perplexity-bin

MEDIUM

maintainer gonwex 0 votes scanned 2026-10-19 09:29:19.880393

View on AUR

Why flagged

Prebuilt proprietary binary (.deb) downloaded from packages.perplexity.ai — a plausibly official but non-whitelisted vendor host that cannot be independently verified as the canonical release infrastructure; the checksum is present but the binary runs with Chromium sandbox privileges and is entirely unauditable, making a silent swap moderately risky.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:25 source=("perplexity-${pkgver}-${_build}-amd64.deb::https://packages.perplexity.ai/deb/pool/main/p/perplexity/perplexity_${pkgver}%2Bbuild${_build}_amd64.deb"

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 70%): Prebuilt proprietary binary (.deb) downloaded from packages.perplexity.ai — a plausibly official but non-whitelisted vendor host that cannot be independently verified as the canonical release infrastructure; the checksum is present but the binary runs with Chromium sandbox privileges and is entirely unauditable, making a silent swap moderately risky.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: gonwex <gonwe at qq dot com>
    
      2
    
      3pkgname=perplexity-bin
    
      4pkgver=26.10.2
    
      5pkgrel=1
    
      6_build=117519
    
      7_sha256=e32f2ece9e3482655ba8b279ce4fcad833f4bb8703b2b7049a293f9ee1077935
    
      8pkgdesc='Official Perplexity desktop app and Portable Computer for Linux'
    
      9arch=('x86_64')
    
      10url='https://www.perplexity.ai/hub/products/portable-computer'
    
      11license=('LicenseRef-Proprietary')
    
      12depends=('alsa-lib' 'at-spi2-core' 'bash' 'bubblewrap' 'cairo' 'dbus' 'expat'
    
      13         'gcc-libs' 'glib2' 'glibc' 'gtk3' 'hicolor-icon-theme' 'libcups'
    
      14         'libdrm' 'libnotify' 'libsecret' 'libx11' 'libxcb' 'libxcomposite'
    
      15         'libxdamage' 'libxext' 'libxfixes' 'libxkbcommon' 'libxrandr'
    
      16         'libxss' 'libxtst' 'mesa' 'nspr' 'nss' 'pango' 'psmisc'
    
      17         'systemd-libs' 'util-linux-libs' 'vulkan-icd-loader' 'xdg-utils')
    
      18optdepends=('libappindicator-gtk3: system tray integration'
    
      19            'docker: optional local model runtime'
    
      20            'nvidia-container-toolkit: optional NVIDIA local model runtime'
    
      21            'xorg-xwayland: Chinese input compatibility on Wayland desktops')
    
      22provides=('perplexity')
    
      23conflicts=('perplexity')
    
      24options=('!strip' '!debug')
    
      25source=("perplexity-${pkgver}-${_build}-amd64.deb::https://packages.perplexity.ai/deb/pool/main/p/perplexity/perplexity_${pkgver}%2Bbuild${_build}_amd64.deb"
    
      26        'perplexity.sh'
    
      27        'LICENSE.upstream')
    
      28sha256sums=("${_sha256}"
    
      29            '22691a4a1e35211bf91be48da130b577a8a7bac86d4f239f112d478d6130ebef'
    
      30            '7b1ee6559351f65e1ff609b329b3c5023d4e293b1044003995fe05b8f4831e04')
    
      31
    
      32package() {
    
      33  bsdtar -xf "${srcdir}/data.tar.xz" -C "${pkgdir}"
    
      34
    
      35  # Debian's postinst enables an Ubuntu-only Docker/NVIDIA installer. Arch
    
      36  # manages these optional dependencies separately; do not install that unit.
    
      37  rm -rf "${pkgdir}/usr/lib/systemd" "${pkgdir}/lib/systemd"
    
      38  rmdir "${pkgdir}/usr/lib" "${pkgdir}/lib" 2>/dev/null || true
    
      39
    
      40  install -Dm755 "${srcdir}/perplexity.sh" "${pkgdir}/usr/bin/perplexity"
    
      41  sed -i 's|^Exec=.*|Exec=perplexity %U|' \
    
      42    "${pkgdir}/usr/share/applications/perplexity.desktop"
    
      43  sed -i 's|^Comment=.*|Comment=Official Perplexity desktop app and Portable Computer|' \
    
      44    "${pkgdir}/usr/share/applications/perplexity.desktop"
    
      45
    
      46  # Arch supports unprivileged user namespaces; keep Chromium's sandbox on.
    
      47  chmod 755 "${pkgdir}/opt/Perplexity/chrome-sandbox"
    
      48  chmod 644 "${pkgdir}/opt/Perplexity/LICENSE.electron.txt" \
    
      49    "${pkgdir}/opt/Perplexity/LICENSES.chromium.html"
    
      50  install -Dm644 "${srcdir}/LICENSE.upstream" \
    
      51    "${pkgdir}/usr/share/licenses/${pkgname}/README"
    
      52  ln -s /opt/Perplexity/LICENSE.electron.txt \
    
      53    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.electron.txt"
    
      54  ln -s /opt/Perplexity/LICENSES.chromium.html \
    
      55    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSES.chromium.html"
    
      56}
    
      57

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-19 09:29:19	Medium	3
2026-10-19 09:25:06	Medium	3