tmog-bin

MEDIUM

maintainer maci 0 votes scanned 2026-08-24 07:23:54.464908

View on AUR

Why flagged

Prebuilt proprietary binary downloaded from the project's own domain (tmog.org) with a provided sha256 checksum; the checksum provides some verification, but it is a closed-source precompiled executable from a low-reputation/unverifiable host with few votes, making silent substitution or supply-chain risk a realistic concern.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:18 source=("https://tmog.org/downloads/TMOG-Task-Manager-Linux-x86_64.tar.gz?v=${pkgver}-free")

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 70%): Prebuilt proprietary binary downloaded from the project's own domain (tmog.org) with a provided sha256 checksum; the checksum provides some verification, but it is a closed-source precompiled executable from a low-reputation/unverifiable host with few votes, making silent substitution or supply-chain risk a realistic concern.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Marcel W. Wysocki <maci.stgn@gmail.com>
    
      2pkgname=tmog-bin
    
      3pkgver=0.1.1
    
      4pkgrel=1
    
      5pkgdesc="Task Manager TMOG, a native system monitor and task manager (precompiled binary)"
    
      6arch=('x86_64')
    
      7url="https://tmog.org"
    
      8license=('LicenseRef-proprietary')
    
      9depends=(
    
      10  'gcc-libs'
    
      11  'qt6-base'
    
      12  'qt6-multimedia'
    
      13  'qt6-svg'
    
      14  'systemd-libs'
    
      15)
    
      16provides=('tmog-task-manager')
    
      17conflicts=('tmog-task-manager')
    
      18source=("https://tmog.org/downloads/TMOG-Task-Manager-Linux-x86_64.tar.gz?v=${pkgver}-free")
    
      19sha256sums=('4d319d3d27f513e83801daeec8eb64cb78ddec1f6483bbe90d57d11e607af39d')
    
      20options=('!strip')
    
      21
    
      22package() {
    
      23  cd "TaskManagerOG-${pkgver}-linux-x86_64"
    
      24
    
      25  install -Dm755 bin/tmog-task-manager "${pkgdir}/usr/bin/tmog-task-manager"
    
      26
    
      27  install -Dm644 share/applications/com.tmog.taskmanager.desktop \
    
      28    "${pkgdir}/usr/share/applications/com.tmog.taskmanager.desktop"
    
      29  install -Dm644 share/metainfo/com.tmog.taskmanager.metainfo.xml \
    
      30    "${pkgdir}/usr/share/metainfo/com.tmog.taskmanager.metainfo.xml"
    
      31
    
      32  for _size in 32x32 48x48 64x64 128x128 256x256 512x512; do
    
      33    install -Dm644 "share/icons/hicolor/${_size}/apps/tmog-task-manager.png" \
    
      34      "${pkgdir}/usr/share/icons/hicolor/${_size}/apps/tmog-task-manager.png"
    
      35  done
    
      36
    
      37  install -Dm644 share/pixmaps/tmog-task-manager.png \
    
      38    "${pkgdir}/usr/share/pixmaps/tmog-task-manager.png"
    
      39
    
      40  install -Dm644 share/doc/tmog/LICENSE.txt \
    
      41    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      42  install -Dm644 share/doc/tmog/THIRD_PARTY_NOTICES.md \
    
      43    "${pkgdir}/usr/share/licenses/${pkgname}/THIRD_PARTY_NOTICES.md"
    
      44
    
      45  install -Dm644 share/doc/taskmanagerog/copyright \
    
      46    "${pkgdir}/usr/share/licenses/${pkgname}/copyright"
    
      47}
    
      48

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-24 07:23:54	Medium	3
2026-08-24 07:22:23	Medium	3