wire-desktop-git

LOW
maintainer zxp19821005 7 votes scanned 2026-11-02 12:02:29.906667
View on AUR
Why flagged

The package builds from the official GitHub repository and uses standard Node.js/Electron tooling; the variable-named package installation occurs in a controlled, local build environment and does not introduce remote code execution or supply-chain risks.

Triggered rules

Low AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it LOW (confidence 95%): The package builds from the official GitHub repository and uses standard Node.js/Electron tooling; the variable-named package installation occurs in a controlled, local build environment and does not introduce remote code execution or supply-chain risks.

  • PKGBUILD:105 npm install -g "@yarnpkg/cli-dist@${_yarnver}" --prefix "${_yarnhome}" --registry "${npm_config_registry}"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
2# Contributor: Conor Anderson <conor@conr.ca>
3# Contributor: Maxim Baz <$pkgname at maximbaz dot com>
4pkgname=wire-desktop-git
5_pkgname=WireInternal
6pkgver=3.46.5382.r0.g4b3f44d
7_electronversion=43
8_nodeversion=24
9pkgrel=1
10pkgdesc='End-to-end encrypted messenger with file sharing, voice calls and video conferences.'
11arch=('any')
12url="https://wire.com/"
13_ghurl="https://github.com/wireapp/wire-desktop"
14license=('GPL-3.0-only')
15provides=("${pkgname%-git}")
16conflicts=("${pkgname%-git}")
17depends=(
18 "electron${_electronversion}"
19)
20makedepends=(
21 'git'
22 'npm'
23 'nvm'
24 'yarn'
25 'gendesk'
26 'jq'
27)
28optdepends=(
29 'emoji-font: colorful emoji'
30)
31source=(
32 "${pkgname%-git}.git::git+${_ghurl}.git"
33 "${pkgname%-git}.js"
34 "${pkgname%-git}.sh"
35)
36sha256sums=('SKIP'
37 '562897be8a17076176f8d985c0d7bc1c685f2e7c9b3a932339ce015963243627'
38 'ace275e253744ca62d2572776df26b947f3c89616239985003126db635fc300e')
39_get_project_dir() {
40 local d
41 while IFS= read -r d; do
42 find "$d" -name "package.json" ! -path "*/node_modules/*" 2>/dev/null | grep -q . && { echo "$d"; return; }
43 done < <(find "${srcdir}" -maxdepth 1 -mindepth 1 -type d ! -name '.*')
44}
45pkgver() {
46 cd "$(_get_project_dir)"
47 set -o pipefail
48 git describe --long --tags --abbrev=7 | sed 's/\([^-]*-g\)/r\1/;s/-/./g;s/v//g' ||
49 printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
50}
51_ensure_local_nvm() {
52 local NVM_DIR="${srcdir}/.nvm"
53 source /usr/share/nvm/init-nvm.sh || [[ $? != 1 ]]
54 nvm install "${_nodeversion}"
55 nvm use "${_nodeversion}"
56}
57_get_app_dir() {
58 find "${srcdir}" -type f -name "resources.pak" ! -path "*/node_modules/*" -printf '%h\n' 2>/dev/null \
59 | while read -r d; do [[ -d "${d}/resources" ]] && { echo "$d"; return 0; }; done
60}
61_get_electron_version() {
62 _elec_ver=$(find "$(_get_project_dir)" -name "package.json" ! -path "*/node_modules/*" -print \
63 | xargs -I{} jq -r '(.devDependencies.electron // .dependencies.electron) // empty' {} 2>/dev/null \
64 | grep -oE '[0-9]+' | head -1)
65 [[ -z "${_elec_ver}" ]] && return 1
66 (( _elec_ver == _electronversion )) && c=32 || c=31
67 echo -e "Electron version: \033[1;${c}m${_elec_ver}$([[ $c -eq 31 ]] && echo " (expected ${_electronversion})")\033[0m"
68}
69_set_electron_build_env() {
70 export ELECTRON_DIST="/usr/lib/electron${_electronversion}"
71 export ELECTRON_OVERRIDE_DIST_PATH="${ELECTRON_DIST}"
72 export ELECTRON_SKIP_BINARY_DOWNLOAD=1
73 export ELECTRON_BUILDER_OFFLINE=true
74 export SYSTEM_ELECTRON_VERSION="$(electron${_electronversion} -v | sed 's/^v//')"
75}
76_set_yarn_build_env() {
77 export HOME="${srcdir}/.home"
78 export XDG_CACHE_HOME="${HOME}/.cache"
79 export XDG_CONFIG_HOME="${HOME}/.config"
80 export XDG_DATA_HOME="${HOME}/.local/share"
81 export YARN_CACHE_FOLDER="${HOME}/.yarn/cache"
82 export YARN_NETWORK_CONCURRENCY=32
83 export COREPACK_NPM_REGISTRY="${COREPACK_NPM_REGISTRY:-${NPM_CONFIG_REGISTRY:-https://registry.npmjs.org}}"
84 export COREPACK_HOME="${HOME}/.corepack"
85 export npm_config_registry="${NPM_CONFIG_REGISTRY:-https://registry.npmjs.org}"
86 local _yarnver _yarnmajor=0
87 _yarnver="$(node -p "try { require('./package.json').packageManager?.split('@')[1]?.split('-')[0] || '' } catch { '' }" 2>/dev/null || true)"
88 _yarnmajor="${_yarnver%%.*}"
89 _yarnmajor="${_yarnmajor:-0}"
90 if [[ "${_yarnmajor}" -ge 2 ]] 2>/dev/null || [[ -f .yarnrc.yml ]]; then
91 export XDG_STATE_HOME="${HOME}/.local/state"
92 export YARN_ENABLE_GLOBAL_CACHE=false
93 export YARN_ENABLE_MIRROR=false
94 export YARN_GLOBAL_FOLDER="${HOME}/.yarn/berry"
95 export YARN_NODE_LINKER=node-modules
96 export YARN_NM_MODE=hardlinks-local
97 export YARN_ENABLE_TELEMETRY=false
98 export YARN_ENABLE_SCRIPTS=true
99 export YARN_HTTP_TIMEOUT=600000
100 export YARN_HTTP_RETRY=5
101 export YARN_NPM_REGISTRY_SERVER="${YARN_NPM_REGISTRY_SERVER:-${NPM_CONFIG_REGISTRY:-https://registry.yarnpkg.com}}"
102 local _yarnhome="${HOME}/.yarn/install"
103 mkdir -p "${HOME}" "${YARN_CACHE_FOLDER}" "${YARN_GLOBAL_FOLDER}" "${COREPACK_HOME}" "${_yarnhome}"
104 if [[ -n "${_yarnver}" ]]; then
105 npm install -g "@yarnpkg/cli-dist@${_yarnver}" --prefix "${_yarnhome}" --registry "${npm_config_registry}"
106 export PATH="${_yarnhome}/bin:${PATH}"
107 fi
108 else
109 export YARN_GLOBAL_FOLDER="${HOME}/.yarn/global"
110 export YARN_LINK_FOLDER="${HOME}/.yarn/link"
111 export YARN_TEMP_FOLDER="${HOME}/.yarn/tmp"
112 export YARN_NETWORK_TIMEOUT=600000
113 export YARN_CHILD_CONCURRENCY="$(nproc)"
114 export YARN_FROZEN_LOCKFILE=true
115 export YARN_IGNORE_ENGINES=true
116 export YARN_PRODUCTION=false
117 mkdir -p "${HOME}" "${YARN_CACHE_FOLDER}" "${YARN_GLOBAL_FOLDER}" "${YARN_LINK_FOLDER}" "${YARN_TEMP_FOLDER}" "${COREPACK_HOME}"
118 export YARN_REGISTRY="${NPM_CONFIG_REGISTRY:-https://registry.yarnpkg.com}"
119 fi
120 local _reg="${NPM_CONFIG_REGISTRY:-https://registry.yarnpkg.com}"
121 _reg="${_reg%/}"
122 if [[ -f yarn.lock ]] && grep -q 'registry.yarnpkg.com' yarn.lock; then
123 sed -i "s|https://registry.yarnpkg.com/|${_reg}/|g" yarn.lock
124 fi
125}
126prepare() {
127 cd "$(_get_project_dir)"
128 _get_electron_version
129 sed -i -e "
130 s/@electronversion@/${_electronversion}/g
131 s/@appname@/${pkgname%-git}/g
132 " "${srcdir}/${pkgname%-git}.sh" "${srcdir}/${pkgname%-git}.js"
133 gendesk -q -f -n \
134 --pkgname="${pkgname%-git}" \
135 --pkgdesc="${pkgdesc}" \
136 --categories="Network" \
137 --name="${_pkgname}" \
138 --exec="${pkgname%-git} %U"
139 _ensure_local_nvm
140 _set_electron_build_env
141 _set_yarn_build_env
142 jq --arg ver "${SYSTEM_ELECTRON_VERSION}" '.devDependencies.electron = $ver' package.json > package.json.tmp && mv package.json.tmp package.json
143 export NODE_ENV=development
144 yarn install
145}
146build() {
147 cd "$(_get_project_dir)"
148 _ensure_local_nvm
149 _set_electron_build_env
150 _set_yarn_build_env
151 export NODE_ENV=production
152 yarn run build:prepare
153 yarn electron-builder --linux dir -c.electronDist="${ELECTRON_DIST}"
154}
155package() {
156 install -Dm755 "${srcdir}/${pkgname%-git}.sh" "${pkgdir}/usr/bin/${pkgname%-git}"
157 install -Dm644 "${srcdir}/${pkgname%-git}.js" -t "${pkgdir}/usr/lib/${pkgname%-git}"
158 cp -a "$(_get_app_dir)/resources/." "${pkgdir}/usr/lib/${pkgname%-git}/"
159 install -Dm644 "$(_get_project_dir)/resources/icons/256x256.png" "${pkgdir}/usr/share/pixmaps/${pkgname%-git}.png"
160 install -Dm644 "$(_get_project_dir)/${pkgname%-git}.desktop" -t "${pkgdir}/usr/share/applications"
161 install -Dm644 "$(_get_project_dir)/LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}"
162}
163

Changes since previous scan

--- PKGBUILD @ 2026-09-18 09:28
+++ PKGBUILD @ 2026-11-02 12:02
@@ -3,11 +3,11 @@
# Contributor: Maxim Baz <$pkgname at maximbaz dot com>
pkgname=wire-desktop-git
_pkgname=WireInternal
-pkgver=3.42.1540.r231.ge1ba98c
-_electronversion=38
-_nodeversion=22
+pkgver=3.46.5382.r0.g4b3f44d
+_electronversion=43
+_nodeversion=24
pkgrel=1
-pkgdesc='End-to-end encrypted messenger with file sharing, voice calls and video conferences.(Use system-wide electron)'
+pkgdesc='End-to-end encrypted messenger with file sharing, voice calls and video conferences.'
arch=('any')
url="https://wire.com/"
_ghurl="https://github.com/wireapp/wire-desktop"
@@ -23,7 +23,6 @@
'nvm'
'yarn'
'gendesk'
- 'curl'
'jq'
)
optdepends=(
@@ -31,88 +30,134 @@
)
source=(
"${pkgname%-git}.git::git+${_ghurl}.git"
+ "${pkgname%-git}.js"
"${pkgname%-git}.sh"
)
sha256sums=('SKIP'
- 'a774c2f54fbbeeaac3cefc0f7250796d30c86d27f0fd40b7eaf9c0fdb021623d')
+ '562897be8a17076176f8d985c0d7bc1c685f2e7c9b3a932339ce015963243627'
+ 'ace275e253744ca62d2572776df26b947f3c89616239985003126db635fc300e')
+_get_project_dir() {
+ local d
+ while IFS= read -r d; do
+ find "$d" -name "package.json" ! -path "*/node_modules/*" 2>/dev/null | grep -q . && { echo "$d"; return; }
+ done < <(find "${srcdir}" -maxdepth 1 -mindepth 1 -type d ! -name '.*')
+}
pkgver() {
- cd "${srcdir}/${pkgname%-git}.git"
- set -o pipefail
- git describe --long --tags --abbrev=7 | sed 's/\([^-]*-g\)/r\1/;s/-/./g;s/linux\///g;s/macos\///g;s/windows\///g' ||
- printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
+ cd "$(_get_project_dir)"
+ set -o pipefail
+ git describe --long --tags --abbrev=7 | sed 's/\([^-]*-g\)/r\1/;s/-/./g;s/v//g' ||
+ printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
}
_ensure_local_nvm() {
- export NVM_DIR="${srcdir}/.nvm"
- source /usr/share/nvm/init-nvm.sh || [[ $? != 1 ]]
- nvm install "${_nodeversion}"
- nvm use "${_nodeversion}"
+ local NVM_DIR="${srcdir}/.nvm"
+ source /usr/share/nvm/init-nvm.sh || [[ $? != 1 ]]
+ nvm install "${_nodeversion}"
+ nvm use "${_nodeversion}"
}
_get_app_dir() {
- find "${srcdir}" -type f -name "resources.pak" -exec dirname {} + | head -n 1
+ find "${srcdir}" -type f -name "resources.pak" ! -path "*/node_modules/*" -printf '%h\n' 2>/dev/null \
+ | while read -r d; do [[ -d "${d}/resources" ]] && { echo "$d"; return 0; }; done
}
_get_electron_version() {
- _elec_ver=$(find "${srcdir}" -maxdepth 5 -name "package.json" ! -path "*/node_modules/*" \
- -exec grep -l '"electron"' {} + | xargs -I{} jq -r '(.devDependencies.electron // .dependencies.electron) // empty' {} 2>/dev/null | head -1)
- [[ -z "${_elec_ver}" ]] && return 1
- echo -e "The electron version is: \033[1;31m${_elec_ver%%.*}\033[0m"
+ _elec_ver=$(find "$(_get_project_dir)" -name "package.json" ! -path "*/node_modules/*" -print \
+ | xargs -I{} jq -r '(.devDependencies.electron // .dependencies.electron) // empty' {} 2>/dev/null \
+ | grep -oE '[0-9]+' | head -1)
+ [[ -z "${_elec_ver}" ]] && return 1
+ (( _elec_ver == _electronversion )) && c=32 || c=31
+ echo -e "Electron version: \033[1;${c}m${_elec_ver}$([[ $c -eq 31 ]] && echo " (expected ${_electronversion})")\033[0m"
}
-_set_build_env() {
- export ELECTRON_DIST="/usr/lib/electron${_electronversion}"
- export ELECTRON_SKIP_BINARY_DOWNLOAD=1
- export SYSTEM_ELECTRON_VERSION="$(electron${_electronversion} -v | sed 's/v//g')"
- export HOME="${srcdir}/.electron-gyp"
- mkdir -p "${srcdir}/.electron-gyp"
- if [[ "$(curl -s ipinfo.io/country)" == *"CN"* ]]; then
- {
