vantage-browser-bin

MEDIUM

maintainer chen-shuhan 0 votes scanned 2026-09-11 15:22:58.728112

View on AUR

Why flagged

Installs a prebuilt binary from a non-official, community-maintained release on GitHub; while checksums are provided, the binary is not built from source and originates from a third party, creating a supply-chain risk if the release asset were compromised.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 85%): Installs a prebuilt binary from a non-official, community-maintained release on GitHub; while checksums are provided, the binary is not built from source and originates from a third party, creating a supply-chain risk if the release asset were compromised.

PKGBUILD

      1# Maintainer: chen-shuhan <2502820816@qq.com>
    
      2# 非官方社区打包
    
      3pkgname=vantage-browser-bin
    
      4pkgver=153.2.0
    
      5pkgrel=1
    
      6pkgdesc="Vantage 浏览器 - 基于 Firefox ESR (预编译 deb 解包安装) - 非官方社区打包"
    
      7arch=('x86_64' 'aarch64')
    
      8url="https://github.com/asystech-chen/Vantage"
    
      9license=('MPL-2.0')
    
      10depends=(
    
      11  dbus
    
      12  alsa-lib
    
      13  at-spi2-core
    
      14  cairo
    
      15  ffmpeg
    
      16  fontconfig
    
      17  freetype2
    
      18  gdk-pixbuf2
    
      19  glib2
    
      20  gtk3
    
      21  hicolor-icon-theme
    
      22  libpulse
    
      23  libx11
    
      24  libxcb
    
      25  libxcomposite
    
      26  libxdamage
    
      27  libxext
    
      28  libxfixes
    
      29  libxrandr
    
      30  libxss
    
      31  libxt
    
      32  mime-types
    
      33  nspr
    
      34  nss
    
      35  pango
    
      36  ttf-font
    
      37)
    
      38optdepends=(
    
      39  'hunspell-dictionary: Spell checking'
    
      40  'libnotify: Notification integration'
    
      41)
    
      42provides=('vantage-browser')
    
      43conflicts=('vantage-browser' 'vantage-browser-appimage')
    
      44# 上游 deb 按架构区分，使用关联数组形式
    
      45source_x86_64=("https://github.com/asystech-chen/Vantage/releases/download/v${pkgver}-${pkgrel}/vantage_${pkgver}-${pkgrel}_amd64.deb")
    
      46source_aarch64=("https://github.com/asystech-chen/Vantage/releases/download/v${pkgver}-${pkgrel}/vantage_${pkgver}-${pkgrel}_arm64.deb")
    
      47sha256sums_x86_64=('09d737cbb640e5d574288b338444953ab0c0c26b1f5316b156a1e8ee9cff1afc')
    
      48sha256sums_aarch64=('4f8b7285215031e1ef0410c64f0ec1498071070541d6a613d00b5d2addbfff31')
    
      49
    
      50package() {
    
      51  # deb 为 ar 归档，data.tar.xz 内含 /opt/vantage 等
    
      52  # 使用 bsdtar 自动解包（makepkg 已处理 source 解压至 srcdir，但 deb 需手动）
    
      53  cd "$srcdir"
    
      54  # makepkg 已将 deb 解压为 data.tar.xz 等，此处直接解包 data
    
      55  if [ -f data.tar.xz ]; then
    
      56    bsdtar -xf data.tar.xz -C "$pkgdir"
    
      57  elif [ -f data.tar.zst ]; then
    
      58    bsdtar -xf data.tar.zst -C "$pkgdir"
    
      59  else
    
      60    # 兼容 makepkg 未自动解 deb 的情况
    
      61    _deb=$(find . -name "*.deb" | head -1)
    
      62    if [ -n "$_deb" ]; then
    
      63      bsdtar -xf "$_deb" -C "$srcdir"
    
      64      bsdtar -xf "$srcdir/data.tar.xz" -C "$pkgdir" 2>/dev/null || bsdtar -xf "$srcdir/data.tar.zst" -C "$pkgdir"
    
      65    fi
    
      66  fi
    
      67
    
      68  # deb 默认安装到 /opt/vantage，创建 /usr/bin 链接
    
      69  mkdir -p "$pkgdir/usr/bin"
    
      70  if [ -x "$pkgdir/opt/vantage/vantage" ]; then
    
      71    ln -s /opt/vantage/vantage "$pkgdir/usr/bin/vantage"
    
      72  elif [ -x "$pkgdir/usr/lib/vantage/vantage" ]; then
    
      73    ln -s /usr/lib/vantage/vantage "$pkgdir/usr/bin/vantage"
    
      74  fi
    
      75
    
      76  # 修正桌面文件 Exec 路径（若存在）
    
      77  if [ -f "$pkgdir/usr/share/applications/vantage.desktop" ]; then
    
      78    sed -i 's|Exec=.*|Exec=/usr/bin/vantage %u|' "$pkgdir/usr/share/applications/vantage.desktop"
    
      79  fi
    
      80
    
      81  # 许可证
    
      82  if [ -f "$pkgdir/opt/vantage/LICENSE" ]; then
    
      83    install -Dm644 "$pkgdir/opt/vantage/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      84  fi
    
      85}
    
      86

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-11 15:22:58	Medium	2