palemoon-gtk3-bin
LOW
maintainer xiota
5 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source downloads a prebuilt binary from the project's official but non-whitelisted release host; while the host is not standard, it is plausibly owned by the project, and the package installs only verified binaries and data files without executing remote code.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source downloads a prebuilt binary from the project's official but non-whitelisted release host; while the host is not standard, it is plausibly owned by the project, and the package installs only verified binaries and data files without executing remote code.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:31
"palemoon-$pkgver.desktop"::"https://repo.palemoon.org/MoonchildProductions/Pale-Moon/raw/tag/${pkgver}_Release/palemoon/branding/official/palemoon.desktop" -
PKGBUILD:32
"https://rm-eu.palemoon.org/release/palemoon-${pkgver}.linux-x86_64-gtk3.tar.xz"{,.sig}
PKGBUILD
2 offending line(s) highlighted
1
# Maintainer: aur.chaotic.cx
2
# Contributor: Michal Wojdyla < micwoj9292 at gmail dot com >
3
# Contributor: Bernhard Landauer <oberon@manjaro.org>
4
# Contributor: WorMzy Tykashi <wormzy.tykashi@gmail.com>
5
# Contributor: korrode <korrode at gmail>
6
# Contributor: sumt <sumt at sci dot fi>
7
8
_pkgname="palemoon"
9
pkgname="$_pkgname-gtk3-bin"
10
epoch=1
11
pkgver=34.3.2.1
12
pkgrel=1
13
pkgdesc="Open source web browser based on Firefox focusing on efficiency"
14
url="https://www.palemoon.org/"
15
license=('MPL-2.0')
16
arch=('x86_64')
17
18
depends=(
19
'gtk3'
20
)
21
optdepends=(
22
'ffmpeg: record, convert, and stream audio and video'
23
)
24
25
provides=("$_pkgname")
26
conflicts=("$_pkgname")
27
28
options=('!strip')
29
30
source=(
31
"palemoon-$pkgver.desktop"::"https://repo.palemoon.org/MoonchildProductions/Pale-Moon/raw/tag/${pkgver}_Release/palemoon/branding/official/palemoon.desktop"
32
"https://rm-eu.palemoon.org/release/palemoon-${pkgver}.linux-x86_64-gtk3.tar.xz"{,.sig}
33
)
34
sha256sums=('b3803b30b5e6b9589387b7162cd24247da242fe77c0aed0d09bc51338d36d7d8'
35
'1c4d36b47fd9998a99057e34c3b83ebca61a402938ada1c9f25b30215d70c3b9'
36
'SKIP')
37
validpgpkeys=(
38
'439F46F42C6AE3D23CF52E70865E6C87C65285EC' # T. Wine
39
'3DAD8CD107197488D2A2A0BD40481E7B8FCF9CEC' # Moonchild, see https://forum.palemoon.org/viewtopic.php?f=1&t=7176
40
)
41
42
package() {
43
mkdir -pm755 "$pkgdir"/usr/{bin,lib}
44
cp -r palemoon/ "$pkgdir/usr/lib/palemoon"
45
ln -s ../lib/palemoon/palemoon "$pkgdir/usr/bin/palemoon"
46
47
install -Dm644 "palemoon-$pkgver.desktop" "$pkgdir/usr/share/applications/palemoon.desktop"
48
49
local _hicolor="$pkgdir/usr/share/icons/hicolor"
50
install -Dm644 palemoon/browser/chrome/icons/default/default16.png "$_hicolor/16x16/apps/palemoon.png"
51
install -Dm644 palemoon/browser/chrome/icons/default/default32.png "$_hicolor/32x32/apps/palemoon.png"
52
install -Dm644 palemoon/browser/chrome/icons/default/default48.png "$_hicolor/48x48/apps/palemoon.png"
53
install -Dm644 palemoon/browser/icons/mozicon128.png "$_hicolor/128x128/apps/palemoon.png"
54
}
55
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |