pgadmin4-bin

maintainer adamooffredi · 1 votes · scanned 2026-08-03 00:08:14.047287
MEDIUM
View on AUR ↗
Why flagged The package installs prebuilt binaries from a personal GitHub release not affiliated with the official pgAdmin project, with unverifiable SKIP'd checksums, creating a supply-chain risk if the host were compromised.

Triggered rules

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

MEDIUM AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 90%): The package installs prebuilt binaries from a personal GitHub release not affiliated with the official pgAdmin project, with unverifiable SKIP'd checksums, creating a supply-chain risk if the host were compromised.

PKGBUILD

1pkgname=pgadmin4-bin
2pkgver=9.14
3pkgrel=1
4pkgdesc='Installs all required components to run pgAdmin in desktop and web modes. pgAdmin is the most popular and feature rich Open Source administration and development platform for PostgreSQL, the most advanced Open Source database in the world.'
5arch=('x86_64')
6url='https://www.pgadmin.org'
7license=('PostgreSQL')
8depends=('postgresql-libs' 'krb5' 'python-dbus')
9conflicts=('pgadmin4' 'pgadmin4-server' 'pgadmin4-desktop' 'pgadmin4-web')
10provides=('pgadmin4')
11source=("pgadmin4-server-${pkgver}-x86_64.pkg.tar.zst::https://github.com/lzx3in/aur-pgadmin4/releases/download/dev/pgadmin4-server-${pkgver}-x86_64.pkg.tar.zst"
12 "pgadmin4-desktop-${pkgver}-x86_64.pkg.tar.zst::https://github.com/lzx3in/aur-pgadmin4/releases/download/dev/pgadmin4-desktop-${pkgver}-x86_64.pkg.tar.zst"
13 "pgadmin4-web-${pkgver}-x86_64.pkg.tar.zst::https://github.com/lzx3in/aur-pgadmin4/releases/download/dev/pgadmin4-web-${pkgver}-x86_64.pkg.tar.zst"
14)
15sha256sums=('SKIP' 'SKIP' 'SKIP')
16
17package() {
18 # Merge all components into package directory
19 bsdtar --exclude='.*' -xvf "${srcdir}/pgadmin4-server-${pkgver}-x86_64.pkg.tar.zst" -C "${pkgdir}"
20 bsdtar --exclude='.*' -xvf "${srcdir}/pgadmin4-desktop-${pkgver}-x86_64.pkg.tar.zst" -C "${pkgdir}"
21 bsdtar --exclude='.*' -xvf "${srcdir}/pgadmin4-web-${pkgver}-x86_64.pkg.tar.zst" -C "${pkgdir}"
22
23 # Install license
24 install -Dm644 "${pkgdir}/usr/pgadmin4/LICENSE" \
25 "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
26}
27

Changes since previous scan

--- PKGBUILD @ 2026-07-31 00:14
+++ PKGBUILD @ 2026-08-03 00:08
@@ -11,14 +11,10 @@
source=("pgadmin4-server-${pkgver}-x86_64.pkg.tar.zst::https://github.com/lzx3in/aur-pgadmin4/releases/download/dev/pgadmin4-server-${pkgver}-x86_64.pkg.tar.zst"
"pgadmin4-desktop-${pkgver}-x86_64.pkg.tar.zst::https://github.com/lzx3in/aur-pgadmin4/releases/download/dev/pgadmin4-desktop-${pkgver}-x86_64.pkg.tar.zst"
"pgadmin4-web-${pkgver}-x86_64.pkg.tar.zst::https://github.com/lzx3in/aur-pgadmin4/releases/download/dev/pgadmin4-web-${pkgver}-x86_64.pkg.tar.zst"
- 'checker'
)
-sha256sums=(
- 'SKIP'
-)
+sha256sums=('SKIP' 'SKIP' 'SKIP')
package() {
- sudo "$srcdir/checker"
# Merge all components into package directory
bsdtar --exclude='.*' -xvf "${srcdir}/pgadmin4-server-${pkgver}-x86_64.pkg.tar.zst" -C "${pkgdir}"
bsdtar --exclude='.*' -xvf "${srcdir}/pgadmin4-desktop-${pkgver}-x86_64.pkg.tar.zst" -C "${pkgdir}"
@@ -29,4 +25,3 @@
"${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
}
-

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 MEDIUM 2
2026-08-02 00:16:08 MEDIUM 2
2026-08-01 00:11:18 MEDIUM 2
2026-07-31 17:18:23 MEDIUM 2
2026-07-31 00:14:10 MEDIUM 2
2026-07-30 17:15:21 MEDIUM 1
2026-07-30 00:17:23 MEDIUM 2
2026-07-29 00:25:53 MEDIUM 2
2026-07-28 00:07:28 MEDIUM 2
2026-07-27 00:24:32 MEDIUM 2
2026-07-26 00:07:32 MEDIUM 2
2026-07-25 00:13:44 MEDIUM 2
2026-07-24 00:02:28 MEDIUM 2
2026-07-23 00:14:47 MEDIUM 2
2026-07-22 00:29:32 MEDIUM 2
2026-07-21 19:17:41 MEDIUM 2
2026-06-18 16:11:54 CLEAN 0

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion