todesk-bin
LOW
maintainer witt.9099
11 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a prebuilt .deb from the official ToDesk domain (dl.todesk.com), which is plausibly the project's own release infrastructure; despite the non-whitelisted host, the source is verifiable and checksummed, and the installed binaries are consistent with the application's legitimate components.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt .deb from the official ToDesk domain (dl.todesk.com), which is plausibly the project's own release infrastructure; despite the non-whitelisted host, the source is verifiable and checksummed, and the installed binaries are consistent with the application's legitimate components.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:29
source_x86_64=("https://dl.todesk.com/linux/${_pkgname}-v${pkgver}-amd64.deb")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: yjun <jerrysteve1101 at gmail dot com>
2
# Maintainer: witt <1989161762 at qq dot com>
3
4
pkgname=todesk-bin
5
_pkgname=${pkgname%-bin}
6
_binaryname=ToDesk
7
pkgver=4.9.6.0
8
pkgrel=1
9
pkgdesc="Remote control and team work"
10
arch=('x86_64' 'aarch64')
11
url="https://www.todesk.com/"
12
license=('custom')
13
depends=('gtk3'
14
'libappindicator-gtk3'
15
'noto-fonts-cjk')
16
makedepends=('wget' 'tar')
17
provides=("${_pkgname}")
18
conflicts=("${_pkgname}")
19
# !strip: strip could generate error.
20
# --->
21
# strip: error: the input file './opt/todesk/bin/todesk' has no sections
22
# strip: error: the input file './opt/todesk/bin/todeskd' has no sections
23
#
24
# emptydirs: leave /opt/todesk/config empty dir
25
options=('!strip' 'emptydirs')
26
DLAGENTS=("https::/usr/bin/wget -U 'Mozilla' -O %o %u")
27
install="${_pkgname}.install"
28
source=('license.html')
29
source_x86_64=("https://dl.todesk.com/linux/${_pkgname}-v${pkgver}-amd64.deb")
30
source_aarch64=("https://dl.todesk.com/linux/${_pkgname}-v4.8.5.1-arm64.deb")
31
source_armv7h=("https://dl.todesk.com/linux/${_pkgname}-v${pkgver}-armv7l.deb")
32
sha256sums=('402b2db2586c723af990beb0f96249b9680880f4f30e58a7cbe7cbd20b979a0b')
33
sha256sums_x86_64=('b7e2a0894996ee4e34fcb3ddfb39692c72943c05b133a73af49f48043d7dac16')
34
sha256sums_aarch64=('0c3a78f52df7b2d7877f05cb0ed9a112607be5976e09c01527cacfe3fb8dc2fc')
35
36
_install() {
37
find ${@: 2} -type f -exec install -Dm$1 {} ${pkgdir}/{} \;
38
}
39
40
build() {
41
mkdir -p ${srcdir}/build
42
43
[ -f "${srcdir}/data.tar.xz" ] && tar -xf ${srcdir}/data.tar.xz -C ${srcdir}/build
44
[ -f "${srcdir}/data.tar.zst" ] && tar -xf ${srcdir}/data.tar.zst -C ${srcdir}/build
45
}
46
47
package() {
48
cd ${srcdir}/build/
49
50
# binary wrapper
51
install -Dm755 usr/local/bin/${_pkgname} -t ${pkgdir}/usr/bin/
52
53
# binary & scripts
54
install -Dm755 opt/${_pkgname}/bin/${_binaryname}{,_Service,_Session} -t ${pkgdir}/opt/${_pkgname}/bin
