tastytrade
MEDIUM
maintainer oneofone
14 votes
scanned 2026-11-05 20:10:15.251681
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:21
source=("${pkgname}-${pkgver}.deb::https://download.tastytrade.com/desktop-2.0/tastytrade-linux-amd64-${pkgver}.deb")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Ahmed W. <oneofone@gmail.com>
2
# old maintainer: M.Reynolds <blackboxnetworkproject@gmail.com>
3
4
pkgname=tastytrade
5
pkgver=0.73.0
6
pkgrel=2
7
epoch=1
8
pkgdesc="One of the fastest, most reliable, and most secure trading platforms in the world."
9
arch=('x86_64')
10
url='https://tastytrade.com/'
11
license=('custom:commercial')
12
depends=('alsa-lib' 'at-spi2-core' 'cairo' 'dbus' 'expat' 'glib2' 'glibc' 'gtk3' 'libcups' 'libgcc'
13
'libx11' 'libxcb' 'libxcomposite' 'libxdamage' 'libxext' 'libxfixes' 'libxkbcommon' 'libxrandr'
14
'mesa' 'nspr' 'nss' 'pango' 'systemd-libs')
15
optdepends=('libappindicator-gtk3: tray icon'
16
'libnotify: desktop notifications'
17
'libsecret: store credentials in the system keyring'
18
'xdg-utils: open links in the default browser')
19
conflicts=('tastytrade-bin')
20
options=('!strip')
21
source=("${pkgname}-${pkgver}.deb::https://download.tastytrade.com/desktop-2.0/tastytrade-linux-amd64-${pkgver}.deb")
22
sha512sums=('c68cce4f132834b3140b016aca0ec2ad8ab3cc31185537859f9d2b96ec0ee2df9ab0f65ea2b1e095fcf52565d47a91491275944c18182e200059f82e966cf94b')
23
24
prepare() {
25
bsdtar -xf data.tar.xz
26
27
DF="usr/share/applications/tastytrade.desktop"
28
sed -i 's|^Name=tastytrade 2.0|Name=TastyTrade|' "$DF"
29
sed -i 's|^Exec="/opt/tastytrade 2.0/tastytrade"|Exec=/usr/bin/tastytrade|' "$DF"
30
}
31
32
package() {
33
install -d "${pkgdir}/usr/lib/${pkgname}"
34
cp -a "${srcdir}/opt/tastytrade 2.0/." "${pkgdir}/usr/lib/${pkgname}/"
35
36
install -d "${pkgdir}/usr/bin"
37
ln -s "/usr/lib/${pkgname}/tastytrade" "${pkgdir}/usr/bin/${pkgname}"
38
39
install -Dm 644 "${srcdir}/usr/share/applications/tastytrade.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"
40
install -Dm 644 "${srcdir}/usr/share/icons/hicolor/512x512/apps/tastytrade.png" "${pkgdir}/usr/share/icons/hicolor/512x512/apps/${pkgname}.png"
41
42
install -d "${pkgdir}/usr/share/licenses/${pkgname}"
43
ln -s "/usr/lib/${pkgname}/LICENSE.electron.txt" "${pkgdir}/usr/share/licenses/${pkgname}/"
44
ln -s "/usr/lib/${pkgname}/LICENSES.chromium.html" "${pkgdir}/usr/share/licenses/${pkgname}/"
45
}
46
Changes since previous scan
--- PKGBUILD @ 2026-11-05 00:01+++ PKGBUILD @ 2026-11-05 20:10@@ -2,53 +2,45 @@ # old maintainer: M.Reynolds <blackboxnetworkproject@gmail.com> pkgname=tastytrade-pkgver='2.59.0'-pkgrel='1'+pkgver=0.73.0+pkgrel=2+epoch=1 pkgdesc="One of the fastest, most reliable, and most secure trading platforms in the world." arch=('x86_64') url='https://tastytrade.com/' license=('custom:commercial')+depends=('alsa-lib' 'at-spi2-core' 'cairo' 'dbus' 'expat' 'glib2' 'glibc' 'gtk3' 'libcups' 'libgcc'+ 'libx11' 'libxcb' 'libxcomposite' 'libxdamage' 'libxext' 'libxfixes' 'libxkbcommon' 'libxrandr'+ 'mesa' 'nspr' 'nss' 'pango' 'systemd-libs')+optdepends=('libappindicator-gtk3: tray icon'+ 'libnotify: desktop notifications'+ 'libsecret: store credentials in the system keyring'+ 'xdg-utils: open links in the default