rstudio-desktop-daily-bin
maintainer chendaniely
· 7 votes
· scanned 2026-08-03 00:08:14.047287
MEDIUM
View on AUR ↗
Why flagged
The package downloads a prebuilt .deb binary from an unofficial AWS S3 bucket URL not directly tied to RStudio's official release infrastructure, creating a supply-chain risk if the host were compromised or the URL repurposed.
Triggered rules
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:29
source_x86_64=("https://s3.amazonaws.com/rstudio-ide-build/electron/jammy/amd64/rstudio-${pkgver_url}-amd64.deb")
MEDIUM
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 95%): The package downloads a prebuilt .deb binary from an unofficial AWS S3 bucket URL not directly tied to RStudio's official release infrastructure, creating a supply-chain risk if the host were compromised or the URL repurposed.
PKGBUILD
1 offending line(s) highlighted
1
# Submitter: chendaniely
2
#
3
# Maintainer: chendaniely <chendaniely@gmail.com>
4
# code adapted from: Meow < a.li.devtty at gmail dot com >
5
#
6
# Previous maintainer(s)
7
# Maintainer: pat-s <patrick.schratz@gmail.com>
8
#######################
9
10
pkgname=rstudio-desktop-daily-bin
11
pkgver=2026.08.0.daily.170
12
pkgver_url=2026.08.0-daily-170
13
pkgrel=2
14
pkgdesc="An integrated development environment (IDE) for R (binary version from RStudio official repository)"
15
arch=('x86_64')
16
license=('GPL')
17
url="http://www.rstudio.org/"
18
depends=('r' 'hicolor-icon-theme' 'libxcomposite' 'libxslt' 'shared-mime-info' 'libxrandr' 'openssl' 'postgresql-libs')
19
#makedepends=('patchelf')
20
optdepends=(
21
'pandoc: markdown support'
22
'x11-ssh-askpass: password dialog for ssh'
23
)
24
conflicts=('rstudio-desktop' 'rstudio-desktop-git' 'rstudio-desktop-bin' 'rstudio-desktop-preview-bin')
25
provides=("rstudio-desktop-daily=${pkgver}")
26
options=(!strip)
27
28
sha256sums_x86_64=('35691bfe22a95359102155c6e8c74f6852a213025dafa916fca5c46dca230bc5')
29
source_x86_64=("https://s3.amazonaws.com/rstudio-ide-build/electron/jammy/amd64/rstudio-${pkgver_url}-amd64.deb")
30
31
package() {
32
33
shopt -s extglob
34
35
msg "Converting debian package..."
36
37
ar x rstudio-${pkgver_url}-amd64.deb
38
39
cd "$srcdir"
40
tar Jxf data.tar.xz -C "$pkgdir"
41
install -dm755 "$pkgdir/usr/bin"
42
43
cd "$pkgdir/usr/lib/rstudio/resources/app/bin/quarto/bin/"
44
ln -sf /usr/bin/pandoc ./pandoc
45
#ln -sf /usr/bin/pandoc-citeproc ./
46
47
find "$pkgdir/usr" -type d -print0 | xargs -0 chmod 755
48
find "$pkgdir/usr" -type f -name '*.so.*' -print0 | xargs -0 chmod 644
49
50
cd "$pkgdir/usr/bin"
51
echo '#!/bin/sh
52
export QT_DIR=/usr/lib/rstudio/bin
53
export QT_PLUGIN_PATH=$QT_DIR/plugins
54
export QT_QPA_PLATFORM_PLUGIN_PATH=$QT_PLUGIN_PATH/platforms
55
export KDEDIRS=/usr
56
exec /usr/lib/rstudio/rstudio "$@"
57
' > "$pkgdir/usr/bin/rstudio-daily-bin"
58
chmod 755 "$pkgdir/usr/bin/rstudio-daily-bin"
59
60
sed -i 's|/usr/lib/rstudio/rstudio|/usr/bin/rstudio-daily-bin|' "$pkgdir/usr/share/applications/rstudio.desktop"
61
}
62
Changes since previous scan
--- PKGBUILD @ 2026-08-01 00:11+++ PKGBUILD @ 2026-08-03 00:08@@ -8,8 +8,8 @@ ####################### pkgname=rstudio-desktop-daily-bin-pkgver=2026.07.0.daily.138-pkgver_url=2026.07.0-daily-138+pkgver=2026.08.0.daily.170+pkgver_url=2026.08.0-daily-170 pkgrel=2 pkgdesc="An integrated development environment (IDE) for R (binary version from RStudio official repository)" arch=('x86_64')@@ -25,7 +25,7 @@ provides=("rstudio-desktop-daily=${pkgver}") options=(!strip) -sha256sums_x86_64=('8f02d41ce1e71e802c9860f482b677fc00415b4731907147be36bde003a18e09')+sha256sums_x86_64=('35691bfe22a95359102155c6e8c74f6852a213025dafa916fca5c46dca230bc5') source_x86_64=("https://s3.amazonaws.com/rstudio-ide-build/electron/jammy/amd64/rstudio-${pkgver_url}-amd64.deb") package() {Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | MEDIUM | 2 |
| 2026-08-02 00:16:08 | MEDIUM | 2 |
| 2026-08-01 09:20:18 | MEDIUM | 2 |
| 2026-08-01 00:11:18 | MEDIUM | 2 |
| 2026-07-31 17:18:23 | MEDIUM | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |