warp-terminal-autoup-bin

maintainer Card38753 · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt Arch package from the official project's release domain (releases.warp.dev), which is a legitimate source for Warp; installing prebuilt packages from the vendor's own infrastructure is standard practice and not inherently dangerous.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt Arch package from the official project's release domain (releases.warp.dev), which is a legitimate source for Warp; installing prebuilt packages from the vendor's own infrastructure is standard practice and not inherently dangerous.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:33 "${_pkgname}-v${pkgver}-1-x86_64.pkg.tar.zst::https://releases.warp.dev/stable/v${pkgver}/${_pkgname}-v${pkgver}-1-x86_64.pkg.tar.zst"

PKGBUILD

1 offending line(s) highlighted

      1pkgname=warp-terminal-autoup-bin
    
      2_pkgname=warp-terminal
    
      3pkgver=0.2026.07.29.09.05.stable_02
    
      4pkgrel=1
    
      5pkgdesc='Warp, the Rust-based terminal for developers and teams'
    
      6arch=('x86_64')
    
      7url='https://warp.dev'
    
      8license=('custom')
    
      9depends=(
    
      10  'curl'
    
      11  'default-cursors'
    
      12  'fontconfig'
    
      13  'libegl'
    
      14  'libx11'
    
      15  'libxcb'
    
      16  'libxcursor'
    
      17  'libxi'
    
      18  'libxkbcommon-x11'
    
      19  'opengl-driver'
    
      20  'xdg-utils'
    
      21  'zlib'
    
      22)
    
      23optdepends=(
    
      24  'adwaita-cursors: for if there is no default cursor installed'
    
      25  'zenity: for file dialogs in Gnome'
    
      26  'kdialog: for file dialogs in KDE'
    
      27  'org.freedesktop.secrets: for securely storing passwords'
    
      28)
    
      29provides=("${_pkgname}=${pkgver}")
    
      30conflicts=("${_pkgname}")
    
      31options=('!strip' '!debug')
    
      32source=(
    
      33  "${_pkgname}-v${pkgver}-1-x86_64.pkg.tar.zst::https://releases.warp.dev/stable/v${pkgver}/${_pkgname}-v${pkgver}-1-x86_64.pkg.tar.zst"
    
      34)
    
      35noextract=("${_pkgname}-v${pkgver}-1-x86_64.pkg.tar.zst")
    
      36sha256sums=('ca38148d7dfc3de082cfb19b6e85293882eed55bce69d4d93f207d52000abb33')
    
      37
    
      38package() {
    
      39  local _upstream_pkg="${_pkgname}-v${pkgver}-1-x86_64.pkg.tar.zst"
    
      40
    
      41  bsdtar \
    
      42    --exclude '.BUILDINFO' \
    
      43    --exclude '.MTREE' \
    
      44    --exclude '.PKGINFO' \
    
      45    -xpf "${srcdir}/${_upstream_pkg}" \
    
      46    -C "${pkgdir}"
    
      47}
    
      48

Changes since previous scan

--- PKGBUILD @ 2026-07-31 00:14
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,6 +1,6 @@
 pkgname=warp-terminal-autoup-bin
 _pkgname=warp-terminal
-pkgver=0.2026.07.22.09.01.stable_01
+pkgver=0.2026.07.29.09.05.stable_02
 pkgrel=1
 pkgdesc='Warp, the Rust-based terminal for developers and teams'
 arch=('x86_64')
@@ -33,7 +33,7 @@
   "${_pkgname}-v${pkgver}-1-x86_64.pkg.tar.zst::https://releases.warp.dev/stable/v${pkgver}/${_pkgname}-v${pkgver}-1-x86_64.pkg.tar.zst"
 )
 noextract=("${_pkgname}-v${pkgver}-1-x86_64.pkg.tar.zst")
-sha256sums=('69f57f192a1a2f86dd9f4add955b5dcba6774b510899192734838375d60d8698')
+sha256sums=('ca38148d7dfc3de082cfb19b6e85293882eed55bce69d4d93f207d52000abb33')
 
 package() {
   local _upstream_pkg="${_pkgname}-v${pkgver}-1-x86_64.pkg.tar.zst"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 07:17:22	MEDIUM	1
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 07:29:36	MEDIUM	1
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 05:54:03	MEDIUM	1