ungoogled-chromium-ru-ca-bin
MEDIUM
maintainer giantplaceholder
0 votes
scanned 2026-09-03 13:53:13.144096
Why flagged
The package installs a prebuilt binary from a non-official, maintainer-controlled GitHub release (giantplaceholder) with no verifiable build process, creating a supply-chain risk if the source were compromised.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Medium
AI review of an ambiguous pattern
llm_review
The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 95%): The package installs a prebuilt binary from a non-official, maintainer-controlled GitHub release (giantplaceholder) with no verifiable build process, creating a supply-chain risk if the source were compromised.
PKGBUILD
1
# Maintainer: giantplaceholder <ksenobayt at gmail dot com>
2
3
pkgname=ungoogled-chromium-ru-ca-bin
4
pkgver=151.0.7922.173
5
pkgrel=4
6
pkgdesc="Custom binary build of ungoogled-chromium with support for TLS certificates issued by CA of Russian Ministry of Digital Development"
7
arch=('x86_64')
8
url="https://github.com/ungoogled-software/ungoogled-chromium"
9
license=('BSD')
10
depends=(
11
'alsa-lib'
12
'at-spi2-core'
13
'cairo'
14
'dbus'
15
'desktop-file-utils'
16
'expat'
17
'glib2'
18
'glibc'
19
'gtk3'
20
'hicolor-icon-theme'
21
'libcups'
22
'libffi'
23
'libgcc'
24
'libgcrypt'
25
'libpulse'
26
'libstdc++'
27
'libva'
28
'libx11'
29
'libxcb'
30
'libxcomposite'
31
'libxdamage'
32
'libxext'
33
'libxfixes'
34
'libxkbcommon'
35
'libxrandr'
36
'libxss'
37
'mesa'
38
'nspr'
39
'nss'
40
'pango'
41
'pciutils'
42
'systemd'
43
'systemd-libs'
44
'ttf-liberation'
45
'xdg-utils'
46
'zlib'
47
)
48
optdepends=('pipewire: WebRTC desktop sharing under Wayland'
49
'kdialog: support for native dialogs in Plasma'
50
'gtk4: for --gtk-version=4 (GTK4 IME might work better on Wayland)'
51
'qt6-base: Qt support'
52
'org.freedesktop.secrets: password storage backend on GNOME, KDE and Xfce'
53
'upower: Battery Status API support')
54
provides=("chromium=$pkgver" "chromedriver=$pkgver")
55
conflicts=('chromium' 'chromedriver' 'ungoogled-chromium')
56
source=(https://github.com/giantplaceholder/ungoogled-chromium-archlinux/releases/download/151.0.7922.173-1-4/ungoogled-chromium-151.0.7922.173-1-x86_64.pkg.tar.zst)
57
sha256sums=('c70407d01bfe6db843cb59604225d3c88621e125dc1210f2917f25ab8940318e')
58
59
declare -gA _system_libs=(
60
[brotli]=brotli
61
[dav1d]=dav1d
62
#[ffmpeg]=ffmpeg # YouTube playback stopped working in Chromium 120
63
[flac]=flac
64
[fontconfig]=fontconfig
65
[freetype]=freetype2
66
[harfbuzz]=harfbuzz
67
#[icu]=icu
68
#[jsoncpp]=jsoncpp # needs libstdc++
69
#[libaom]=aom
70
#[libavif]=libavif # needs -DAVIF_ENABLE_EXPERIMENTAL_GAIN_MAP=ON
71
[libdrm]=libdrm
72
[libjpeg]=libjpeg-turbo
73
#[libpng]=libpng
74
#[libvpx]=libvpx
75
[libwebp]=libwebp
76
[libxml]=libxml2
77
[libxslt]=libxslt
78
[openh264]=openh264
79
[opus]=opus
80
#[re2]=re2 # needs libstdc++
81
#[snappy]=snappy # needs libstdc++
82
#[woff2]=woff2 # needs libstdc++
83
[zlib]=minizip
84
[zstd]=zstd
85
)
86
_unwanted_bundled_libs=(
87
$(printf "%s\n" ${!_system_libs[@]} | sed 's/^libjpeg$/&_turbo/')
88
)
89
depends+=(${_system_libs[@]})
90
91
package() {
92
cp -R "${srcdir}/usr/" "${pkgdir}/usr"
93
94
chown root "$pkgdir/usr/lib/chromium/chrome-sandbox"
95
chmod 4755 "$pkgdir/usr/lib/chromium/chrome-sandbox"
96
}
97
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-03 13:53:13 | Medium | 2 |