typeaside-bin

MEDIUM

maintainer dEdSeC 0 votes scanned 2026-10-17 09:21:00.534299

View on AUR

Why flagged

Prebuilt binary .deb downloaded from the project's own domain (typeaside.app), which is plausibly official but is a small/unknown vendor's personal infrastructure with no independent verification — the checksum is present and matches, reducing risk, but it remains an unverifiable prebuilt executable from a non-established release host.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:30 source=("typeaside-${pkgver}.deb::https://typeaside.app/releases/v${pkgver}/typeaside.deb")

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 70%): Prebuilt binary .deb downloaded from the project's own domain (typeaside.app), which is plausibly official but is a small/unknown vendor's personal infrastructure with no independent verification — the checksum is present and matches, reducing risk, but it remains an unverifiable prebuilt executable from a non-established release host.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Aditya Miskin <adityamiskin98@gmail.com>
    
      2
    
      3pkgname=typeaside-bin
    
      4pkgver=0.2.0
    
      5pkgrel=1
    
      6pkgdesc='Native voice dictation for Wayland'
    
      7arch=('x86_64')
    
      8url='https://typeaside.app'
    
      9license=('LicenseRef-TypeAside')
    
      10# GPUI loads Wayland, Vulkan, X11, udev and font libraries at runtime.
    
      11depends=(
    
      12  'alsa-lib'
    
      13  'fontconfig'
    
      14  'freetype2'
    
      15  'gcc-libs'
    
      16  'glibc'
    
      17  'hicolor-icon-theme'
    
      18  'libx11'
    
      19  'libxcb'
    
      20  'libxkbcommon'
    
      21  'libxkbcommon-x11'
    
      22  'systemd-libs'
    
      23  'vulkan-icd-loader'
    
      24  'wayland'
    
      25)
    
      26optdepends=('vulkan-driver: GPU rendering')
    
      27provides=('typeaside')
    
      28conflicts=('typeaside')
    
      29options=('!debug' '!strip')
    
      30source=("typeaside-${pkgver}.deb::https://typeaside.app/releases/v${pkgver}/typeaside.deb")
    
      31noextract=("typeaside-${pkgver}.deb")
    
      32sha256sums=('6a5e27fedd1635bdfe125726dd05d5ab1765463fac10f69782b08a619fb417cf')
    
      33
    
      34package() {
    
      35  bsdtar -xOf "typeaside-${pkgver}.deb" 'data.tar*' | bsdtar -xf - -C "$pkgdir"
    
      36}
    
      37

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 09:21:00	Medium	3
2026-10-17 09:17:40	Medium	3