4kimagecompressor

MEDIUM
maintainer Muflone 1 votes scanned 2026-10-05 23:40:58.404909
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:12 source=("${pkgname}_${pkgver}_amd64.tar.bz2"::"https://dl.4kdownload.com/app/${pkgname}_${pkgver%.*}_amd64.tar.bz2"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Muflone http://www.muflone.com/contacts/english/
2
3pkgname=4kimagecompressor
4pkgver=26.0.0.0300
5pkgrel=1
6pkgdesc="Reduce file size of JPEG, PNG, WEBP and more"
7arch=('x86_64')
8url="https://www.4kdownload.com/products/imagecompressor"
9license=('LicenseRef-eula')
10depends=('openssl' 'glib2' 'expat')
11makedepends=('chrpath')
12source=("${pkgname}_${pkgver}_amd64.tar.bz2"::"https://dl.4kdownload.com/app/${pkgname}_${pkgver%.*}_amd64.tar.bz2"
13 "${pkgname}.desktop"
14 "${pkgname}.svg"
15 "fix_symlink_path.patch")
16sha256sums=('8e626f995811c63f3a955f37d793c746892f9f722550e415fa9b6def96b628c6'
17 '3a7c2c4285876122509f5ba844b457c1bb88173dfad18d9b91b17611bb24d649'
18 '83ca565a079e20f0fd80ed65b3a67e472424f2ce04f7524de119c56942c11748'
19 '73358b336cf67b4a4f073c8fdd9c183c7c06688a296ef7e84a7c9ad9ac1ed05d')
20
21prepare() {
22 cd "${pkgname}"
23 # Remove insecure RPATH
24 chrpath --delete "${pkgname}-bin"
25 # Fix symlink path
26 patch -p1 -i "${srcdir}/fix_symlink_path.patch"
27}
28
29package() {
30 # Install desktop file
31 install -m 755 -d "${pkgdir}/usr/share/applications"
32 install -m 755 -t "${pkgdir}/usr/share/applications" "${pkgname}.desktop"
33 # Install icon file
34 install -m 755 -d "${pkgdir}/usr/share/pixmaps"
35 install -m 644 -t "${pkgdir}/usr/share/pixmaps" "${pkgname}.svg"
36 # Install files
37 install -m 755 -d "${pkgdir}/usr/lib"
38 cp -r "${pkgname}" "${pkgdir}/usr/lib"
39 chown root:root "${pkgdir}/usr/lib/${pkgname}"
40 # Install launcher file
41 install -m 755 -d "${pkgdir}/usr/bin"
42 ln -s "/usr/lib/${pkgname}/${pkgname}.sh" "${pkgdir}/usr/bin/${pkgname}"
43 # Install license file
44 install -m 755 -d "${pkgdir}/usr/share/licenses/${pkgname}"
45 install -m 644 -t "${pkgdir}/usr/share/licenses/${pkgname}" "${pkgname}/doc/eula"
46}
47

Changes since previous scan

--- PKGBUILD @ 2026-06-20 00:50
+++ PKGBUILD @ 2026-10-05 23:40
@@ -1,7 +1,7 @@
# Maintainer: Muflone http://www.muflone.com/contacts/english/
pkgname=4kimagecompressor
-pkgver=1.5.0.0280
+pkgver=26.0.0.0300
pkgrel=1
pkgdesc="Reduce file size of JPEG, PNG, WEBP and more"
arch=('x86_64')
@@ -13,7 +13,7 @@
"${pkgname}.desktop"
"${pkgname}.svg"
"fix_symlink_path.patch")
-sha256sums=('0b7996791258c5ede7997b7a55fdd21aefdc5ce768ec695fb223cd04ddccf54d'
+sha256sums=('8e626f995811c63f3a955f37d793c746892f9f722550e415fa9b6def96b628c6'
'3a7c2c4285876122509f5ba844b457c1bb88173dfad18d9b91b17611bb24d649'
'83ca565a079e20f0fd80ed65b3a67e472424f2ce04f7524de119c56942c11748'
'73358b336cf67b4a4f073c8fdd9c183c7c06688a296ef7e84a7c9ad9ac1ed05d')

Scan history

Scanned at (UTC)SeverityRules
2026-10-05 23:40:58 Medium 1
2026-06-20 00:50:07 Clean 2
2026-06-20 00:18:46 Medium 1
2026-06-19 23:51:18 Medium 2
2026-06-19 19:07:35 Low 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion