tamery-bin

MEDIUM

maintainer letstri 0 votes scanned 2026-10-18 21:24:45.186703

View on AUR

Why flagged

Prebuilt binary (.deb) downloaded from the project's own domain (download.tamery.app), but it is a closed-source, unverifiable executable from a low-visibility vendor with few AUR votes; the checksum is present and pinned, reducing swap risk, but the binary runs with full user privileges and cannot be audited, making this a medium-risk supply-chain concern typical of unofficial binary packages.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:37 source_x86_64=("tamery-${pkgver}.deb::https://download.tamery.app/versions/${pkgver}/linux/deb/x64")

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 70%): Prebuilt binary (.deb) downloaded from the project's own domain (download.tamery.app), but it is a closed-source, unverifiable executable from a low-visibility vendor with few AUR votes; the checksum is present and pinned, reducing swap risk, but the binary runs with full user privileges and cannot be audited, making this a medium-risk supply-chain concern typical of unofficial binary packages.

PKGBUILD

1 offending line(s) highlighted

      1pkgname=tamery-bin
    
      2pkgver=0.99.0
    
      3pkgrel=1
    
      4pkgdesc="AI-powered tool for working with Postgres, MySQL, MSSQL, ClickHouse and SQLite."
    
      5arch=('x86_64')
    
      6url="https://tamery.app"
    
      7license=('AGPL-3.0-or-later')
    
      8depends=(
    
      9  'alsa-lib'
    
      10  'at-spi2-core'
    
      11  'cairo'
    
      12  'dbus'
    
      13  'expat'
    
      14  'gcc-libs'
    
      15  'glib2'
    
      16  'glibc'
    
      17  'gtk3'
    
      18  'hicolor-icon-theme'
    
      19  'libcups'
    
      20  'libx11'
    
      21  'libxcb'
    
      22  'libxcomposite'
    
      23  'libxdamage'
    
      24  'libxext'
    
      25  'libxfixes'
    
      26  'libxkbcommon'
    
      27  'libxrandr'
    
      28  'mesa'
    
      29  'nspr'
    
      30  'nss'
    
      31  'pango'
    
      32  'systemd-libs'
    
      33)
    
      34provides=('tamery')
    
      35conflicts=('tamery')
    
      36options=('!strip' '!emptydirs')
    
      37source_x86_64=("tamery-${pkgver}.deb::https://download.tamery.app/versions/${pkgver}/linux/deb/x64")
    
      38sha256sums_x86_64=('267d0cbe76b623d13d9d4c15203f4362ae30ba7cff4b0a0cdfd78bc9b1d52f3e')
    
      39
    
      40package() {
    
      41  bsdtar -xf data.tar.xz -C "${pkgdir}"
    
      42
    
      43  install -dm755 "${pkgdir}/usr/bin"
    
      44  ln -s /opt/Tamery/tamery-desktop "${pkgdir}/usr/bin/tamery"
    
      45}
    
      46

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-18 21:24:45	Medium	3
2026-10-18 21:23:05	Medium	3