perssua-bin

MEDIUM

maintainer rafamedeiros 1 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads a prebuilt .deb binary from a non-standard, project-specific host (downloads.perssua.com), which presents a supply-chain risk if the source were compromised, as the binary is not built from source and could be silently replaced.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 source=("https://downloads.perssua.com/Perssua-${pkgver}-amd64.deb"

Medium AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 90%): The package downloads a prebuilt .deb binary from a non-standard, project-specific host (downloads.perssua.com), which presents a supply-chain risk if the source were compromised, as the binary is not built from source and could be silently replaced.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Rafael Medeiros <rafamedeiros0@gmail.com>
    
      2pkgname=perssua-bin
    
      3pkgver=0.27.5
    
      4pkgrel=1
    
      5pkgdesc="Your AI companion for LeetCode - because sometimes we all feel stupid"
    
      6arch=('x86_64')
    
      7url="https://perssua.com/"
    
      8license=('LicenseRef-proprietary')
    
      9provides=('perssua')
    
      10conflicts=('perssua')
    
      11depends=('gtk3' 'hicolor-icon-theme' 'libnotify' 'libsecret' 'libxss' 'libxtst' 'nss' 'util-linux-libs' 'xdg-utils')
    
      12optdepends=('libappindicator-gtk3: for system tray support')
    
      13options=('!strip' '!emptydirs')
    
      14install="${pkgname}.install"
    
      15source=("https://downloads.perssua.com/Perssua-${pkgver}-amd64.deb"
    
      16        "hyprland-perssua.conf")
    
      17sha256sums=('d66e6a59c1a314a668caa2a29ba94946c1c02b7116c0c2f6161def710c52a7f0'
    
      18            'SKIP')
    
      19
    
      20package() {
    
      21    # Extract data.tar.xz from the .deb archive
    
      22    bsdtar -xf data.tar.xz -C "${pkgdir}"
    
      23
    
      24    # Fix permissions
    
      25    chmod 755 "${pkgdir}/opt/Perssua/perssua"
    
      26
    
      27    # Create symlink in /usr/bin
    
      28    install -d "${pkgdir}/usr/bin"
    
      29    ln -s /opt/Perssua/perssua "${pkgdir}/usr/bin/perssua"
    
      30
    
      31    # Optional Hyprland snippet to disable backdrop blur on Perssua's overlay
    
      32    install -Dm644 "${srcdir}/hyprland-perssua.conf" \
    
      33        "${pkgdir}/usr/share/perssua/hyprland-perssua.conf"
    
      34}
    
      35

Changes since previous scan

--- PKGBUILD @ 2026-09-16 00:03
+++ PKGBUILD @ 2026-09-17 00:27
@@ -1,6 +1,6 @@
 # Maintainer: Rafael Medeiros <rafamedeiros0@gmail.com>
 pkgname=perssua-bin
-pkgver=0.27.1
+pkgver=0.27.5
 pkgrel=1
 pkgdesc="Your AI companion for LeetCode - because sometimes we all feel stupid"
 arch=('x86_64')
@@ -14,7 +14,7 @@
 install="${pkgname}.install"
 source=("https://downloads.perssua.com/Perssua-${pkgver}-amd64.deb"
         "hyprland-perssua.conf")
-sha256sums=('3ca1d4095c123366cf14f6c966c51ac3bdba5b03962c9c639d6e93fe79a7a460'
+sha256sums=('d66e6a59c1a314a668caa2a29ba94946c1c02b7116c0c2f6161def710c52a7f0'
             'SKIP')
 
 package() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Medium	2
2026-09-16 15:22:50	Medium	2
2026-09-16 00:03:17	Medium	2
2026-09-15 00:25:31	Medium	2
2026-09-14 17:17:35	Medium	2
2026-09-14 00:27:57	Medium	2
2026-09-13 00:19:54	Medium	2
2026-09-12 13:12:15	Medium	2
2026-09-12 00:25:17	Medium	2
2026-09-11 00:19:22	Medium	2
2026-09-10 00:22:44	Medium	2
2026-09-09 00:04:09	Medium	2
2026-09-08 00:18:08	Medium	2
2026-09-07 00:30:15	Medium	2
2026-09-06 00:17:06	Medium	2
2026-09-05 00:16:27	Medium	2
2026-09-04 00:03:13	Medium	2
2026-09-03 00:15:47	Medium	2
2026-09-02 00:02:31	Medium	2
2026-09-01 15:48:43	Medium	2