sublime-merge

MEDIUM
maintainer freswa 30 votes scanned 2026-09-14 11:16:56.753038
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:12 source=("https://download.sublimetext.com/sublime_merge_build_${pkgver}_x64.tar.xz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Frederik Schwan <freswa at archlinux dot org>
2# Contributor: Honghao Li <im@rasphino.cn>
3
4pkgname=sublime-merge
5pkgver=2130
6pkgrel=1
7pkgdesc='Meet a new Git Client, from the makers of Sublime Text'
8arch=('x86_64')
9url='https://www.sublimemerge.com'
10license=('custom')
11depends=('gtk3')
12source=("https://download.sublimetext.com/sublime_merge_build_${pkgver}_x64.tar.xz"
13 "https://download.sublimetext.com/sublime_merge_build_${pkgver}_x64.tar.xz.asc"
14 LICENSE)
15b2sums=('7c0b98b897adeb50397565237e48d4b5cd4e5cc88526f7efcab06c2ff7ec4c66017fc46ffb556e7e47cd0963f6bc682ffda416404e2a13b10a841411a6c20e7e'
16 'SKIP'
17 'e17f9223fc423b385d20f78fd54bf8bdc0722134cb89e1a12f9105a4d130e9ae12f81997904b52ce6d6db45810d23db53c8f90c8a9bc1ac0ae4a8532d1097396')
18validpgpkeys=('EBC733B78AAB352DC773BF857FE2FA12CF6E38F2')
19
20package() {
21 cd sublime_merge-x64-tar
22 install -dm755 "${pkgdir}"/usr/bin
23
24 # Install binaries
25 install -Dm755 -t "${pkgdir}"/opt/sublime_merge/ \
26 crash_handler \
27 git-credential-sublime \
28 ssh-askpass-sublime \
29 sublime_merge
30
31 # link executable to /usr/bin/
32 ln -s /opt/sublime_merge/sublime_merge "${pkgdir}"/usr/bin/smerge
33
34 # copy misc files
35 cp --preserve=mode -r -t "${pkgdir}"/opt/sublime_merge/ \
36 changelog.txt \
37 Packages \
38 Icon
39
40 # link app icons to system folder
41 for res in 256x256 128x128 48x48 32x32 16x16; do
42 install -dm755 "${pkgdir}"/usr/share/icons/hicolor/${res}/apps
43 ln -s /opt/sublime_merge/Icon/${res}/sublime-merge.png "${pkgdir}"/usr/share/icons/hicolor/${res}/apps/sublime-merge.png
44 done
45
46 # install desktop file and license
47 install -Dm644 -t "${pkgdir}"/usr/share/applications/ "${srcdir}"/sublime_merge-x64-tar/sublime_merge.desktop
48 install -Dm644 -t "${pkgdir}"/usr/share/licenses/${pkgname}/ "${srcdir}"/LICENSE
49}
50

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-09-14 11:16
@@ -2,7 +2,7 @@
# Contributor: Honghao Li <im@rasphino.cn>
pkgname=sublime-merge
-pkgver=2125
+pkgver=2130
pkgrel=1
pkgdesc='Meet a new Git Client, from the makers of Sublime Text'
arch=('x86_64')
@@ -12,7 +12,7 @@
source=("https://download.sublimetext.com/sublime_merge_build_${pkgver}_x64.tar.xz"
"https://download.sublimetext.com/sublime_merge_build_${pkgver}_x64.tar.xz.asc"
LICENSE)
-b2sums=('40e54cc863e080ace661aa5bd1ea8d6332987ae2e9b78d95f7de33757ba2bda56745a86ad56d9a6cf21231f478769321fcff21f5aa7c2bbc68669d6b3c068c46'
+b2sums=('7c0b98b897adeb50397565237e48d4b5cd4e5cc88526f7efcab06c2ff7ec4c66017fc46ffb556e7e47cd0963f6bc682ffda416404e2a13b10a841411a6c20e7e'
'SKIP'
'e17f9223fc423b385d20f78fd54bf8bdc0722134cb89e1a12f9105a4d130e9ae12f81997904b52ce6d6db45810d23db53c8f90c8a9bc1ac0ae4a8532d1097396')
validpgpkeys=('EBC733B78AAB352DC773BF857FE2FA12CF6E38F2')

Scan history

Scanned at (UTC)SeverityRules
2026-09-14 11:16:56 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-19 18:54:17 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion