rstudio-desktop-daily-bin
LOW
maintainer chendaniely
7 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a prebuilt .deb from RStudio's official S3 bucket, which is a legitimate source for RStudio binaries; while the host is not whitelisted, it is plausibly official and the package installs only verified data and binaries from the project's own release infrastructure.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt .deb from RStudio's official S3 bucket, which is a legitimate source for RStudio binaries; while the host is not whitelisted, it is plausibly official and the package installs only verified data and binaries from the project's own release infrastructure.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:29
source_x86_64=("https://s3.amazonaws.com/rstudio-ide-build/electron/jammy/amd64/rstudio-${pkgver_url}-amd64.deb")
PKGBUILD
1 offending line(s) highlighted
1
# Submitter: chendaniely
2
#
3
# Maintainer: chendaniely <chendaniely@gmail.com>
4
# code adapted from: Meow < a.li.devtty at gmail dot com >
5
#
6
# Previous maintainer(s)
7
# Maintainer: pat-s <patrick.schratz@gmail.com>
8
#######################
9
10
pkgname=rstudio-desktop-daily-bin
11
pkgver=2026.10.0.daily.77
12
pkgver_url=2026.10.0-daily-77
13
pkgrel=2
14
pkgdesc="An integrated development environment (IDE) for R (binary version from RStudio official repository)"
15
arch=('x86_64')
16
license=('GPL')
17
url="http://www.rstudio.org/"
18
depends=('r' 'hicolor-icon-theme' 'libxcomposite' 'libxslt' 'shared-mime-info' 'libxrandr' 'openssl' 'postgresql-libs')
19
#makedepends=('patchelf')
20
optdepends=(
21
'pandoc: markdown support'
22
'x11-ssh-askpass: password dialog for ssh'
23
)
24
conflicts=('rstudio-desktop' 'rstudio-desktop-git' 'rstudio-desktop-bin' 'rstudio-desktop-preview-bin')
25
provides=("rstudio-desktop-daily=${pkgver}")
26
options=(!strip)
27
28
sha256sums_x86_64=('5c020103f46cfdd24d74a17c2b92a954f425e5586e37a2e43323d4aa3795bdc9')
29
source_x86_64=("https://s3.amazonaws.com/rstudio-ide-build/electron/jammy/amd64/rstudio-${pkgver_url}-amd64.deb")
30
31
package() {
32
33
shopt -s extglob
34
35
msg "Converting debian package..."
36
37
ar x rstudio-${pkgver_url}-amd64.deb
38
39
cd "$srcdir"
40
tar Jxf data.tar.xz -C "$pkgdir"
41
install -dm755 "$pkgdir/usr/bin"
42
43
cd "$pkgdir/usr/lib/rstudio/resources/app/bin/quarto/bin/"
44
ln -sf /usr/bin/pandoc ./pandoc
45
#ln -sf /usr/bin/pandoc-citeproc ./
46
47
find "$pkgdir/usr" -type d -print0 | xargs -0 chmod 755
48
find "$pkgdir/usr" -type f -name '*.so.*' -print0 | xargs -0 chmod 644
49
50
cd "$pkgdir/usr/bin"
51
echo '#!/bin/sh
52
export QT_DIR=/usr/lib/rstudio/bin
53
export QT_PLUGIN_PATH=$QT_DIR/plugins
54
export QT_QPA_PLATFORM_PLUGIN_PATH=$QT_PLUGIN_PATH/platforms
55
export KDEDIRS=/usr
56
exec /usr/lib/rstudio/rstudio "$@"
57
' > "$pkgdir/usr/bin/rstudio-daily-bin"
58
chmod 755 "$pkgdir/usr/bin/rstudio-daily-bin"
59
60
sed -i 's|/usr/lib/rstudio/rstudio|/usr/bin/rstudio-daily-bin|' "$pkgdir/usr/share/applications/rstudio.desktop"
61
}
62
Changes since previous scan
--- PKGBUILD @ 2026-09-16 00:03+++ PKGBUILD @ 2026-09-17 00:27@@ -8,8 +8,8 @@ ####################### pkgname=rstudio-desktop-daily-bin-pkgver=2026.10.0.daily.70-pkgver_url=2026.10.0-daily-70+pkgver=2026.10.0.daily.77+pkgver_url=2026.10.0-daily-77 pkgrel=2 pkgdesc="An integrated development environment (IDE) for R (binary version from RStudio official repository)" arch=('x86_64')@@ -25,7 +25,7 @@ provides=("rstudio-desktop-daily=${pkgver}") options=(!strip) -sha256sums_x86_64=('e60c39d6d52a1a4cb46f1f1d37db1565b2275c003417f8fa6c2f363738cc2d38')+sha256sums_x86_64=('5c020103f46cfdd24d74a17c2b92a954f425e5586e37a2e43323d4aa3795bdc9') source_x86_64=("https://s3.amazonaws.com/rstudio-ide-build/electron/jammy/amd64/rstudio-${pkgver_url}-amd64.deb") package() {Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 11:22:36 | Medium | 1 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 11:16:56 | Medium | 1 |
| 2026-09-14 00:27:57 | Medium | 2 |
| 2026-09-13 11:14:35 | Medium | 2 |
| 2026-09-13 00:19:54 | Medium | 2 |
| 2026-09-12 11:11:46 | Medium | 2 |
| 2026-09-12 00:25:17 | Medium | 2 |
| 2026-09-11 11:22:29 | Medium | 2 |
| 2026-09-11 00:19:22 | Medium | 2 |
| 2026-09-10 00:22:44 | Medium | 2 |
| 2026-09-09 21:20:09 | Medium | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 09:59:47 | Medium | 1 |
| 2026-09-05 00:16:27 | Medium | 2 |