sublime-text-dev

LOW

maintainer SunRed 514 votes scanned 2026-09-25 17:12:25.570634

View on AUR

Why flagged

The package downloads official Sublime Text binaries from the project's own domain (download.sublimetext.com), which is a legitimate source despite not being on the analyzer's whitelist; the build process is transparent and installs only the official binary and wrapper scripts.

Triggered rules

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads official Sublime Text binaries from the project's own domain (download.sublimetext.com), which is a legitimate source despite not being on the analyzer's whitelist; the build process is transparent and installs only the official binary and wrapper scripts.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:18 source_x86_64=("${pkgname//-/_}_${pkgver/./_}_${pkgrel}_x64.tar.xz::https://download.sublimetext.com/sublime_text_build_${pkgver:2}_x64.tar.xz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Manuel Hüsers <aur@huesers.de>
    
      2# Contributor: Sander Boom <sanderboom@gmail.com>
    
      3# Contributor: realitygaps <realitygaps at yahoo dot com>
    
      4
    
      5pkgname=sublime-text-dev
    
      6pkgver=4.4214
    
      7pkgrel=1
    
      8pkgdesc='Sophisticated text editor for code, html and prose - dev build'
    
      9arch=('x86_64' 'aarch64')
    
      10url='https://www.sublimetext.com/dev'
    
      11license=('LicenseRef-custom')
    
      12depends=('libpng' 'gtk3')
    
      13conflicts=('sublime-text')
    
      14provides=('sublime-text')
    
      15install=${pkgname}.install
    
      16
    
      17source=("${pkgname}.sh")
    
      18source_x86_64=("${pkgname//-/_}_${pkgver/./_}_${pkgrel}_x64.tar.xz::https://download.sublimetext.com/sublime_text_build_${pkgver:2}_x64.tar.xz")
    
      19source_aarch64=("${pkgname//-/_}_${pkgver/./_}_${pkgrel}_arm64.tar.xz::https://download.sublimetext.com/sublime_text_build_${pkgver:2}_arm64.tar.xz")
    
      20
    
      21sha512sums=('ac56e9b7dddaebb3d222795cfc644109c93cc3f79695b8f9ee56022c74fe04a1134dd54cab07c74ff1f96b783cb3dbc026c16095552f1d2dd83115ea274dc2e9')
    
      22sha512sums_x86_64=('11afd925fc08c5e8ceed9c8054bbdde21f8907010b198fb76f831cb6168fec53ade3a8066d487534b310a9cad0fb13562b639a1283c72221501ca25513a12541')
    
      23sha512sums_aarch64=('748adab937257176364a23b662a43668c7e0e8a4a367a8ba63665452dde750773793684cb76ed742ff28077e75bbf705cc02f6ddf534a5116f774197d8c1d347')
    
      24
    
      25prepare() {
    
      26	sed -i -e "s|@ST_PATH@|/opt/sublime_text|g" "${pkgname}.sh"
    
      27	sed -i -e 's#/opt/sublime_text/sublime_text#/usr/bin/subl#g' 'sublime_text/sublime_text.desktop'
    
      28	sed -i -e '\#^StartupNotify=#a StartupWMClass=subl' 'sublime_text/sublime_text.desktop'
    
      29}
    
      30
    
      31package() {
    
      32	install -dm755 "${pkgdir}/opt"
    
      33	cp --preserve=mode -r 'sublime_text' "${pkgdir}/opt/sublime_text"
    
      34	rm -f "${pkgdir}/opt/sublime_text/sublime_text.desktop"
    
      35
    
      36	for res in 128x128 16x16 256x256 32x32 48x48; do
    
      37		install -dm755 "${pkgdir}/usr/share/icons/hicolor/${res}/apps"
    
      38		ln -s "/opt/sublime_text/Icon/${res}/sublime-text.png" "${pkgdir}/usr/share/icons/hicolor/${res}/apps/sublime-text.png"
    
      39	done
    
      40
    
      41	install -dm755 "${pkgdir}/usr/share/applications"
    
      42	install -Dm644 'sublime_text/sublime_text.desktop' "${pkgdir}/usr/share/applications/sublime_text.desktop"
    
      43
    
      44	install -dm755 "${pkgdir}/usr/bin"
    
      45	install -Dm755 "${pkgname}.sh" "${pkgdir}/usr/bin/subl"
    
      46}
    
      47

Changes since previous scan

--- PKGBUILD @ 2026-06-19 23:51
+++ PKGBUILD @ 2026-09-25 17:12
@@ -3,12 +3,12 @@
 # Contributor: realitygaps <realitygaps at yahoo dot com>
 
 pkgname=sublime-text-dev
-pkgver=4.4205
+pkgver=4.4214
 pkgrel=1
 pkgdesc='Sophisticated text editor for code, html and prose - dev build'
 arch=('x86_64' 'aarch64')
 url='https://www.sublimetext.com/dev'
-license=('custom')
+license=('LicenseRef-custom')
 depends=('libpng' 'gtk3')
 conflicts=('sublime-text')
 provides=('sublime-text')
@@ -19,8 +19,8 @@
 source_aarch64=("${pkgname//-/_}_${pkgver/./_}_${pkgrel}_arm64.tar.xz::https://download.sublimetext.com/sublime_text_build_${pkgver:2}_arm64.tar.xz")
 
 sha512sums=('ac56e9b7dddaebb3d222795cfc644109c93cc3f79695b8f9ee56022c74fe04a1134dd54cab07c74ff1f96b783cb3dbc026c16095552f1d2dd83115ea274dc2e9')
-sha512sums_x86_64=('ba7288d08d094a8745d30a191ba5f2b3f6d9d0fbc2a15ec3936bc13c4ebd9dba6aaf152660f3c209173b40ac56a221c9de607f0e2b93021c9129f1f8b97857a0')
-sha512sums_aarch64=('8556d613694f844b6721c4dfd3da556075b1b38cabfdc1839912d70ad1b5686357c0f4f526a5c87464ed376f784e95c646bd2e706018561d0157933cd317ccb8')
+sha512sums_x86_64=('11afd925fc08c5e8ceed9c8054bbdde21f8907010b198fb76f831cb6168fec53ade3a8066d487534b310a9cad0fb13562b639a1283c72221501ca25513a12541')
+sha512sums_aarch64=('748adab937257176364a23b662a43668c7e0e8a4a367a8ba63665452dde750773793684cb76ed742ff28077e75bbf705cc02f6ddf534a5116f774197d8c1d347')
 
 prepare() {
 	sed -i -e "s|@ST_PATH@|/opt/sublime_text|g" "${pkgname}.sh"

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-25 17:12:25	Low	2
2026-06-19 23:51:18	Clean	2
2026-06-19 19:07:35	Medium	2
2026-06-18 16:11:54	Low	1