pen-dev-appimage

LOW

maintainer mathix 0 votes scanned 2026-09-28 11:20:45.263512

View on AUR

Why flagged

The package downloads prebuilt AppImages from the project's official GitHub releases, which is a normal distribution method; the AppImages are not executed during build but are installed as-is, and all sources are properly checksummed, making the risk low despite the AppImage format's usual opacity.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt AppImages from the project's official GitHub releases, which is a normal distribution method; the AppImages are not executed during build but are installed as-is, and all sources are properly checksummed, making the risk low despite the AppImage format's usual opacity.

PKGBUILD

      1# Maintainer: Arnaud Gissinger <agissing@student.42.fr>
    
      2pkgname=pen-dev-appimage
    
      3pkgver=1.2.14
    
      4pkgrel=1
    
      5pkgdesc='Pen: AI-powered design canvas (formerly Pencil) (appimage)'
    
      6arch=('x86_64' 'aarch64')
    
      7url='https://www.pen.dev'
    
      8license=('LicenseRef-Pen-EULA')
    
      9provides=("pen-dev=$pkgver" "pencil-dev=$pkgver")
    
      10conflicts=('pen-dev' 'pen-dev-bin' 'pencil-dev' 'pencil-dev-bin' 'pencil-dev-appimage')
    
      11options=('!strip' '!debug')
    
      12depends=('fuse2' 'glibc' 'hicolor-icon-theme' 'zlib')
    
      13makedepends=('python' 'squashfs-tools')
    
      14_release="https://github.com/highagency/pen-desktop-releases/releases/download/v${pkgver}"
    
      15source=('pen-dev.desktop' 'pen-dev.png' 'LICENSE' 'extract-appimage.py')
    
      16sha256sums=(
    
      17    '8d8a5cacedc15daea8974cbf6e33edaace4b9542a2117cf1df082dd413a00138'
    
      18    '5898e0189970c8995fc14978ad9b91483d787d2842a01369e29da928b49cc75a'
    
      19    '42b82acedd61dfb095f44aaadbc58b703fabaa1c25d60b6e133231a0c70c8c53'
    
      20    'c488ed6256fd9663637e95d5e5e8632b523d22e5f873145c76ccf016d409081d'
    
      21)
    
      22source_x86_64=("${_release}/Pen-${pkgver}-linux-x86_64.AppImage")
    
      23sha256sums_x86_64=('512ee5eea9797aacee452f9569b54d875c6c3a49f397700d906b9a82f633411b')
    
      24source_aarch64=("${_release}/Pen-${pkgver}-linux-arm64.AppImage")
    
      25sha256sums_aarch64=('3a19cbf95cf9ce123047d08128df19f32b82eb2cde6f7faeb54bc670f528ad85')
    
      26
    
      27noextract=("Pen-${pkgver}-linux-x86_64.AppImage" "Pen-${pkgver}-linux-arm64.AppImage")
    
      28
    
      29prepare() {
    
      30    local upstream_arch=x86_64
    
      31    [[ $CARCH == aarch64 ]] && upstream_arch=arm64
    
      32    rm -rf "$srcdir/squashfs-root"
    
      33    python "$srcdir/extract-appimage.py" "Pen-$pkgver-linux-$upstream_arch.AppImage" "$srcdir/squashfs-root"
    
      34}
    
      35
    
      36package() {
    
      37    local upstream_arch=x86_64 mcp_arch=x64
    
      38    if [[ $CARCH == aarch64 ]]; then
    
      39        upstream_arch=arm64
    
      40        mcp_arch=arm64
    
      41    fi
    
      42    install -Dm755 "$srcdir/Pen-$pkgver-linux-$upstream_arch.AppImage" "$pkgdir/opt/pen-dev-appimage/pen-dev.AppImage"
    
      43    install -d "$pkgdir/usr/bin"
    
      44    # Match upstream's AppImage desktop launcher; pass all user arguments through.
    
      45    cat > "$pkgdir/usr/bin/pen-dev" <<'LAUNCHER'
    
      46#!/bin/sh
    
      47exec /opt/pen-dev-appimage/pen-dev.AppImage --no-sandbox "$@"
    
      48LAUNCHER
    
      49    chmod 755 "$pkgdir/usr/bin/pen-dev"
    
      50    ln -s pen-dev "$pkgdir/usr/bin/pencil-dev"
    
      51    install -Dm755 "$srcdir/squashfs-root/resources/app.asar.unpacked/out/mcp-server-linux-$mcp_arch" "$pkgdir/opt/pen-dev-appimage/mcp-server"
    
      52    install -Dm644 "$srcdir/pen-dev.desktop" "$pkgdir/usr/share/applications/pen-dev.desktop"
    
      53    install -Dm644 "$srcdir/pen-dev.png" "$pkgdir/usr/share/icons/hicolor/512x512/apps/pen-dev.png"
    
      54    install -Dm644 "$srcdir/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      55}
    
      56

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-28 11:20:45	Low	2