tuxedo-control-center-bin

MEDIUM
maintainer StevenSeifried 43 votes scanned 2026-11-01 00:21:48.120785
View on AUR
Why flagged

The package downloads a prebuilt RPM from a non-standard host (rpm.tuxedocomputers.com), which is not a common source for Arch packages; while the domain is plausibly official, the use of an unverifiable binary package from a non-whitelisted host introduces a supply-chain risk if the source were compromised or swapped.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:16 source=(https://rpm.tuxedocomputers.com/fedora/43/x86_64/base/tuxedo-control-center_${pkgver}.rpm tuxedo-control-center-bin.install)
Medium AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 90%): The package downloads a prebuilt RPM from a non-standard host (rpm.tuxedocomputers.com), which is not a common source for Arch packages; while the domain is plausibly official, the use of an unverifiable binary package from a non-whitelisted host introduces a supply-chain risk if the source were compromised or swapped.

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Steven Seifried <gitlab@canox.net>
2
3pkgname=tuxedo-control-center-bin
4pkgver=3.1.1
5pkgrel=1
6pkgdesc="A tool to help you control performance, energy, fan and comfort settings on TUXEDO laptops. "
7arch=(x86_64)
8url="https://github.com/tuxedocomputers/tuxedo-control-center"
9license=('GPL3')
10depends=('tuxedo-drivers-dkms' 'libxss' 'nss' 'gtk3' 'upower')
11optdepends=('libayatana-appindicator' 'libappindicator-gtk3')
12conflicts=('tuxedo-control-center' 'auto-cpufreq')
13options=(!strip !debug)
14install=${pkgname}.install
15
16source=(https://rpm.tuxedocomputers.com/fedora/43/x86_64/base/tuxedo-control-center_${pkgver}.rpm tuxedo-control-center-bin.install)
17sha256sums=('d714d513b3d9caa3d2affdbf9fb63b9296a1b39899f2e64b037b2663729a01c4'
18 'fef8f708ff4ba19921f167ff9bffd2536cc0c128dfe418a30f7e5e0d04fca6e3')
19sha512sums=('c43319e0f7602a17c15b093ea259965f2046503db9a5a8ebb12a7ff732bc0241df770580a08b2b15afdf02031431ac7aa5c9397c83925e0da2d92d841ea2bdf5'
20 'b70d3412f07c72d6de2cf18e75a184741d8f5db7f144c4d8e8c0dde752e197d831fc8f8b6c095c9b6387ff97b36567f9cf5167dbb23ebc392f7b3cc47a78111a')
21
22package() {
23 cp -a etc "${pkgdir}"
24 cp -a usr "${pkgdir}"
25 cp -a opt "${pkgdir}"
26 chmod -R 755 "${pkgdir}"/opt/tuxedo-control-center/
27 mkdir -p "${pkgdir}/usr/bin"
28 ln -sfv /opt/tuxedo-control-center/tuxedo-control-center "${pkgdir}/usr/bin/tuxedo-control-center"
29}
30
31

Changes since previous scan

--- PKGBUILD @ 2026-10-22 00:13
+++ PKGBUILD @ 2026-11-01 00:21
@@ -1,7 +1,7 @@
# Maintainer: Steven Seifried <gitlab@canox.net>
pkgname=tuxedo-control-center-bin
-pkgver=3.0.10
+pkgver=3.1.1
pkgrel=1
pkgdesc="A tool to help you control performance, energy, fan and comfort settings on TUXEDO laptops. "
arch=(x86_64)
@@ -14,22 +14,18 @@
install=${pkgname}.install
source=(https://rpm.tuxedocomputers.com/fedora/43/x86_64/base/tuxedo-control-center_${pkgver}.rpm tuxedo-control-center-bin.install)
-sha256sums=('eed83bdef58555296cbcd3fb9dfd9de53e63b95255e696a1983cd69c9100d0cc'
+sha256sums=('d714d513b3d9caa3d2affdbf9fb63b9296a1b39899f2e64b037b2663729a01c4'
'fef8f708ff4ba19921f167ff9bffd2536cc0c128dfe418a30f7e5e0d04fca6e3')
-sha512sums=('be77ea2e1b59c060b4a86c2d1d796d7d2ce69ddea1207e0bf33a475c7adc67fd80b61743e3b9e49bfeabb5c104b89b585c7302bbc5faddbaad07c975f0ba4521'
+sha512sums=('c43319e0f7602a17c15b093ea259965f2046503db9a5a8ebb12a7ff732bc0241df770580a08b2b15afdf02031431ac7aa5c9397c83925e0da2d92d841ea2bdf5'
'b70d3412f07c72d6de2cf18e75a184741d8f5db7f144c4d8e8c0dde752e197d831fc8f8b6c095c9b6387ff97b36567f9cf5167dbb23ebc392f7b3cc47a78111a')
package() {
+ cp -a etc "${pkgdir}"
cp -a usr "${pkgdir}"
cp -a opt "${pkgdir}"
chmod -R 755 "${pkgdir}"/opt/tuxedo-control-center/
mkdir -p "${pkgdir}/usr/bin"
ln -sfv /opt/tuxedo-control-center/tuxedo-control-center "${pkgdir}/usr/bin/tuxedo-control-center"
- install -Dm644 "${srcdir}/opt/tuxedo-control-center/resources/dist/tuxedo-control-center/data/dist-data/tuxedo-control-center.desktop" "${pkgdir}/usr/share/applications/tuxedo-control-center.desktop"
- install -Dm644 "${srcdir}/opt/tuxedo-control-center/resources/dist/tuxedo-control-center/data/dist-data/com.tuxedocomputers.tccd.policy" "${pkgdir}/usr/share/polkit-1/actions/com.tuxedocomputers.tccd.policy"
- install -Dm644 "${srcdir}/opt/tuxedo-control-center/resources/dist/tuxedo-control-center/data/dist-data/com.tuxedocomputers.tccd.conf" "${pkgdir}/usr/share/dbus-1/system.d/com.tuxedocomputers.tccd.conf"
- install -Dm644 "${srcdir}/opt/tuxedo-control-center/resources/dist/tuxedo-control-center/data/dist-data/tccd.service" "${pkgdir}/usr/lib/systemd/system/tccd.service"
- install -Dm644 "${srcdir}/opt/tuxedo-control-center/resources/dist/tuxedo-control-center/data/dist-data/tccd-sleep.service" "${pkgdir}/usr/lib/systemd/system/tccd-sleep.service"
}

Scan history

Scanned at (UTC)SeverityRules
2026-11-01 00:21:48 Medium 2
2026-10-31 00:07:41 Medium 2
2026-10-30 00:29:30 Medium 2
2026-10-29 00:13:55 Medium 2
2026-10-28 00:06:54 Medium 2
2026-10-27 00:23:28 Medium 2
2026-10-26 00:12:40 Medium 2
2026-10-25 00:20:48 Medium 2
2026-10-24 00:14:55 Medium 2
2026-10-23 00:02:19 Medium 2
2026-10-22 15:35:25 Medium 2
2026-10-22 00:13:10 Low 2
2026-10-21 00:12:50 Low 2
2026-10-20 00:10:31 Low 2
2026-10-19 00:03:55 Low 2
2026-10-18 00:06:55 Low 2
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 00:06:47 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion