zen-adblocker

MEDIUM

maintainer yochananmarqos 0 votes scanned 2026-10-27 21:48:49.990097

View on AUR

Why flagged

A non-pip/npm package manager (pipx, uv, poetry, cargo install, go install, gem, conda…) fetches and builds an external package at build time, outside source=() and makepkg's checksums.

Triggered rules

Medium External install via pipx/uv/poetry/cargo/go/gem alt_pkg_manager_install

A non-pip/npm package manager (pipx, uv, poetry, cargo install, go install, gem, conda…) fetches and builds an external package at build time, outside source=() and makepkg's checksums.

PKGBUILD:52 go install "github.com/wailsapp/wails/v2/cmd/wails@$(go list -m -f 'v2.14.0' github.com/wailsapp/wails/v2)"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Mark Wagie <mark dot wagie at proton dot me>
    
      2pkgname=zen-adblocker
    
      3pkgver=0.28.0
    
      4pkgrel=2
    
      5_nodeversion=24
    
      6pkgdesc="Simple, free and efficient ad-blocker and privacy guard"
    
      7arch=('x86_64' 'aarch64')
    
      8url="https://irbis.sh/zen"
    
      9license=('MIT')
    
      10depends=(
    
      11  'ca-certificates-utils'
    
      12  'coreutils'
    
      13  'gtk3'
    
      14  'libsoup3'
    
      15  'networkmanager'
    
      16  'p11-kit'
    
      17  'webkit2gtk-4.1'
    
      18)
    
      19makedepends=(
    
      20  'git'
    
      21  'go'
    
      22  'nvm'
    
      23  # 'wails'  ## Not compatible with >=3.0.0
    
      24)
    
      25optdepends=('libayatana-appindicator: tray icon')
    
      26source=("git+https://github.com/ZenPrivacy/zen-desktop.git#tag=v$pkgver"
    
      27        "$pkgname.desktop")
    
      28sha256sums=('e9c3445e5ad600edc84e336822e75fb35d1d1507ac18727708adf2455ff19ae2'
    
      29            'ddbea3e9cd09c395c3c0056fad8b72d791be7f6f3ca0f07f9ced0020881b29d9')
    
      30
    
      31_ensure_local_nvm() {
    
      32  # let's be sure we are starting clean
    
      33  which nvm >/dev/null 2>&1 && nvm deactivate && nvm unload
    
      34  export NVM_DIR="$srcdir/.nvm"
    
      35
    
      36  # The init script returns 3 if version specified
    
      37  # in ./.nvrc is not (yet) installed in $NVM_DIR
    
      38  # but nvm itself still gets loaded ok
    
      39  source /usr/share/nvm/init-nvm.sh || [[ $? != 1 ]]
    
      40}
    
      41
    
      42prepare() {
    
      43  _ensure_local_nvm
    
      44  nvm install "${_nodeversion}"
    
      45
    
      46  cd zen-desktop
    
      47  export npm_config_cache="$srcdir/npm_cache"
    
      48  npm install --prefix frontend
    
      49
    
      50  export GOPATH="$srcdir/gopath"
    
      51  go mod download -modcacherw
    
      52  go install "github.com/wailsapp/wails/v2/cmd/wails@$(go list -m -f 'v2.14.0' github.com/wailsapp/wails/v2)"
    
      53}
    
      54
    
      55build() {
    
      56  cd zen-desktop
    
      57  _instance_id="$(node -e 'const {randomUUID}=require("node:crypto");console.log(randomUUID());')"
    
      58  export npm_config_cache="$srcdir/npm_cache"
    
      59  export GOPATH="$srcdir/gopath"
    
      60  export CGO_CPPFLAGS="${CPPFLAGS}"
    
      61  export CGO_CFLAGS="${CFLAGS}"
    
      62  export CGO_CXXFLAGS="${CXXFLAGS}"
    
      63  export CGO_LDFLAGS="${LDFLAGS}"
    
      64  export GOFLAGS="-buildmode=pie -trimpath"
    
      65  export PATH="${PATH}:$srcdir/gopath/bin"
    
      66  _ensure_local_nvm
    
      67  wails build \
    
      68    -ldflags "-linkmode=external -extldflags \"${LDFLAGS}\" \
    
      69      -X 'github.com/ZenPrivacy/zen-desktop/internal/cfg.Version=${pkgver}' \
    
      70      -X 'github.com/ZenPrivacy/zen-desktop/internal/constants.InstanceID=${_instance_id}' \
    
      71      -X 'github.com/ZenPrivacy/zen-desktop/internal/selfupdate.NoSelfUpdate=true'" \
    
      72    -m -skipbindings \
    
      73    -tags prod-noupdate,webkit2_41 \
    
      74    -o "$pkgname"
    
      75
    
      76  # Clean module cache for makepkg -C
    
      77  go clean -modcache
    
      78}
    
      79
    
      80package() {
    
      81  cd zen-desktop
    
      82  install -Dm755 "build/bin/$pkgname" -t "$pkgdir/usr/bin/"
    
      83  install -Dm644 assets/logo.svg "$pkgdir/usr/share/icons/hicolor/scalable/apps/$pkgname.svg"
    
      84  install -Dm644 "$srcdir/$pkgname.desktop" -t "$pkgdir/usr/share/applications/"
    
      85  install -Dm644 LICENSE -t "$pkgdir/usr/share/licenses/$pkgname/"
    
      86}
    
      87

Changes since previous scan

--- PKGBUILD @ 2026-10-22 19:36
+++ PKGBUILD @ 2026-10-27 21:48
@@ -1,7 +1,7 @@
 # Maintainer: Mark Wagie <mark dot wagie at proton dot me>
 pkgname=zen-adblocker
 pkgver=0.28.0
-pkgrel=1
+pkgrel=2
 _nodeversion=24
 pkgdesc="Simple, free and efficient ad-blocker and privacy guard"
 arch=('x86_64' 'aarch64')
@@ -20,7 +20,7 @@
   'git'
   'go'
   'nvm'
-  'wails'
+  # 'wails'  ## Not compatible with >=3.0.0
 )
 optdepends=('libayatana-appindicator: tray icon')
 source=("git+https://github.com/ZenPrivacy/zen-desktop.git#tag=v$pkgver"
@@ -46,6 +46,10 @@
   cd zen-desktop
   export npm_config_cache="$srcdir/npm_cache"
   npm install --prefix frontend
+
+  export GOPATH="$srcdir/gopath"
+  go mod download -modcacherw
+  go install "github.com/wailsapp/wails/v2/cmd/wails@$(go list -m -f 'v2.14.0' github.com/wailsapp/wails/v2)"
 }
 
 build() {
@@ -58,6 +62,7 @@
   export CGO_CXXFLAGS="${CXXFLAGS}"
   export CGO_LDFLAGS="${LDFLAGS}"
   export GOFLAGS="-buildmode=pie -trimpath"
+  export PATH="${PATH}:$srcdir/gopath/bin"
   _ensure_local_nvm
   wails build \
     -ldflags "-linkmode=external -extldflags \"${LDFLAGS}\" \

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-27 21:48:49	Medium	1
2026-10-22 19:36:04	Clean	0
2026-10-13 19:18:20	Clean	0
2026-10-08 18:09:39	Clean	0
2026-08-14 13:29:16	Clean	0
2026-08-11 15:21:23	Clean	0
2026-07-23 15:24:42	Clean	0
2026-06-28 16:33:07	Clean	0
2026-06-23 14:16:56	Clean	0
2026-06-18 16:11:54	Clean	0