summarylogtreecommitdiffstats
diff options
context:
space:
mode:
authorSamuel Walladge2018-05-04 15:48:55 +0930
committerSamuel Walladge2018-05-04 15:48:55 +0930
commitc77eabf2adee588042253c96cd60f2f58d48c5ae (patch)
tree1698b60cd8d0f64f9495951309ac3130a9648b82
parent3d07d8739ac2a559af1d6edc27a275779c01c8d4 (diff)
downloadaur-c77eabf2adee588042253c96cd60f2f58d48c5ae.tar.gz
add warning note about modified release files
-rw-r--r--PKGBUILD12
1 files changed, 11 insertions, 1 deletions
diff --git a/PKGBUILD b/PKGBUILD
index 59384dbe22c5..fbaef6fd8b8f 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,5 +1,5 @@
# Maintainer: Samuel Walladge <samuel at swalladge dot id dot au>
-# Maintainer: Kewl <xrjy@nygb.rh.bet(rot13)>
+# Maintainer: Kewl <kewl@alto.eu.org>
pkgname=simplenote-electron-bin
_pkgname=simplenote
@@ -12,7 +12,17 @@ license=('GPL2')
depends=('gcc-libs' 'gconf' 'alsa-lib' 'nss' 'libxtst' 'gtk2')
provides=('simplenote')
source=("https://github.com/Automattic/simplenote-electron/releases/download/v${pkgver}/Simplenote-linux-${pkgver}.deb")
+
sha256sums=('7ea24983e0a8738a628db9aeccca50b21b098c7725aaf8643416c90ea5e76758')
+# Warning: the release deb file has been known to be silently modified,
+# resulting in a different checksum. If the checksum fails to validate, this is
+# most likely the cause. If you are concerned about the security implications
+# of this, please do not install this package. The web app at
+# https://app.simplenote.com/ may better suit.
+#
+# This issue has been raised with Automattic on github: https://github.com/Automattic/simplenote-electron/issues/759
+# See also related conversation on the aur: https://aur.archlinux.org/packages/simplenote-electron-bin/
+
package() {
bsdtar -xv -C "${pkgdir}" -f "${srcdir}/data.tar.xz"