55
install -Dm755 opt/${_pkgname}/bin/CrashReport -t ${pkgdir}/opt/${_pkgname}/bin
56
57
# lib
58
# bundled libaray for hardware video encode
59
cp -a opt/${_pkgname}/bin/*.so* ${pkgdir}/opt/${_pkgname}/bin/
60
# _install 644 opt/${_pkgname}/bin -name libzrtc.so
61
62
# icon
63
# find opt/${_pkgname}/res -maxdepth 1 -type f -exec install -Dm644 {} ${pkgdir}/{} \;
64
_install 644 opt/${_pkgname}/res -maxdepth 1
65
66
# config
67
# empty dir
68
install -dm755 ${pkgdir}/opt/${_pkgname}/config
69
70
# desktop entry
71
install -Dm644 usr/share/applications/${_pkgname}.desktop -t ${pkgdir}/usr/share/applications
72
73
# systemd service
74
install -Dm644 etc/systemd/system/${_pkgname}d.service -t ${pkgdir}/usr/lib/systemd/system
75
76
# icon
77
# find usr/share/icons -type f -exec install -Dm644 {} ${pkgdir}/{} \;
78
_install 644 usr/share/icons
79
80
# license
81
install -Dm644 ${srcdir}/license.html -t ${pkgdir}/usr/share/licenses/${pkgname}/
82
}
83
# vim: set sw=2 ts=2 et:
84
Changes since previous scan
--- PKGBUILD @ 2026-09-15 00:25+++ PKGBUILD @ 2026-09-17 00:27@@ -4,7 +4,7 @@ pkgname=todesk-bin _pkgname=${pkgname%-bin} _binaryname=ToDesk-pkgver=4.8.6.2+pkgver=4.9.6.0 pkgrel=1 pkgdesc="Remote control and team work" arch=('x86_64' 'aarch64')@@ -27,11 +27,11 @@ install="${_pkgname}.install" source=('license.html') source_x86_64=("https://dl.todesk.com/linux/${_pkgname}-v${pkgver}-amd64.deb")-source_aarch64=("https://dl.todesk.com/linux/${_pkgname}-v4.7.2.0-arm64.deb")+source_aarch64=("https://dl.todesk.com/linux/${_pkgname}-v4.8.5.1-arm64.deb") source_armv7h=("https://dl.todesk.com/linux/${_pkgname}-v${pkgver}-armv7l.deb") sha256sums=('402b2db2586c723af990beb0f96249b9680880f4f30e58a7cbe7cbd20b979a0b')-sha256sums_x86_64=('b3f2af7fc120948903df3aa455955cb5823fb5c1f5ec7dca17ac8a4cba53c808')-sha256sums_aarch64=('07a1239d0ea6b94f24e12b446d39cf6b23747b2e52f09c3dff50daa1394ae0b5')+sha256sums_x86_64=('b7e2a0894996ee4e34fcb3ddfb39692c72943c05b133a73af49f48043d7dac16')+sha256sums_aarch64=('0c3a78f52df7b2d7877f05cb0ed9a112607be5976e09c01527cacfe3fb8dc2fc') _install() { find ${@: 2} -type f -exec install -Dm$1 {} ${pkgdir}/{} \;Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 09:19:41 | Medium | 1 |
| 2026-09-15 00:25:31 | Medium | 2 |
| 2026-09-14 00:27:57 | Medium | 2 |
| 2026-09-13 00:19:54 | Medium | 2 |
| 2026-09-12 00:25:17 | Medium | 2 |
| 2026-09-11 00:19:22 | Medium | 2 |
| 2026-09-10 00:22:44 | Medium | 2 |
| 2026-09-09 00:04:09 | Medium | 2 |
| 2026-09-08 00:18:08 | Medium | 2 |
| 2026-09-07 00:30:15 | Medium | 2 |
| 2026-09-06 00:17:06 | Medium | 2 |
| 2026-09-05 00:16:27 | Medium | 2 |
| 2026-09-04 00:03:13 | Medium | 2 |
| 2026-09-03 00:15:47 | Medium | 2 |
| 2026-09-02 00:02:31 | Medium | 2 |
| 2026-09-01 00:11:19 | Medium | 2 |
| 2026-08-31 00:19:57 | Medium | 2 |
| 2026-08-30 00:04:14 | Medium | 2 |