- export YARN_NPM_REGISTRY_SERVER="https://registry.npmmirror.com"
- export ELECTRON_MIRROR="https://registry.npmmirror.com/-/binary/electron/"
- export ELECTRON_BUILDER_BINARIES_MIRROR="https://registry.npmmirror.com/-/binary/electron-builder-binaries/"
- export NODEJS_ORG_MIRROR="https://npmmirror.com/mirrors/node"
- export YARN_CACHE_FOLDER="${srcdir}/.yarn/cache"
- export YARN_HTTP_RETRY=3
- export YARN_HTTP_TIMEOUT=10000
- }
- fi
+_set_electron_build_env() {
+ export ELECTRON_DIST="/usr/lib/electron${_electronversion}"
+ export ELECTRON_OVERRIDE_DIST_PATH="${ELECTRON_DIST}"
+ export ELECTRON_SKIP_BINARY_DOWNLOAD=1
+ export ELECTRON_BUILDER_OFFLINE=true
+ export SYSTEM_ELECTRON_VERSION="$(electron${_electronversion} -v | sed 's/^v//')"
+}
+_set_yarn_build_env() {
+ export HOME="${srcdir}/.home"
+ export XDG_CACHE_HOME="${HOME}/.cache"
+ export XDG_CONFIG_HOME="${HOME}/.config"
+ export XDG_DATA_HOME="${HOME}/.local/share"
+ export YARN_CACHE_FOLDER="${HOME}/.yarn/cache"
+ export YARN_NETWORK_CONCURRENCY=32
+ export COREPACK_NPM_REGISTRY="${COREPACK_NPM_REGISTRY:-${NPM_CONFIG_REGISTRY:-https://registry.npmjs.org}}"
+ export COREPACK_HOME="${HOME}/.corepack"
+ export npm_config_registry="${NPM_CONFIG_REGISTRY:-https://registry.npmjs.org}"
+ local _yarnver _yarnmajor=0
+ _yarnver="$(node -p "try { require('./package.json').packageManager?.split('@')[1]?.split('-')[0] || '' } catch { '' }" 2>/dev/null || true)"
+ _yarnmajor="${_yarnver%%.*}"
+ _yarnmajor="${_yarnmajor:-0}"
+ if [[ "${_yarnmajor}" -ge 2 ]] 2>/dev/null || [[ -f .yarnrc.yml ]]; then
+ export XDG_STATE_HOME="${HOME}/.local/state"
+ export YARN_ENABLE_GLOBAL_CACHE=false
+ export YARN_ENABLE_MIRROR=false
+ export YARN_GLOBAL_FOLDER="${HOME}/.yarn/berry"
+ export YARN_NODE_LINKER=node-modules
+ export YARN_NM_MODE=hardlinks-local
+ export YARN_ENABLE_TELEMETRY=false
+ export YARN_ENABLE_SCRIPTS=true
+ export YARN_HTTP_TIMEOUT=600000
+ export YARN_HTTP_RETRY=5
+ export YARN_NPM_REGISTRY_SERVER="${YARN_NPM_REGISTRY_SERVER:-${NPM_CONFIG_REGISTRY:-https://registry.yarnpkg.com}}"
+ local _yarnhome="${HOME}/.yarn/install"
+ mkdir -p "${HOME}" "${YARN_CACHE_FOLDER}" "${YARN_GLOBAL_FOLDER}" "${COREPACK_HOME}" "${_yarnhome}"
+ if [[ -n "${_yarnver}" ]]; then
+ npm install -g "@yarnpkg/cli-dist@${_yarnver}" --prefix "${_yarnhome}" --registry "${npm_config_registry}"
+ export PATH="${_yarnhome}/bin:${PATH}"
+ fi
+ else
+ export YARN_GLOBAL_FOLDER="${HOME}/.yarn/global"
+ export YARN_LINK_FOLDER="${HOME}/.yarn/link"
+ export YARN_TEMP_FOLDER="${HOME}/.yarn/tmp"
+ export YARN_NETWORK_TIMEOUT=600000
+ export YARN_CHILD_CONCURRENCY="$(nproc)"
+ export YARN_FROZEN_LOCKFILE=true
+ export YARN_IGNORE_ENGINES=true
+ export YARN_PRODUCTION=false
+ mkdir -p "${HOME}" "${YARN_CACHE_FOLDER}" "${YARN_GLOBAL_FOLDER}" "${YARN_LINK_FOLDER}" "${YARN_TEMP_FOLDER}" "${COREPACK_HOME}"
+ export YARN_REGISTRY="${NPM_CONFIG_REGISTRY:-https://registry.yarnpkg.com}"
+ fi
