115-life-bin

LOW

maintainer taotieren 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package downloads a prebuilt .deb from the official 115.com domain, which is plausibly the project's own release infrastructure; the non-standard host URLs are for static legal pages (privacy, copyright) that are safely installed as license data and do not pose a code execution risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt .deb from the official 115.com domain, which is plausibly the project's own release infrastructure; the non-standard host URLs are for static legal pages (privacy, copyright) that are safely installed as license data and do not pose a code execution risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:40 "https://115.com/privacy.html"
PKGBUILD:44 "${pkgname}-${pkgver}.deb::https://down.115.com/client/115pc/lin/${_pkgname}_${pkgver}.deb"

PKGBUILD

2 offending line(s) highlighted

      1# Maintainer: taotieren <admin@taotieren.com>
    
      2
    
      3pkgbase=115-life-bin
    
      4pkgname=115-life-bin
    
      5_pkgname=115Life
    
      6pkgver=37.3.1
    
      7pkgrel=1
    
      8arch=('x86_64')
    
      9options=(!strip !debug)
    
      10depends=(
    
      11    fontconfig
    
      12    glibc
    
      13    gtk3
    
      14    libgcc_s.so
    
      15    libstdc++.so
    
      16    libva
    
      17    hicolor-icon-theme
    
      18    openssl
    
      19    webkit2gtk-4.1
    
      20    wqy-microhei
    
      21    zlib
    
      22)
    
      23makedepends=(
    
      24    libarchive
    
      25)
    
      26optdepends=(
    
      27    "115-browser: 115 Browser / 115 浏览器"
    
      28    "noto-fonts-cjk"
    
      29    "wqy-zenhei"
    
      30    "adobe-source-han-sans-cn-fonts"
    
      31)
    
      32provides=(${pkgname%-bin})
    
      33conflicts=(${pkgname%-bin})
    
      34replaces=()
    
      35pkgdesc="115 Life / 115 生活"
    
      36license=('LicenseRef-scancode-commercial-license')
    
      37url="https://115.com"
    
      38# install=${pkgname}.install
    
      39source=(
    
      40    "https://115.com/privacy.html"
    
      41    "https://115.com/copyright.html"
    
      42)
    
      43source_x86_64=(
    
      44    "${pkgname}-${pkgver}.deb::https://down.115.com/client/115pc/lin/${_pkgname}_${pkgver}.deb"
    
      45)
    
      46sha256sums=('7a1c438a53cd10ad78b9ea150521f12e6d97e10cf07f07d38d4f0a65f22cafcf'
    
      47            'cfe25e4d5d8236b3b68089fbc4b56aaa7db1d0a560905f1faf004bc5e4534245')
    
      48sha256sums_x86_64=('e3813e2af83cffeed7e3160581aeffeb07d2cb33ea8f303fb568bb57082c9315')
    
      49noextract=("${pkgname}-${pkgver}.deb")
    
      50
    
      51prepare() {
    
      52    if [ -d ${srcdir}/${pkgname}-${pkgver} ]; then
    
      53        rm -rf ${srcdir}/${pkgname}-${pkgver}
    
      54    fi
    
      55    mkdir -pv ${srcdir}/${pkgname}-${pkgver}
    
      56
    
      57    bsdtar -xf "${srcdir}/${pkgname}-${pkgver}.deb" --numeric-owner -C "${srcdir}/${pkgname}-${pkgver}"
    
      58}
    
      59
    
      60package() {
    
      61    install -dvm755 "${pkgdir}/usr/bin" \
    
      62        "${pkgdir}/opt/115"
    
      63
    
      64    bsdtar -xf "${srcdir}/${pkgname}-${pkgver}/data.tar.xz" --numeric-owner -C "${pkgdir}"
    
      65
    
      66    chown -R root:root "${pkgdir}"
    
      67
    
      68    mv "${pkgdir}/opt/115life" "${pkgdir}/opt/115"
    
      69
    
      70    sed -i 's|/opt|/opt/115|g' "${pkgdir}/usr/share/applications/life115.desktop"
    
      71    ln -sf "/opt/115/115life/Life115" "${pkgdir}/usr/bin/${pkgname%-bin}"
    
      72
    
      73    rm -rf ${pkgdir}/usr/bin/115life
    
      74    mv ${pkgdir}/usr/share/doc/115life ${pkgdir}/usr/share/doc/${pkgname}
    
      75    chmod 644 ${pkgdir}/usr/share/applications/life115.desktop
    
      76    install -vDm644 "${srcdir}/privacy.html" -t "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      77    install -vDm644 "${srcdir}/copyright.html" -t "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      78}
    
      79

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 00:11:52	Low	2
2026-10-09 00:05:33	Low	2
2026-10-08 00:28:03	Low	2
2026-10-07 00:21:34	Low	2
2026-10-06 00:13:36	Low	2
2026-10-05 00:08:03	Low	2
2026-10-04 00:18:08	Low	2
2026-10-03 00:23:04	Low	2
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2