telegram-desktop-export-bin
The package is a binary build from a GitHub release by the same maintainer who created the source-based version, with no obfuscated scripts or remote code execution; the low severity is due to few votes and recent upload, not inherent risk.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package is a binary build from a GitHub release by the same maintainer who created the source-based version, with no obfuscated scripts or remote code execution; the low severity is due to few votes and recent upload, not inherent risk.
PKGBUILD
# Maintainer: Remenod <remenod@gmail.com>
# Built from the telegram-desktop-export package by Remenod/telegram-desktop-export
# (GitHub Actions, packaging branch) and published there.
pkgname=telegram-desktop-export-bin
pkgver=7.3.1
pkgrel=1.1
pkgdesc='Telegram Desktop with export patches: media reused between exports, size limits per media type, no hangs on lost media'
arch=('x86_64')
url='https://github.com/Remenod/telegram-desktop-export'
license=(
'GPL-3.0-or-later WITH OpenSSL-exception'
)
depends=(
'abseil-cpp'
'ada'
'cairo'
'ffmpeg'
'fontconfig'
'glib2'
'glibc'
'hicolor-icon-theme'
'hunspell'
'kcoreaddons'
'libavif'
'libfido2'
'libgcc'
'libheif'
'libjpeg-turbo'
'libjxl'
'libpipewire'
'libsrtp'
'libstdc++'
'libvpx'
'libx11'
'libxcb'
'libxcomposite'
'libxdamage'
'libxext'
'libxfixes'
'libxkbcommon'
'libxrandr'
'libxtst'
'lz4'
'minizip'
'openal'
'openh264'
'openssl'
'opus'
'pango'
'pipewire'
'qt6-base'
'qt6-declarative'
'qt6-imageformats'
'qt6-svg'
'qt6-wayland'
'rnnoise'
'tlottie'
'xxhash'
'zlib'
)
optdepends=(
'geoclue: geoinformation support'
'crow-translate: translation provider'
'webkit2gtk-4.1: embedded browser features provided by webkit2gtk-4.1 (gtk3)'
'webkitgtk-6.0: embedded browser features provided by webkitgtk-6.0 (gtk4)'
'xdg-desktop-portal: desktop integration'
)
provides=('telegram-desktop' 'telegram-desktop-export')
conflicts=('telegram-desktop' 'telegram-desktop-export')
options=('!strip' '!debug')
source_x86_64=("https://github.com/Remenod/telegram-desktop-export/releases/download/pkg-$pkgver-$pkgrel/telegram-desktop-export-$pkgver-$pkgrel-$CARCH.pkg.tar.zst")
noextract=("telegram-desktop-export-$pkgver-$pkgrel-$CARCH.pkg.tar.zst")
sha512sums_x86_64=('9e5ccf86bec83e37ec31fafa29255e9b7acd45f7578237f158d39cf307f2977ae1f5987ebc5f9089107e512d683f7976cc1a284b793c7a6bd952b9148934c6ad')
package() {
bsdtar -xf "$srcdir/telegram-desktop-export-$pkgver-$pkgrel-$CARCH.pkg.tar.zst" -C "$pkgdir" \
--exclude=.PKGINFO --exclude=.BUILDINFO --exclude=.MTREE \
--exclude=.INSTALL
}
Changes since previous scan
--- PKGBUILD @ 2026-10-15 19:13+++ PKGBUILD @ 2026-10-17 00:21@@ -4,7 +4,7 @@ pkgname=telegram-desktop-export-bin pkgver=7.3.1-pkgrel=1+pkgrel=1.1 pkgdesc='Telegram Desktop with export patches: media reused between exports, size limits per media type, no hangs on lost media' arch=('x86_64') url='https://github.com/Remenod/telegram-desktop-export'@@ -71,7 +71,7 @@ options=('!strip' '!debug') source_x86_64=("https://github.com/Remenod/telegram-desktop-export/releases/download/pkg-$pkgver-$pkgrel/telegram-desktop-export-$pkgver-$pkgrel-$CARCH.pkg.tar.zst") noextract=("telegram-desktop-export-$pkgver-$pkgrel-$CARCH.pkg.tar.zst")-sha512sums_x86_64=('7f386f702926d35286c3cff8593498fb57aaaa3487427abc997037543cd6e81965481334c3f0f83f43cbdbd34e1e3fc69597444c68d83e03949d748e5838e73b')+sha512sums_x86_64=('9e5ccf86bec83e37ec31fafa29255e9b7acd45f7578237f158d39cf307f2977ae1f5987ebc5f9089107e512d683f7976cc1a284b793c7a6bd952b9148934c6ad') package() { bsdtar -xf "$srcdir/telegram-desktop-export-$pkgver-$pkgrel-$CARCH.pkg.tar.zst" -C "$pkgdir" \Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 13:16:10 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 23:13:54 | Low | 2 |
| 2026-10-15 19:13:05 | Low | 1 |