tmog-appimage
LOW
maintainer JoaoMachado
0 votes
scanned 2026-09-05 00:16:27.132014
Why flagged
The package downloads a prebuilt AppImage from the official project domain and installs it without executing arbitrary remote code; the source is verifiable via checksum and the host is plausibly legitimate, though the AppImage itself could pose a supply-chain risk if compromised.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt AppImage from the official project domain and installs it without executing arbitrary remote code; the source is verifiable via checksum and the host is plausibly legitimate, though the AppImage itself could pose a supply-chain risk if compromised.
PKGBUILD
1
# Maintainer: John Machado <john at delinuxco dot com>
2
3
###############################################################################
4
# CONFIGURATION SECTION
5
# Replace these values with your specific application details.
6
###############################################################################
7
pkgname=tmog-appimage
8
_pkgname=tmog-task-manager
9
pkgver=0.1.1
10
pkgrel=4
11
pkgdesc="TMOG brings the depth of a serious systems console to a native, focused task manager for macOS, Windows, and Linux.."
12
arch=('x86_64')
13
url="https://www.tmog.org/"
14
license=('LicenseRef-Proprietary') # Replace with actual license
15
provides=('tmog-task-manager')
16
conflicts=('tmog-bin')
17
18
# The filename as it appears in the download URL (e.g., app-1.0.0-x86_64.AppImage)
19
_appimage_filename="TMOG-Task-Manager-Linux-${arch}.AppImage"
20
21
# The source URL to download AppImage
22
_source_url="https://www.tmog.org/downloads/TMOG-Task-Manager-Linux-x86_64.AppImage?v=${pkgver}-free"
23
24
# Where the file will live in your system (Standard is /opt/appimages/)
25
_install_dir="/opt/appimages"
26
_install_path="${_install_dir}/${_pkgname}.AppImage"
27
28
# Inside the AppImage, what is the name of the .desktop file?
29
# Usually it matches the app name, e.g., 'org.kde.kcalc.desktop'
30
_desktop_file="com.tmog.taskmanager.desktop"
31
32
# Inside the AppImage, what is the name of the icon file?
33
_icon_file="tmog-task-manager.svg"
34
###############################################################################
35
36
depends=(
37
'fuse2'
38
'fuse3'
39
)
40
41
makedepends=(
42
'desktop-file-utils'
43
)
44
45
# Add any optional dependencies
46
optdepends=()
47
48
options=(!strip)
49
50
# All source files in root directory of PKGBUILD must be listed and with corresponding sha256/md5 sums
51
source=("${_source_url}"
52
"${_icon_file}")
53
sha256sums=('0baf064697d67732800d6315644697ec153b8e506a5173304c85f330b2dbe6d2'
54
'2ddcddba5bf94f076676b42ec6e576cb93c9aa6676e1b1e487b2d4531fc52941'
55
)
56
57
prepare() {
58
59
cd "${srcdir}"
60
61
# Rename the downloaded file to the clean name
62
mv TMOG-Task-Manager-Linux-x86_64.AppImage?v=0.1.1-free TMOG-Task-Manager-Linux-x86_64.AppImage
63
64
# 1. Make the AppImage executable and extract it
65
chmod +x "${_appimage_filename}"
66
./"${_appimage_filename}" --appimage-extract
67
68
# 3. Setup directory structure
69
mkdir -p "${srcdir}/squashfs-root/assets/icons/"
70
mkdir -p "${srcdir}/squashfs-root/assets/launchers/"
71
72
# 4. Move the icon (Note the added 'fi' and use of ${srcdir})
73
if [ -f "${srcdir}/${_icon_file}" ]; then
74
cp "${srcdir}/${_icon_file}" "${srcdir}/squashfs-root/assets/icons/${_icon_file}"
75
fi
76
77
# 5. Rewrite the .desktop file
78
if [ -f "${srcdir}/squashfs-root/${_desktop_file}" ]; then
79
cp "${srcdir}/squashfs-root/${_desktop_file}" "${srcdir}/squashfs-root/assets/launchers/${_desktop_file}"
80
81
desktop-file-edit --set-key=Exec --set-value="${_install_path} %U" \
82
"${srcdir}/squashfs-root/assets/launchers/${_desktop_file}"
83
desktop-file-edit --set-key=TryExec --set-value="${_install_path}" \
84
"${srcdir}/squashfs-root/assets/launchers/${_desktop_file}"
85
fi
86
}
87
88
package() {
89
# 1. Install the actual AppImage to /opt/appimages/
90
install -d "${pkgdir}${_install_dir}"
91
install -Dm755 "${srcdir}/${_appimage_filename}" "${pkgdir}${_install_path}"
92
93
# 2. Install the Desktop Entry and Icon to standard system paths
94
if [ -f "${srcdir}/squashfs-root/assets/launchers/${_desktop_file}" ]; then
95
install -Dm644 "squashfs-root/assets/launchers/${_desktop_file}" "${pkgdir}/usr/share/applications/${_desktop_file}"
96
fi
97
98
if [ -f "${srcdir}/squashfs-root/assets/icons/${_icon_file}" ]; then
99
install -Dm644 "squashfs-root/assets/icons/${_icon_file}" "${pkgdir}/usr/share/icons/hicolor/scalable/apps/${_icon_file}"
100
fi
101
102
# 3. Create the symlink in /usr/bin so you can launch it from terminal via 'appname'
103
install -d "${pkgdir}/usr/bin"
104
ln -s "${_install_path}" "${pkgdir}/usr/bin/${_pkgname}"
105
}
106
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 23:58:52 | Low | 2 |