browser') conflicts=('tastytrade-bin')-source=(https://download.tastytrade.com/desktop-2.0/tastytrade-linux-amd64-latest.deb)-sha256sums=('7efa5502f209a029509c98198c84043fc83dde69f8b9ead266b1fff2eda30b78')+options=('!strip')+source=("${pkgname}-${pkgver}.deb::https://download.tastytrade.com/desktop-2.0/tastytrade-linux-amd64-${pkgver}.deb")+sha512sums=('c68cce4f132834b3140b016aca0ec2ad8ab3cc31185537859f9d2b96ec0ee2df9ab0f65ea2b1e095fcf52565d47a91491275944c18182e200059f82e966cf94b') -build() {- tar axf data.tar.zst+prepare() {+ bsdtar -xf data.tar.xz - # Remove additional bundled Java "runtime"- #rm -rf opt/tastytrade/lib/runtime- #sed -i 's|app.runtime=$ROOTDIR/lib/runtime|app.runtime=/usr/lib/jvm/default-runtime|' opt/tastytrade/lib/app/tastytrade.cfg-- DF="opt/tastytrade/lib/tastytrade-tastytrade.desktop"-- # Set correct information for the application .desktop launcher- sed -i 's|Name=tastytrade|Name=TastyTrade|' $DF- sed -i 's|Comment=tastytrade|Comment=Trading Platform|' $DF- sed -i 's|Exec=.*|Exec=/usr/bin/tastytrade|' $DF- sed -i 's|Icon=.*|Icon=tastytrade|' $DF- sed -i 's|Categories=tastytrade|Categories=Network|' $DF-- # Add the correct startup window manager class- # This *should* fix gnome from creating more than one dock entry for the program- echo 'StartupWMClass=tasty.javafx.launcher.LauncherFxApp' >>$DF- sed -i '/^[[:space:]]*$/d' $DF+ DF="usr/share/applications/tastytrade.desktop"+ sed -i 's|^Name=tastytrade 2.0|Name=TastyTrade|' "$DF"+ sed -i 's|^Exec="/opt/tastytrade 2.0/tastytrade"|Exec=/usr/bin/tastytrade|' "$DF" } package() {+ install -d "${pkgdir}/usr/lib/${pkgname}"+ cp -a "${srcdir}/opt/tastytrade 2.0/." "${pkgdir}/usr/lib/${pkgname}/"+ install -d "${pkgdir}/usr/bin"- ln -sf "/usr/lib/${pkgname}/bin/tastytrade" "${pkgdir}/usr/bin/${pkgname}"+ ln -s "/usr/lib/${pkgname}/tastytrade" "${pkgdir}/usr/bin/${pkgname}" - install -d "${pkgdir}/usr/lib/${pkgname}/lib/app"- cp -r "${srcdir}/opt/tastytrade/lib/app/" "${pkgdir}/usr/lib/${pkgname}/lib/"- cp -r "${srcdir}/opt/tastytrade/lib/runtime/" "${pkgdir}/usr/lib/${pkgname}/lib/"- install -Dm 644 "${srcdir}/opt/tastytrade/lib/libapplauncher.so" "${pkgdir}/usr/lib/${pkgname}/lib/libapplauncher.so"+ install -Dm 644 "${srcdir}/usr/share/applications/tastytrade.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"+ install -Dm 644 "${srcdir}/usr/share/icons/hicolor/512x512/apps/tastytrade.png" "${pkgdir}/usr/share/icons/hicolor/512x512/apps/${pkgname}.png" - install -Dm 755 "${srcdir}/opt/tastytrade/bin/tastytrade" "${pkgdir}/usr/lib/${pkgname}/bin/tastytrade"-- install -Dm 644 "${srcdir}/opt/tastytrade/lib/tastytrade-tastytrade.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"- install -Dm 644 "${srcdir}/opt/tastytrade/share/doc/copyright" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"- install -Dm 644 "${srcdir}/opt/tastytrade/lib/tastytrade.png" "${pkgdir}/usr/share/pixmaps/${pkgname}.png"-- echo "changelog: https://support.tastytrade.com/support/s/solutions/articles/43000435186"+ install -d "${pkgdir}/usr/share/licenses/${pkgname}"+ ln -s "/usr/lib/${pkgname}/LICENSE.electron.txt" "${pkgdir}/usr/share/licenses/${pkgname}/"+ ln -s "/usr/lib/${pkgname}/LICENSES.chromium.html" "${pkgdir}/usr/share/licenses/${pkgname}/" } Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-05 20:10:15 | Medium | 1 |
| 2026-11-05 00:01:40 | Low | 2 |
| 2026-11-04 00:25:23 | Low | 2 |
| 2026-11-03 00:01:00 | Low | 2 |
| 2026-11-02 00:26:00 | Low | 2 |
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |