tempest-desktop-bin

MEDIUM

maintainer Ganyu_Genshin 0 votes scanned 2026-10-18 11:22:05.152284

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:21 source_x86_64=("tempest-desktop_${pkgver}_amd64.deb::https://download.gotempest.app/tempest-desktop_${pkgver}_amd64.deb")

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

1 offending line(s) highlighted

      1###
    
      2 # @Date: 2026-10-18 15:57:46
    
      3 # @LastEditors: Wang Xiaomei XianYuPigeon@outlook.com
    
      4 # @LastEditTime: 2026-10-18 17:17:42
    
      5 # @FilePath: /tempest-desktop-bin/PKGBUILD
    
      6### 
    
      7# Maintainer: Ganyu_Genshin XianYuPigeon@outlook.com
    
      8pkgname=tempest-desktop-bin
    
      9pkgver=3.17.2
    
      10pkgrel=1
    
      11pkgdesc="Cross-platform remote access client for SSH, RDP, VNC, SFTP and K8s (official binary)"
    
      12arch=('x86_64' 'aarch64')
    
      13url="https://gotempest.app"
    
      14license=('LicenseRef-proprietary')
    
      15depends=('gtk3' 'libnotify' 'nss' 'libxss' 'libxtst' 'xdg-utils'
    
      16         'at-spi2-core' 'util-linux-libs' 'libsecret' 'alsa-lib')
    
      17optdepends=('libappindicator-gtk3: system tray icon support')
    
      18provides=('tempest-desktop')
    
      19conflicts=('tempest-desktop')
    
      20options=('!strip' '!debug')
    
      21source_x86_64=("tempest-desktop_${pkgver}_amd64.deb::https://download.gotempest.app/tempest-desktop_${pkgver}_amd64.deb")
    
      22# 上游公布值（Base64 格式的 SHA-512）:
    
      23#   fyjXx4g0T//rUclVJKQwPM3xFv5n0ho8NN2b887sYdVmbBzn+TJX15iYici8Bk6fn8qNU/x1C46C5eTDsDnVNQ==
    
      24sha512sums_x86_64=('7f28d7c788344fffeb51c95524a4303ccdf116fe67d21a3c34dd9bf3ceec61d5666c1ce7f93257d7989889c8bc064e9f9fca8d53fc750b8e82e5e4c3b039d535')
    
      25
    
      26source_aarch64=("tempest-desktop_${pkgver}_arm64.deb::https://download.gotempest.app/tempest-desktop_${pkgver}_arm64.deb")
    
      27# 上游公布值（Base64 格式的 SHA-512）:
    
      28#   qpFgkpmdJ9OOcm1NZTzWV5k3wQ5JtJkQqSsVzu9XjWmLAlgpfqQAP7kMcMK2C5gtxIhAoi0VAeDLnctT+XA8Qw==
    
      29sha512sums_aarch64=('aa916092999d27d38e726d4d653cd6579937c10e49b49910a92b15ceef578d698b0258297ea4003fb90c70c2b60b982dc48840a22d1501e0cb9dcb53f9703c43')
    
      30
    
      31package() {
    
      32    # .deb 已在解包阶段由 makepkg 用 bsdtar 展开, 这里只取 data.tar.* 装入 pkgdir
    
      33    bsdtar -xf "$srcdir"/data.tar.* -C "$pkgdir"
    
      34    # deb 里靠 postinst 建 /usr/bin 软链，Arch 上在打包阶段直接建
    
      35    install -d "$pkgdir/usr/bin"
    
      36    ln -s /opt/Tempest/tempest-desktop "$pkgdir/usr/bin/tempest-desktop"
    
      37    # SPDX LicenseRef-* 标识要求随包附许可证文件, 把上游 bundled 文本装到标准位置
    
      38    install -Dm644 "$pkgdir/opt/Tempest/LICENSE.electron.txt" \
    
      39        "$pkgdir/usr/share/licenses/$pkgname/LICENSE.electron.txt"
    
      40    install -Dm644 "$pkgdir/opt/Tempest/LICENSES.chromium.html" \
    
      41        "$pkgdir/usr/share/licenses/$pkgname/LICENSES.chromium.html"
    
      42}

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-18 11:22:05	Medium	2
2026-10-18 09:25:03	Low	3
2026-10-18 09:21:55	Medium	2