+ local _reg="${NPM_CONFIG_REGISTRY:-https://registry.yarnpkg.com}"
+ _reg="${_reg%/}"
+ if [[ -f yarn.lock ]] && grep -q 'registry.yarnpkg.com' yarn.lock; then
+ sed -i "s|https://registry.yarnpkg.com/|${_reg}/|g" yarn.lock
+ fi
}
prepare() {
- cd "${srcdir}/${pkgname%-git}.git"
+ cd "$(_get_project_dir)"
_get_electron_version
sed -i -e "
s/@electronversion@/${_electronversion}/g
s/@appname@/${pkgname%-git}/g
- s/@runname@/app.asar/g
- s/@cfgdirname@/${_pkgname}/g
- s/@options@/env ELECTRON_OZONE_PLATFORM_HINT=auto/g
- " "${srcdir}/${pkgname%-git}.sh"
+ " "${srcdir}/${pkgname%-git}.sh" "${srcdir}/${pkgname%-git}.js"
gendesk -q -f -n \
--pkgname="${pkgname%-git}" \
--pkgdesc="${pkgdesc}" \
--categories="Network" \
--name="${_pkgname}" \
--exec="${pkgname%-git} %U"
- _set_build_env
_ensure_local_nvm
- sed -i -e "
- s/\"electron\": \"[^\"]*\"/\"electron\": \"${SYSTEM_ELECTRON_VERSION}\"/g
- s/\(electron-mocha \)/xvfb-run \1/g
- " package.json
- yarn config set --home enableTelemetry 0
- NODE_ENV=development yarn install --immutable
+ _set_electron_build_env
+ _set_yarn_build_env
+ jq --arg ver "${SYSTEM_ELECTRON_VERSION}" '.devDependencies.electron = $ver' package.json > package.json.tmp && mv package.json.tmp package.json
+ export NODE_ENV=development
+ yarn install
}
build() {
- cd "${srcdir}/${pkgname%-git}.git"
- _set_build_env
+ cd "$(_get_project_dir)"
_ensure_local_nvm
- NODE_ENV=production yarn run build:prepare
- NODE_ENV=production yarn electron-builder --linux dir -c.electronDist="${ELECTRON_DIST}"
+ _set_electron_build_env
+ _set_yarn_build_env
+ export NODE_ENV=production
+ yarn run build:prepare
+ yarn electron-builder --linux dir -c.electronDist="${ELECTRON_DIST}"
}
package() {
install -Dm755 "${srcdir}/${pkgname%-git}.sh" "${pkgdir}/usr/bin/${pkgname%-git}"
- install -Dm755 -d "${pkgdir}/usr/lib/${pkgname%-git}"
- local _app_dir=$(_get_app_dir)
- cp -a "${_app_dir}/resources/"* "${pkgdir}/usr/lib/${pkgname%-git}/"
- install -Dm644 "${srcdir}/${pkgname%-git}.git/resources/icons/256x256.png" "${pkgdir}/usr/share/pixmaps/${pkgname%-git}.png"
- install -Dm644 "${srcdir}/${pkgname%-git}.git/${pkgname%-git}.desktop" -t "${pkgdir}/usr/share/applications"
- install -Dm644 "${srcdir}/${pkgname%-git}.git/LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}"
+ install -Dm644 "${srcdir}/${pkgname%-git}.js" -t "${pkgdir}/usr/lib/${pkgname%-git}"
+ cp -a "$(_get_app_dir)/resources/." "${pkgdir}/usr/lib/${pkgname%-git}/"
+ install -Dm644 "$(_get_project_dir)/resources/icons/256x256.png" "${pkgdir}/usr/share/pixmaps/${pkgname%-git}.png"
+ install -Dm644 "$(_get_project_dir)/${pkgname%-git}.desktop" -t "${pkgdir}/usr/share/applications"
+ install -Dm644 "$(_get_project_dir)/LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}"
}

Scan history

Scanned at (UTC)SeverityRules
2026-11-02 12:02:29 Low 1
2026-09-18 09:28:06 Clean 0
2026-08-19 03:41:13 Clean 0
2026-06-18 16:11:54 Clean 0

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion