anyk

LOW

maintainer mark.sagikazar 7 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package downloads a JAR file from the official Hungarian tax office domain (nav.gov.hu), which is the legitimate source for this software; the non-whitelisted host is a government domain plausibly owned by the project, and the checksum is verified, making this a standard AUR package build with low risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a JAR file from the official Hungarian tax office domain (nav.gov.hu), which is the legitimate source for this software; the non-whitelisted host is a government domain plausibly owned by the project, and the checksum is verified, making this a standard AUR package build with low risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 source=("AbevJava-${pkgver}.${subver}-${pkgrel}::https://nav.gov.hu/pfile/rpmFile?path=/nyomtatvanyok/letoltesek/nyomtatvanykitolto_programok/nyomtatvany_apeh/keretprogramok/AbevJava"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Norbert Balázs <bnorb93@gmail.com>
    
      2# Maintainer: Márk Sági-Kazár <mark.sagikazar@gmail.com>
    
      3# Maintainer: Bence Hornák <hornak.bence@gmail.com>
    
      4
    
      5pkgname=anyk
    
      6pkgver=3.50.0
    
      7subver=0.1
    
      8pkgrel=1
    
      9pkgdesc='Form fill program of the Hungarian tax office (Általános Nyomtatványkitöltő (ÁNYK))'
    
      10arch=('any')
    
      11url='https://www.nav.gov.hu/nav/letoltesek/nyomtatvanykitolto_programok/nyomtatvany_apeh/keretprogramok/abevjava_install.html'
    
      12license=('Apache')
    
      13depends=('jre8-openjdk')
    
      14optdepends=('ttf-ms-fonts: for better font rendering')
    
      15makedepends=('unzip')
    
      16provides=('abevjava')
    
      17source=("AbevJava-${pkgver}.${subver}-${pkgrel}::https://nav.gov.hu/pfile/rpmFile?path=/nyomtatvanyok/letoltesek/nyomtatvanykitolto_programok/nyomtatvany_apeh/keretprogramok/AbevJava"
    
      18        'abevjava'
    
      19        'abevjavapath.cfg'
    
      20        'anyk.desktop'
    
      21        'setenv'
    
      22        'anyk.sysusers')
    
      23md5sums=('4a094ff0c61542d1477d980df5ead012'
    
      24         '14e676f715c1008dda83ffd7c3a127ec'
    
      25         '5dae655a84d5dd76401011f5629d8f0f'
    
      26         '86e4d78220da7d2d7a9015067d48ab9f'
    
      27         '2e0fae11fbaa20d376a1228ac0262209'
    
      28         'b6a3cc94de751f437d9f4a0e67afe85a')
    
      29
    
      30package() {
    
      31    install -d -m 755 "${pkgdir}/usr/bin"
    
      32    install -d -m 755 "${pkgdir}/usr/share/abevjava"
    
      33    install -d -m 755 "${pkgdir}/etc"
    
      34
    
      35    unzip -oq "$srcdir/usr/share/abevjava/abevjava_install-$pkgver-${subver}.jar" -d "$srcdir"
    
      36    install -m 655 "${srcdir}"/setenv "${pkgdir}"/usr/share/abevjava
    
      37    install -m 655 "${srcdir}"/abevjava "${pkgdir}"/usr/bin
    
      38    install -m 644 "${srcdir}"/abevjavapath.cfg "${pkgdir}"/etc
    
      39
    
      40    install -D "${srcdir}/${pkgname}".desktop "${pkgdir}"/usr/share/applications/"${pkgname}".desktop
    
      41    install -Dm 644 "${srcdir}"/application/abevjava.png "${pkgdir}"/usr/share/pixmaps/abevjava.png
    
      42
    
      43    cp -r "${srcdir}"/application/* "${pkgdir}"/usr/share/abevjava
    
      44
    
      45    # Create anyk group and set download folder writable for group members
    
      46    install -Dm 644 "${srcdir}/anyk.sysusers" "${pkgdir}/usr/lib/sysusers.d/anyk.conf"
    
      47    
    
      48    chgrp -R 569 "${pkgdir}/usr/share/abevjava/abev"
    
      49    chgrp -R 569 "${pkgdir}/usr/share/abevjava/eroforrasok"
    
      50    chgrp -R 569 "${pkgdir}/usr/share/abevjava/nyomtatvanyok"
    
      51    chgrp -R 569 "${pkgdir}/usr/share/abevjava/upgrade"
    
      52    chgrp -R 569 "${pkgdir}/usr/share/abevjava/segitseg"
    
      53
    
      54    chmod -R g=u "${pkgdir}/usr/share/abevjava/abev"
    
      55    chmod -R g=u "${pkgdir}/usr/share/abevjava/eroforrasok"
    
      56    chmod -R g=u "${pkgdir}/usr/share/abevjava/nyomtatvanyok"
    
      57    chmod -R g=u "${pkgdir}/usr/share/abevjava/upgrade"
    
      58    chmod -R g=u "${pkgdir}/usr/share/abevjava/segitseg"
    
      59    
    
      60    install=anyk.install
    
      61}
    
      62

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 00:11:52	Low	2
2026-10-09 00:05:33	Low	2
2026-10-08 00:28:03	Low	2
2026-10-07 00:21:34	Low	2
2026-10-06 00:13:36	Low	2
2026-10-05 00:08:03	Low	2
2026-10-04 00:18:08	Low	2
2026-10-03 00:23:04	Low	2
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2