tastytrade

MEDIUM
maintainer oneofone 14 votes scanned 2026-09-21 19:35:51.541891
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:12 source=(https://download.tastytrade.com/desktop-2.0/tastytrade-linux-amd64-latest.deb)

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Ahmed W. <oneofone@gmail.com>
2# old maintainer: M.Reynolds <blackboxnetworkproject@gmail.com>
3
4pkgname=tastytrade
5pkgver='2.59.0'
6pkgrel='1'
7pkgdesc="One of the fastest, most reliable, and most secure trading platforms in the world."
8arch=('x86_64')
9url='https://tastytrade.com/'
10license=('custom:commercial')
11conflicts=('tastytrade-bin')
12source=(https://download.tastytrade.com/desktop-2.0/tastytrade-linux-amd64-latest.deb)
13sha256sums=('7efa5502f209a029509c98198c84043fc83dde69f8b9ead266b1fff2eda30b78')
14
15build() {
16 tar axf data.tar.zst
17
18 # Remove additional bundled Java "runtime"
19 #rm -rf opt/tastytrade/lib/runtime
20 #sed -i 's|app.runtime=$ROOTDIR/lib/runtime|app.runtime=/usr/lib/jvm/default-runtime|' opt/tastytrade/lib/app/tastytrade.cfg
21
22 DF="opt/tastytrade/lib/tastytrade-tastytrade.desktop"
23
24 # Set correct information for the application .desktop launcher
25 sed -i 's|Name=tastytrade|Name=TastyTrade|' $DF
26 sed -i 's|Comment=tastytrade|Comment=Trading Platform|' $DF
27 sed -i 's|Exec=.*|Exec=/usr/bin/tastytrade|' $DF
28 sed -i 's|Icon=.*|Icon=tastytrade|' $DF
29 sed -i 's|Categories=tastytrade|Categories=Network|' $DF
30
31 # Add the correct startup window manager class
32 # This *should* fix gnome from creating more than one dock entry for the program
33 echo 'StartupWMClass=tasty.javafx.launcher.LauncherFxApp' >>$DF
34 sed -i '/^[[:space:]]*$/d' $DF
35}
36
37package() {
38 install -d "${pkgdir}/usr/bin"
39 ln -sf "/usr/lib/${pkgname}/bin/tastytrade" "${pkgdir}/usr/bin/${pkgname}"
40
41 install -d "${pkgdir}/usr/lib/${pkgname}/lib/app"
42 cp -r "${srcdir}/opt/tastytrade/lib/app/" "${pkgdir}/usr/lib/${pkgname}/lib/"
43 cp -r "${srcdir}/opt/tastytrade/lib/runtime/" "${pkgdir}/usr/lib/${pkgname}/lib/"
44 install -Dm 644 "${srcdir}/opt/tastytrade/lib/libapplauncher.so" "${pkgdir}/usr/lib/${pkgname}/lib/libapplauncher.so"
45
46 install -Dm 755 "${srcdir}/opt/tastytrade/bin/tastytrade" "${pkgdir}/usr/lib/${pkgname}/bin/tastytrade"
47
48 install -Dm 644 "${srcdir}/opt/tastytrade/lib/tastytrade-tastytrade.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"
49 install -Dm 644 "${srcdir}/opt/tastytrade/share/doc/copyright" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
50 install -Dm 644 "${srcdir}/opt/tastytrade/lib/tastytrade.png" "${pkgdir}/usr/share/pixmaps/${pkgname}.png"
51
52 echo "changelog: https://support.tastytrade.com/support/s/solutions/articles/43000435186"
53}
54

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-09-21 19:35
@@ -2,15 +2,15 @@
# old maintainer: M.Reynolds <blackboxnetworkproject@gmail.com>
pkgname=tastytrade
-pkgver='2.29.2'
+pkgver='2.59.0'
pkgrel='1'
pkgdesc="One of the fastest, most reliable, and most secure trading platforms in the world."
arch=('x86_64')
url='https://tastytrade.com/'
license=('custom:commercial')
conflicts=('tastytrade-bin')
-source=(https://download.tastytrade.com/desktop-2.x.x/${pkgver}/tastytrade-${pkgver}-1_amd64.deb)
-sha256sums=('edb5eb69382a0b2819e1745a4746e050882339807170b7805c0e38881b82f892')
+source=(https://download.tastytrade.com/desktop-2.0/tastytrade-linux-amd64-latest.deb)
+sha256sums=('7efa5502f209a029509c98198c84043fc83dde69f8b9ead266b1fff2eda30b78')
build() {
tar axf data.tar.zst
@@ -49,6 +49,6 @@
install -Dm 644 "${srcdir}/opt/tastytrade/share/doc/copyright" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
install -Dm 644 "${srcdir}/opt/tastytrade/lib/tastytrade.png" "${pkgdir}/usr/share/pixmaps/${pkgname}.png"
- echo "changelog: https://tastytrade.freshdesk.com/support/solutions/articles/43000435186-recent-release-notes?_sp=7c25726d-6774-4b70-bda4-a82570383c13.1600117130600"
+ echo "changelog: https://support.tastytrade.com/support/s/solutions/articles/43000435186"
}

Scan history

Scanned at (UTC)SeverityRules
2026-09-21 19:35:51 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-19 18:54:17 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion