sable-git

MEDIUM

maintainer ember-ana 1 votes scanned 2026-11-06 18:13:05.055048

View on AUR

Why flagged

A non-pip/npm package manager (pipx, uv, poetry, cargo install, go install, gem, conda…) fetches and builds an external package at build time, outside source=() and makepkg's checksums.

Triggered rules

Medium External install via pipx/uv/poetry/cargo/go/gem alt_pkg_manager_install

A non-pip/npm package manager (pipx, uv, poetry, cargo install, go install, gem, conda…) fetches and builds an external package at build time, outside source=() and makepkg's checksums.

PKGBUILD:59 cargo install wasm-bindgen-cli --version $(grep -zoP 'name = "wasm-bindgen"\nversion = "\K[^"]+' Cargo.lock) --root "$srcdir/$_pkgname"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: ember-ana <aur.public at following domain> (https://thei.rs)
    
      2_pkgname="sable"
    
      3pkgname="${_pkgname}-git"
    
      4pkgver=2.3.5.r53.g143577e
    
      5pkgrel=1
    
      6pkgdesc="An almost stable Matrix client."
    
      7arch=("x86_64")
    
      8url="https://git.sable.moe/SableClient/sable-next"
    
      9license=("AGPL-3.0-only")
    
      10depends=(
    
      11  # https://gitlab.archlinux.org/archlinux/packaging/packages/cinny-desktop/-/blob/7c248e0fff3f5883564236f56382630215a76855/PKGBUILD
    
      12  "openssl"
    
      13  # https://github.com/SableClient/Sable/blob/25434c2874adb130f80ce00b399a901149924740/scripts/cef/package.sh
    
      14  "libayatana-appindicator" "libpulse"
    
      15  # namcap
    
      16  "nss" "nspr" "libpipewire"
    
      17  # https://v2.tauri.app/distribute/aur/#publishing-to-the-arch-user-repository
    
      18  "cairo" "desktop-file-utils" "gdk-pixbuf2" "glib2" "gtk3"
    
      19  "hicolor-icon-theme" "libsoup3" "pango" "webkit2gtk-4.1"
    
      20)
    
      21makedepends=(
    
      22  # vcs
    
      23  "git"
    
      24  # tauri + frontend
    
      25  "nodejs>=24.0.0" "pnpm" "rust"
    
      26  # https://v2.tauri.app/start/prerequisites/#linux
    
      27  # https://github.com/SableClient/Sable/blob/25434c2874adb130f80ce00b399a901149924740/mise.tauri.toml#L42
    
      28  "librsvg" "xdotool" "curl" "wget"
    
      29  # calls wasm-opt during build
    
      30  "binaryen"
    
      31)
    
      32optdepends=(
    
      33  "libnotify: Notifications"
    
      34  "xdg-utils: Open links, files, etc"
    
      35)
    
      36source=(
    
      37  "${_pkgname}::git+${url}.git"
    
      38  "${_pkgname}.desktop"
    
      39  "${_pkgname}.sh"
    
      40)
    
      41b2sums=(
    
      42  "SKIP"
    
      43  "62eb6cad8ba4c101daa953dd5726ccc605def65cb725c26ae8288955261b59badbeae344c325e11072b13ee966b8fe56f5de96244593465bbab0d2b17281317c"
    
      44  "0eb2b542eb31cc6d944173344032aef75d2b68272f6b45d2a8008a4fcbfa12548d31ca3c794ccc761768034971681acb89b8f431ec0f90491170d9667029e97e"
    
      45)
    
      46options=('!lto' '!strip')
    
      47
    
      48provides=("sable")
    
      49conflicts=("sable")
    
      50
    
      51pkgver() {
    
      52  cd "$srcdir/$_pkgname"
    
      53  git describe --long --abbrev=7 --tags --match 'v*' | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
    
      54}
    
      55
    
      56build() {
    
      57  cd "$srcdir/$_pkgname"
    
      58  pnpm install --frozen-lockfile
    
      59  cargo install wasm-bindgen-cli --version $(grep -zoP 'name = "wasm-bindgen"\nversion = "\K[^"]+' Cargo.lock) --root "$srcdir/$_pkgname"
    
      60  mv "$srcdir/$_pkgname/bin"/* "$srcdir/$_pkgname/node_modules/.bin/"
    
      61  pnpm run build
    
      62  pnpm --dir electron package --linux --dir
    
      63}
    
      64
    
      65package() {
    
      66  cd "$srcdir/$_pkgname"
    
      67  install -d "$pkgdir/usr/lib/$_pkgname"
    
      68  cp -a electron/release/linux-unpacked/* "$pkgdir/usr/lib/$_pkgname/"
    
      69  find "$pkgdir/usr/lib/$_pkgname" -type d -exec chmod 755 {} +
    
      70  chmod 4755 "$pkgdir/usr/lib/$_pkgname/chrome-sandbox"
    
      71
    
      72  install -Dm644 "LICENSE" -t "$pkgdir/usr/share/licenses/$pkgname/"
    
      73  install -Dm644 "static/icons/logo.svg" "$pkgdir/usr/share/icons/hicolor/scalable/apps/$_pkgname.svg"
    
      74  for size in 32x32 64x64 128x128; do
    
      75  install -Dm644 "src-tauri/icons/$size.png" "$pkgdir/usr/share/icons/hicolor/${size}/apps/$_pkgname.png"
    
      76  done
    
      77  install -Dm644 "src-tauri/icons/128x128@2x.png" "$pkgdir/usr/share/icons/hicolor/256x256/apps/$_pkgname.png"
    
      78
    
      79  cd "$srcdir"
    
      80  install -Dm644 "sable.desktop" "$pkgdir/usr/share/applications/$_pkgname.desktop"
    
