
-sha1sums=('704546936d9b90b96294008357913cc8915f4195'
+sha1sums=('5794fe0b1fe96a90a405ac935b07f70883ab716a'
           'SKIP'
           '1b8d0a61a6239f05a0b33e19b51429ca4933fa52')
-sha256sums=('59b061b1bf2874ee8164775bae2931ec2c324fa9602ff206dac4b8dfd012a5c2'
+sha256sums=('a317040b1916b7f5170236c7a96d25f3b77be868bf7e0e4c7ae1b1b5a137631d'
             'SKIP'
             '8b7740ae6cf141d959029acf15cc4cd7a67e4b1679871d8812454655a0ef0361')
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-09 04:10:27	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1