ant-gtk-theme

maintainer benpiano800 · 14 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads theme files from a non-whitelisted host, but these are non-executable data assets; the worst case is cosmetic tampering, not code execution.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads theme files from a non-whitelisted host, but these are non-executable data assets; the worst case is cosmetic tampering, not code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:19 source=("Ant-${pkgver}.tar::https://aur-files.storage.googleapis.com/${pkgname}/${pkgver}/Ant.tar"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: benpiano800 <benpiano800@protonmail.com>
2# Contributor: Felix Golatofski <contact@xdfr.de>
3# Contributor: Kenneth Endfinger <kaendfinger@gmail.com>
4
5pkgname=ant-gtk-theme
6pkgver=1.3.0
7pkgrel=6
8pkgdesc="A flat and light theme with a modern look"
9arch=('any')
10license=('GPL')
11url=https://github.com/EliverLara/Ant
12conflicts=('ant-slim-gtk-theme' 'ant-gtk-theme-git')
13options=('!strip')
14depends=('gtk3')
15optdepends=('ttf-roboto: primary font face defined'
16 'ttf-ubuntu-font-family: secondary font face defined'
17 'cantarell-fonts: tertiary font face defined')
18
19source=("Ant-${pkgver}.tar::https://aur-files.storage.googleapis.com/${pkgname}/${pkgver}/Ant.tar"
20 "Ant-Bloody-${pkgver}.tar::https://aur-files.storage.googleapis.com/${pkgname}/${pkgver}/Ant-Bloody.tar"
21 "Ant-Nebula-${pkgver}.tar::https://aur-files.storage.googleapis.com/${pkgname}/${pkgver}/Ant-Nebula.tar"
22 "Ant-Dracula-${pkgver}.tar::https://aur-files.storage.googleapis.com/${pkgname}/${pkgver}/Ant-Dracula.tar"
23 "Ant-Dracula-slim-${pkgver}.tar::https://aur-files.storage.googleapis.com/${pkgname}/${pkgver}/Ant-Dracula-slim.tar"
24 "Ant-Nebula-slim-${pkgver}.tar::https://aur-files.storage.googleapis.com/${pkgname}/${pkgver}/Ant-Nebula-slim.tar"
25 "Ant-Bloody-slim-${pkgver}.tar::https://aur-files.storage.googleapis.com/${pkgname}/${pkgver}/Ant-Bloody-slim.tar"
26 "Ant-slim-${pkgver}.tar::https://aur-files.storage.googleapis.com/${pkgname}/${pkgver}/Ant-slim.tar")
27
28noextract=("Ant-${pkgver}.tar"
29 "Ant-Bloody-${pkgver}.tar"
30 "Ant-Nebula-${pkgver}.tar"
31 "Ant-Dracula-${pkgver}.tar"
32 "Ant-Dracula-slim-${pkgver}.tar"
33 "Ant-Nebula-slim-${pkgver}.tar"
34 "Ant-Bloody-slim-${pkgver}.tar"
35 "Ant-slim-${pkgver}.tar"
36)
37
38sha512sums=('eff8f9d6db62c28cca4f82b46a477b0e980193ade010f541bf3007513cc35041d812326ac4272a06157d6208af4fc8adc73897622d66469eb1839e80977e7d70'
39 '6847179d7983984af40b27ecb9c4ecd80adf47cad701add25ea9ffe8fe8944650dcf190685d857df282d620a7dcf19a90a900aeeebba5ddad04cd20cdba10e6d'
40 '7a0336ae7e1c2ea35507644b1e63d4bcb1b9a445a6261b6957eb4dda1ee38aa2b21bc6697694bab4a705235735a06e7340974f2177bfcc84b312990538cf8f5a'
41 'd55f12f3b1b852e2fe796498f170609bcc675e764ec54d62ad0a39f274ca3f747375f3a9d03e56199e6fdd503b54594cc8276958551df02d5f18d03846a62371'
42 'b6a9d867f9326d10b92f2abcca119190db5444a0beed27447ddd133ae6aff226738302eed253de1a278d853ccdbd59fa34a8cf99b1f1a3bdee91d3edf935d619'
43 '1e67cefb178accb3efa4b4b967cd04966a1645e50d434016eb9db1db499147351812496998a695bbe61242c31534ea6a279507b5c94f68797a67738f6fcbb45e'
44 'f17b1d3be2cb0314d8c25269d156b6ad358bd718fd820a12c3ba3665afcfa127c928b3890f1432964cc7c081fc398f739abb345e3db7b927ab45c65446f5d0de'
45 '668d80be55381fb1dbbd5a06d6e45f1a8858772d3207a762bb62dc53a2663271f29693445d5e8ff01495a13195e1eb4c513ec7633712eee21487b116ad1c3012')
46
47prepare() {
48 cd "${srcdir}"
49 for THEME_FILE in "${noextract[@]}"
50 do
51 THEME_NAME="${THEME_FILE%.*}"
52 THEME_NAME="${THEME_NAME%-*}"
53 mkdir -p "${THEME_NAME}"
54 if echo "${THEME_FILE}" | grep "slim" > /dev/null
55 then
56 bsdtar xf "${THEME_FILE}" -C "${THEME_NAME}"
57 cd "${THEME_NAME}"
58 find . -type f -name '*.tar' | while read -r SUB_THEME_FILE
59 do
60 SUB_THEME_NAME=$(basename "${SUB_THEME_FILE}")
61 SUB_THEME_NAME="${SUB_THEME_NAME%.*}"
62 mkdir -p "${SUB_THEME_NAME}"
63 bsdtar xf "${SUB_THEME_FILE}" --strip-components=1 -C "${SUB_THEME_NAME}"
64 done
65 cd ..
66 else
67 bsdtar xf "${THEME_FILE}" --strip-components=1 -C "${THEME_NAME}"
68 fi
69 done
70}
71
72package() {
73 mkdir -p "${pkgdir}/usr/share/themes"
74 find "${srcdir}" -type f -name 'index.theme' | while read -r THEME_INDEX_FILE
75 do
76 THEME_SRC_DIR=$(dirname "${THEME_INDEX_FILE}")
77 THEME_NAME=$(basename "${THEME_SRC_DIR}")
78 cp -r "${THEME_SRC_DIR}" "${pkgdir}/usr/share/themes"
79 done
80}
81

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion