115-life-bin

LOW

maintainer taotieren 0 votes scanned 2026-08-25 11:28:13.427052

View on AUR

Why flagged

Installs a prebuilt binary from down.115.com, which is the official download infrastructure for the 115.com service; the checksum is provided and non-SKIP, making silent substitution detectable, though the binary is closed-source commercial software from a Chinese cloud storage provider.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 75%): Installs a prebuilt binary from down.115.com, which is the official download infrastructure for the 115.com service; the checksum is provided and non-SKIP, making silent substitution detectable, though the binary is closed-source commercial software from a Chinese cloud storage provider.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:31 "https://115.com/privacy.html"
PKGBUILD:35 "${pkgname}-${pkgver}.deb::https://down.115.com/client/115pc/lin/${_pkgname}_${pkgver}.deb"

PKGBUILD

2 offending line(s) highlighted

      1# Maintainer: taotieren <admin@taotieren.com>
    
      2
    
      3pkgbase=115-life-bin
    
      4pkgname=115-life-bin
    
      5_pkgname=115Life
    
      6pkgver=37.2.2
    
      7pkgrel=1
    
      8arch=('x86_64')
    
      9options=(!strip !debug)
    
      10depends=(
    
      11    libgcc_s.so
    
      12    libstdc++.so
    
      13    hicolor-icon-theme
    
      14    zlib
    
      15)
    
      16makedepends=(
    
      17    libarchive
    
      18    util-linux
    
      19)
    
      20optdepends=(
    
      21    "115-browser: 115 Browser / 115 浏览器"
    
      22)
    
      23provides=(${pkgname%-bin})
    
      24conflicts=(${pkgname%-bin})
    
      25replaces=()
    
      26pkgdesc="115 Life / 115 生活"
    
      27license=('LicenseRef-scancode-commercial-license')
    
      28url="https://115.com"
    
      29# install=${pkgname}.install
    
      30source=(
    
      31    "https://115.com/privacy.html"
    
      32    "https://115.com/copyright.html"
    
      33)
    
      34source_x86_64=(
    
      35    "${pkgname}-${pkgver}.deb::https://down.115.com/client/115pc/lin/${_pkgname}_${pkgver}.deb"
    
      36)
    
      37sha256sums=('7a1c438a53cd10ad78b9ea150521f12e6d97e10cf07f07d38d4f0a65f22cafcf'
    
      38            'cfe25e4d5d8236b3b68089fbc4b56aaa7db1d0a560905f1faf004bc5e4534245')
    
      39sha256sums_x86_64=('438078226647c93f8a1da8e00d20e0c760e09089fdcb8639c293e576387c3e55')
    
      40noextract=("${pkgname}-${pkgver}.deb")
    
      41
    
      42prepare() {
    
      43    if [ -d ${srcdir}/${pkgname}-${pkgver} ]; then
    
      44        rm -rf ${srcdir}/${pkgname}-${pkgver}
    
      45    fi
    
      46    mkdir -pv ${srcdir}/${pkgname}-${pkgver}
    
      47
    
      48    bsdtar -xf "${srcdir}/${pkgname}-${pkgver}.deb" --numeric-owner -C "${srcdir}/${pkgname}-${pkgver}"
    
      49}
    
      50
    
      51package() {
    
      52    install -dvm755 "${pkgdir}/usr/bin" \
    
      53        "${pkgdir}/opt/115"
    
      54
    
      55    bsdtar -xf "${srcdir}/${pkgname}-${pkgver}/data.tar.xz" --numeric-owner -C "${pkgdir}"
    
      56
    
      57    chown -R root:root "${pkgdir}"
    
      58
    
      59    mv "${pkgdir}/opt/115life" "${pkgdir}/opt/115"
    
      60
    
      61    sed -i 's|/opt|/opt/115|g' "${pkgdir}/usr/share/applications/life115.desktop"
    
      62    ln -sf "/opt/115/115life/Life115" "${pkgdir}/usr/bin/${pkgname%-bin}"
    
      63
    
      64    rm -rf ${pkgdir}/usr/bin/115life
    
      65    mv ${pkgdir}/usr/share/doc/115life ${pkgdir}/usr/share/doc/${pkgname}
    
      66    chmod 644 ${pkgdir}/usr/share/applications/life115.desktop
    
      67    install -vDm644 "${srcdir}/privacy.html" -t "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      68    install -vDm644 "${srcdir}/copyright.html" -t "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      69}
    
      70

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-25 11:28:13	Low	3
2026-08-25 11:26:09	Medium	2