reeden

MEDIUM

maintainer duanluan 0 votes scanned 2026-08-21 21:19:14.007822

View on AUR

Why flagged

Prebuilt binary .deb downloaded from download.reeden.app (the project's own domain per the url= field), with a pinned sha256 checksum; the host is plausibly official but unverifiable for a low-vote, recently uploaded package, placing it at medium rather than low.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 source=("${_appname}-${pkgver}-linux-x86_64.deb::https://download.reeden.app/${_appname}/${pkgver}/${_appname}-${pkgver}-linux-x86_64.deb")

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 70%): Prebuilt binary .deb downloaded from download.reeden.app (the project's own domain per the url= field), with a pinned sha256 checksum; the host is plausibly official but unverifiable for a low-vote, recently uploaded package, placing it at medium rather than low.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: duanluan <duanluan@outlook.com>
    
      2
    
      3pkgname=reeden
    
      4_pkgname=reeden
    
      5_appname=Reeden
    
      6pkgver=1.39.1+737
    
      7pkgrel=1
    
      8pkgdesc='Modern cross-platform ebook reader (prebuilt binary)'
    
      9arch=('x86_64')
    
      10url='https://reeden.app/cn/download'
    
      11license=('NOASSERTION')
    
      12depends=('gtk3' 'libayatana-appindicator' 'sqlite' 'xdg-user-dirs')
    
      13provides=("reeden-bin=${pkgver}")
    
      14options=('!strip')
    
      15source=("${_appname}-${pkgver}-linux-x86_64.deb::https://download.reeden.app/${_appname}/${pkgver}/${_appname}-${pkgver}-linux-x86_64.deb")
    
      16sha256sums=('56d7f04ea11093608b04bc15869dc20114bf5f3b503bea37ff8fbb88e5f8ed1a')
    
      17
    
      18package() {
    
      19  local _extractdir
    
      20
    
      21  _extractdir="$(mktemp -d)"
    
      22  trap 'rm -rf "${_extractdir}"' EXIT
    
      23
    
      24  bsdtar -C "${_extractdir}" -xf "${srcdir}/${_appname}-${pkgver}-linux-x86_64.deb"
    
      25  bsdtar -C "${pkgdir}" -xf "${_extractdir}/data.tar.zst"
    
      26
    
      27  install -dm755 "${pkgdir}/usr/bin"
    
      28  ln -s '/usr/share/reeden/reeden' "${pkgdir}/usr/bin/reeden"
    
      29
    
      30  sed -i \
    
      31    -e 's/^Categories=.*/Categories=Office;Viewer;/' \
    
      32    "${pkgdir}/usr/share/applications/reeden.desktop"
    
      33}
    
      34

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-21 21:19:14	Medium	3
2026-08-21 21:15:20	Medium	3