diff options
author | Samuel Walladge | 2018-05-04 15:48:55 +0930 |
---|---|---|
committer | Samuel Walladge | 2018-05-04 15:48:55 +0930 |
commit | c77eabf2adee588042253c96cd60f2f58d48c5ae (patch) | |
tree | 1698b60cd8d0f64f9495951309ac3130a9648b82 | |
parent | 3d07d8739ac2a559af1d6edc27a275779c01c8d4 (diff) | |
download | aur-c77eabf2adee588042253c96cd60f2f58d48c5ae.tar.gz |
add warning note about modified release files
-rw-r--r-- | PKGBUILD | 12 |
1 files changed, 11 insertions, 1 deletions
@@ -1,5 +1,5 @@ # Maintainer: Samuel Walladge <samuel at swalladge dot id dot au> -# Maintainer: Kewl <xrjy@nygb.rh.bet(rot13)> +# Maintainer: Kewl <kewl@alto.eu.org> pkgname=simplenote-electron-bin _pkgname=simplenote @@ -12,7 +12,17 @@ license=('GPL2') depends=('gcc-libs' 'gconf' 'alsa-lib' 'nss' 'libxtst' 'gtk2') provides=('simplenote') source=("https://github.com/Automattic/simplenote-electron/releases/download/v${pkgver}/Simplenote-linux-${pkgver}.deb") + sha256sums=('7ea24983e0a8738a628db9aeccca50b21b098c7725aaf8643416c90ea5e76758') +# Warning: the release deb file has been known to be silently modified, +# resulting in a different checksum. If the checksum fails to validate, this is +# most likely the cause. If you are concerned about the security implications +# of this, please do not install this package. The web app at +# https://app.simplenote.com/ may better suit. +# +# This issue has been raised with Automattic on github: https://github.com/Automattic/simplenote-electron/issues/759 +# See also related conversation on the aur: https://aur.archlinux.org/packages/simplenote-electron-bin/ + package() { bsdtar -xv -C "${pkgdir}" -f "${srcdir}/data.tar.xz" |