visual-studio-code-electron-bin
MEDIUM
maintainer zxp19821005
3 votes
scanned 2026-09-17 03:24:22.735270
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:49
source_aarch64=("${pkgname%-bin}-${pkgver}-aarch64.rpm::https://code.visualstudio.com/sha/download?build=stable&os=linux-rpm-arm64")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
2
# `vscodium-electron.js` from Richardn <rniu at umich dot edu>
3
_appname=code
4
_pkgname="visual-studio-${_appname}"
5
pkgname="${_pkgname}-electron-bin"
6
pkgver=1.137.0
7
_electronversion=42
8
pkgrel=1
9
pkgdesc="Visual Studio Code (vscode): Editor for building and debugging modern web and cloud applications."
10
arch=(
11
'aarch64'
12
'armv7h'
13
'x86_64'
14
)
15
url="https://code.visualstudio.com/"
16
_ghurl="https://github.com/microsoft/vscode"
17
#_dlurl="https://packages.microsoft.com/yumrepos/vscode/Packages/c"
18
license=('LicenseRef-scancode-commercial-license')
19
provides=(
20
"${_pkgname}"
21
"vs${_appname}"
22
)
23
conflicts=(
24
"${pkgname%-bin}"
25
"${_pkgname}"
26
"${_appname}"
27
"${_pkgname}-insiders"
28
"${_pkgname}-marketplace"
29
)
30
depends=(
31
"electron${_electronversion}"
32
'nodejs'
33
'libx11'
34
'libxkbfile'
35
'webkit2gtk-4.1'
36
'libsecret'
37
)
38
optdepends=(
39
'gvfs: For move to trash functionality'
40
'libdbusmenu-glib: For KDE global menu'
41
)
42
options=(
43
'!strip'
44
)
45
source=(
46
"${pkgname%-bin}.js"
47
"${pkgname%-bin}.sh"
48
)
49
source_aarch64=("${pkgname%-bin}-${pkgver}-aarch64.rpm::https://code.visualstudio.com/sha/download?build=stable&os=linux-rpm-arm64")
50
source_armv7h=("${pkgname%-bin}-${pkgver}-armv7h.rpm::https://code.visualstudio.com/sha/download?build=stable&os=linux-rpm-armhf")
51
source_x86_64=("${pkgname%-bin}-${pkgver}-x86_64.rpm::https://code.visualstudio.com/sha/download?build=stable&os=linux-rpm-x64")
52
sha256sums=('68a94e4a9d746da48f5bb990d48b434363e476dfde006394a3ced94b4a54b4a7'
53
'700067aa4b354a91ab3374b5495af9eb3093855a3d8016a8303e88abf3470599')
54
sha256sums_aarch64=('43f918ebff771c6397b4a0923fe64a050e512b3beeb8c152d9e67a6480bfc835')
55
sha256sums_armv7h=('99b4ce79c01b7488cb698a0317e721a8621d4cd7ee2a2ecd8ec00f05811ead01')
56
sha256sums_x86_64=('f0e41a7982401ddf86cfdd0db065ad9b8b50b69eedcc00470a6c11c6964b6936')
57
pkgver() {
58
cd "${srcdir}/usr/share/${_appname}/resources/app"
59
grep '"version": ' package.json | awk '{print $2}' | tr -d '"' | tr -d ','
60
}
61
_get_app_dir() {
62
find "${srcdir}" -type f -name "resources.pak" -exec dirname {} + | head -n 1
63
}
64
_get_electron_version() {
65
_elec_ver="$(strings "${srcdir}/usr/share/${_appname}/${_appname}" | grep '^Chrome/[0-9.]* Electron/[0-9]' | cut -d'/' -f3 | cut -d'.' -f1)"
66
echo -e "The electron version is: \033[1;31m${_elec_ver}\033[0m"
67
}
68
prepare() {
69
sed -i -e "
70
s/@electronversion@/${_electronversion}/g
71
s/@appname@/${pkgname%-bin}/g
72
s/@runname@/app/g
73
s/@cfgdirname@/${_pkgname}/g
74
" "${srcdir}/${pkgname%-bin}.sh"
75
_get_electron_version
76
sed -i "s/@ELECTRON@/electron${_electronversion}/g" "${srcdir}/${pkgname%-bin}.js"
77
sed -i "s/${_appname}.desktop/${pkgname%-bin}.desktop/g" "${srcdir}/usr/share/appdata/${_appname}.appdata.xml"
78
sed -i -e "
79
s/\/usr\/share\/${_appname}\/${_appname}/${pkgname%-bin}/g
80
s/Icon=vs${_appname}/Icon=${pkgname%-bin}/g
81
" "${srcdir}/usr/share/applications/"{"${_appname}-url-handler.desktop","${_appname}.desktop"}
82
rm -rf \
83
"${srcdir}/usr/share/${_appname}/resources/app/node_modules/@microsoft/mxc-sdk/bin/arm64" \
84
"${srcdir}/usr/share/${_appname}/resources/app/extensions/ms-vscode.js-debug/src/win32-app-container-tokens."*".node"
85
}
86
package() {
87
install -Dm755 "${srcdir}/${pkgname%-bin}.sh" "${pkgdir}/usr/bin/${pkgname%-bin}"
88
install -Dm755 "${srcdir}/${pkgname%-bin}.js" -t "${pkgdir}/usr/lib/${pkgname%-bin}"
89
local _app_dir=$(_get_app_dir)
90
cp -a "${_app_dir}/resources/app/". "${pkgdir}/usr/lib/${pkgname%-bin}/"
91
install -Dm644 "${srcdir}/usr/share/appdata/${_appname}.appdata.xml" "${pkgdir}/usr/share/appdata/${pkgname%-bin}.appdata.xml"
92
install -Dm644 "${srcdir}/usr/share/applications/${_appname}-url-handler.desktop" "${pkgdir}/usr/share/applications/${pkgname%-bin}-url-handler.desktop"
93
install -Dm644 "${srcdir}/usr/share/applications/${_appname}.desktop" "${pkgdir}/usr/share/applications/${pkgname%-bin}.desktop"
94
install -Dm644 "${srcdir}/usr/share/mime/packages/${_appname}-workspace.xml" "${pkgdir}/usr/share/mime/packages/${pkgname%-bin}-workspace.xml"
95
install -Dm644 "${srcdir}/usr/share/pixmaps/vs${_appname}.png" "${pkgdir}/usr/share/pixmaps/${pkgname%-bin}.png"
96
install -Dm644 "${srcdir}/usr/share/bash-completion/completions/${_appname}" -t "${pkgdir}/usr/share/bash-completion/completions"
97
install -Dm644 "${srcdir}/usr/share/zsh/site-functions/_${_appname}" -t "${pkgdir}/usr/share/zsh/vendor-completions/"
98
install -Dm644 "${srcdir}/usr/share/${_appname}/resources/app/licenses/"* -t "${pkgdir}/usr/share/licenses/${pkgname}"
99
}
100
Changes since previous scan
--- PKGBUILD @ 2026-09-10 00:22+++ PKGBUILD @ 2026-09-17 03:24@@ -3,10 +3,10 @@ _appname=code _pkgname="visual-studio-${_appname}" pkgname="${_pkgname}-electron-bin"-pkgver=1.136.2+pkgver=1.137.0 _electronversion=42 pkgrel=1-pkgdesc="Visual Studio Code (vscode): Editor for building and debugging modern web and cloud applications.(Prebuilt and System-wide Electron edition)"+pkgdesc="Visual Studio Code (vscode): Editor for building and debugging modern web and cloud applications." arch=( 'aarch64' 'armv7h'@@ -51,9 +51,9 @@ source_x86_64=("${pkgname%-bin}-${pkgver}-x86_64.rpm::https://code.visualstudio.com/sha/download?build=stable&os=linux-rpm-x64") sha256sums=('68a94e4a9d746da48f5bb990d48b434363e476dfde006394a3ced94b4a54b4a7' '700067aa4b354a91ab3374b5495af9eb3093855a3d8016a8303e88abf3470599')-sha256sums_aarch64=('05136264754f266f7e9da50fc537bfda6fd7a63353ffb42928cbb4896b115147')-sha256sums_armv7h=('ac24dc448f32a3696dca945006d176429d4f31792dbddd84606dfe473ae45b59')-sha256sums_x86_64=('c7d5b4452a2592ec6339c812211ba09e432972c66b6d322d6f38dd24d0cde58b')+sha256sums_aarch64=('43f918ebff771c6397b4a0923fe64a050e512b3beeb8c152d9e67a6480bfc835')+sha256sums_armv7h=('99b4ce79c01b7488cb698a0317e721a8621d4cd7ee2a2ecd8ec00f05811ead01')+sha256sums_x86_64=('f0e41a7982401ddf86cfdd0db065ad9b8b50b69eedcc00470a6c11c6964b6936') pkgver() { cd "${srcdir}/usr/share/${_appname}/resources/app" grep '"version": ' package.json | awk '{print $2}' | tr -d '"' | tr -d ','Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 03:24:22 | Medium | 1 |
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 03:20:13 | Medium | 1 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 01:18:32 | Medium | 1 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 01:12:52 | Medium | 1 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 21:51:32 | Medium | 1 |