vanyavpn-appimage

MEDIUM

maintainer LEV7n 0 votes scanned 2026-10-31 08:00:22.627124

View on AUR

Why flagged

Downloads a prebuilt executable AppImage from a Google Cloud Storage bucket (storage.googleapis.com/vanyavpn) with SKIP'd checksum - this is an unofficial, unverifiable binary from a personal/project-controlled cloud bucket that could be silently swapped, and the VPN client itself is an obscure package with few votes and no established reputation.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 source=("VanyaVPN.AppImage::https://storage.googleapis.com/vanyavpn/apps/VanyaVPN.AppImage"

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 85%): Downloads a prebuilt executable AppImage from a Google Cloud Storage bucket (storage.googleapis.com/vanyavpn) with SKIP'd checksum - this is an unofficial, unverifiable binary from a personal/project-controlled cloud bucket that could be silently swapped, and the VPN client itself is an obscure package with few votes and no established reputation.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Vanya <your@email.com>
    
      2
    
      3pkgname=vanyavpn-appimage
    
      4pkgver=1.0.0
    
      5pkgrel=1
    
      6pkgdesc="VanyaVPN — VPN-клиент"
    
      7arch=('x86_64')
    
      8url="https://vanyavpn.com"
    
      9license=('MIT')
    
      10depends=('fuse2' 'hicolor-icon-theme')
    
      11options=('!strip')
    
      12provides=('vanyavpn')
    
      13conflicts=('vanyavpn')
    
      14
    
      15source=("VanyaVPN.AppImage::https://storage.googleapis.com/vanyavpn/apps/VanyaVPN.AppImage"
    
      16        "vanyavpn.desktop"
    
      17        "VanyaVPN.png")
    
      18
    
      19sha256sums=('SKIP'
    
      20            'SKIP'
    
      21            'SKIP')
    
      22
    
      23noextract=("VanyaVPN.AppImage")
    
      24
    
      25prepare() {
    
      26    chmod +x "VanyaVPN.AppImage"
    
      27}
    
      28
    
      29package() {
    
      30    # AppImage
    
      31    install -Dm755 "VanyaVPN.AppImage" \
    
      32        "${pkgdir}/opt/vanyavpn/VanyaVPN.AppImage"
    
      33
    
      34    # .desktop
    
      35    install -Dm644 "vanyavpn.desktop" \
    
      36        "${pkgdir}/usr/share/applications/vanyavpn.desktop"
    
      37
    
      38    # Иконка 128x128
    
      39    install -Dm644 "VanyaVPN.png" \
    
      40        "${pkgdir}/usr/share/icons/hicolor/128x128/apps/vanyavpn.png"
    
      41
    
      42    # Symlink для терминала
    
      43    install -d "${pkgdir}/usr/bin"
    
      44    ln -s /opt/vanyavpn/VanyaVPN.AppImage "${pkgdir}/usr/bin/vanyavpn"
    
      45}
    
      46

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-31 08:00:22	Medium	3
2026-10-31 07:58:04	Medium	3