      81  install -Dm755 "sable.sh" "$pkgdir/usr/bin/$_pkgname"
    
      82}
    
      83

Changes since previous scan

--- PKGBUILD @ 2026-08-15 00:26
+++ PKGBUILD @ 2026-11-06 18:13
@@ -1,11 +1,11 @@
 # Maintainer: ember-ana <aur.public at following domain> (https://thei.rs)
 _pkgname="sable"
 pkgname="${_pkgname}-git"
-pkgver=1.20.0.r1044.gc160f50
-pkgrel=2
+pkgver=2.3.5.r53.g143577e
+pkgrel=1
 pkgdesc="An almost stable Matrix client."
 arch=("x86_64")
-url="https://github.com/SableClient/Sable"
+url="https://git.sable.moe/SableClient/sable-next"
 license=("AGPL-3.0-only")
 depends=(
   # https://gitlab.archlinux.org/archlinux/packaging/packages/cinny-desktop/-/blob/7c248e0fff3f5883564236f56382630215a76855/PKGBUILD
@@ -13,7 +13,7 @@
   # https://github.com/SableClient/Sable/blob/25434c2874adb130f80ce00b399a901149924740/scripts/cef/package.sh
   "libayatana-appindicator" "libpulse"
   # namcap
-  "nss" "nspr"
+  "nss" "nspr" "libpipewire"
   # https://v2.tauri.app/distribute/aur/#publishing-to-the-arch-user-repository
   "cairo" "desktop-file-utils" "gdk-pixbuf2" "glib2" "gtk3"
   "hicolor-icon-theme" "libsoup3" "pango" "webkit2gtk-4.1"
@@ -26,21 +26,24 @@
   # https://v2.tauri.app/start/prerequisites/#linux
   # https://github.com/SableClient/Sable/blob/25434c2874adb130f80ce00b399a901149924740/mise.tauri.toml#L42
   "librsvg" "xdotool" "curl" "wget"
+  # calls wasm-opt during build
+  "binaryen"
 )
 optdepends=(
   "libnotify: Notifications"
   "xdg-utils: Open links, files, etc"
 )
 source=(
-  "${_pkgname}::git+https://github.com/SableClient/Sable.git"
+  "${_pkgname}::git+${url}.git"
   "${_pkgname}.desktop"
   "${_pkgname}.sh"
 )
 b2sums=(
   "SKIP"
   "62eb6cad8ba4c101daa953dd5726ccc605def65cb725c26ae8288955261b59badbeae344c325e11072b13ee966b8fe56f5de96244593465bbab0d2b17281317c"
-  "206810829d415a052f9a71c987154b1ff32830f148ff7661c25f4a457b06e7b57360eb4b2991dfee50daf6c59efb503976606090d4010c0160270ce462d3d68c"
+  "0eb2b542eb31cc6d944173344032aef75d2b68272f6b45d2a8008a4fcbfa12548d31ca3c794ccc761768034971681acb89b8f431ec0f90491170d9667029e97e"
 )
+options=('!lto' '!strip')
 
 provides=("sable")
 conflicts=("sable")
@@ -53,17 +56,21 @@
 build() {
   cd "$srcdir/$_pkgname"
   pnpm install --frozen-lockfile
-  pnpm run tauri:cef build --no-updater
+  cargo install wasm-bindgen-cli --version $(grep -zoP 'name = "wasm-bindgen"\nversion = "\K[^"]+' Cargo.lock) --root "$srcdir/$_pkgname"
+  mv "$srcdir/$_pkgname/bin"/* "$srcdir/$_pkgname/node_modules/.bin/"
+  pnpm run build
+  pnpm --dir electron package --linux --dir
 }
 
 package() {
   cd "$srcdir/$_pkgname"
   install -d "$pkgdir/usr/lib/$_pkgname"
-  install -Dm755 "src-tauri/target/release/sable" "$pkgdir/usr/lib/$_pkgname/$_pkgname"
-  scripts/cef/copy-libs.sh release "$pkgdir/usr/lib/$_pkgname"
+  cp -a electron/release/linux-unpacked/* "$pkgdir/usr/lib/$_pkgname/"
+  find "$pkgdir/usr/lib/$_pkgname" -type d -exec chmod 755 {} +
+  chmod 4755 "$pkgdir/usr/lib/$_pkgname/chrome-sandbox"
 
   install -Dm644 "LICENSE" -t "$pkgdir/usr/share/licenses/$pkgname/"
-  install -Dm644 "public/res/svg/logo.svg" "$pkgdir/usr/share/icons/hicolor/scalable/apps/$_pkgname.svg"
+  install -Dm644 "static/icons/logo.svg" "$pkgdir/usr/share/icons/hicolor/scalable/apps/$_pkgname.svg"
   for size in 32x32 64x64 128x128; do
   install -Dm644 "src-tauri/icons/$size.png" "$pkgdir/usr/share/icons/hicolor/${size}/apps/$_pkgname.png"
   done

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-06 18:13:05	Medium	1
2026-08-15 00:26:13	Clean	0
2026-08-14 00:03:41	Low	2
2026-08-13 00:17:07	Low	2
2026-08-12 00:27:08	Low	2
2026-08-11 00:07:57	Low	2
2026-08-10 00:09:14	Low	2
2026-08-09 00:07:45	Low	2
2026-08-08 00:18:14	Low	2
2026-08-07 00:19:04	Low	2
2026-08-06 00:26:13	Low	2
2026-08-05 00:12:14	Low	2
2026-08-04 00:01:00	Low	2
2026-08-03 00:08:14	Low	2
2026-08-02 00:16:08	Low	2
2026-08-01 00:11:18	Low	2
2026-07-31 23:19:22	Low	2
2026-07-31 19:18:43	Low	2
2026-07-31 17:18:23	Low	2