awoken-icons

maintainer williberthenck · 8 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a source archive from a non-whitelisted host (Dropbox), but it is a standard practice for AUR icon themes; the archive contains only data files (icons) and build scripts, with no evidence of remote code execution or malicious payloads, and the checksums are provided and verifiable.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The package downloads a source archive from a non-whitelisted host (Dropbox), but it is a standard practice for AUR icon themes; the archive contains only data files (icons) and build scripts, with no evidence of remote code execution or malicious payloads, and the checksums are provided and verifiable.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 "https://www.dropbox.com/s/p3hfu7jw3vv7os9/AwOken-2.5.zip?dl=0")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Frederic Bezies <fredbezies at gmail dot com>
    
      2# Contributor: Mario Finelli <mario dot finelli at yahoo dot com>
    
      3# Contributor: Alexander De Sousa <archaur.xandy21 at spamgourmet dot com>
    
      4
    
      5pkgname=awoken-icons
    
      6pkgver=2.5.2
    
      7pkgrel=4
    
      8pkgdesc="Simple and quite complete icon set, Token-style."
    
      9url="http://deviantart.com/view/163570862"
    
      10arch=('any')
    
      11license=('CCPL:by-sa')
    
      12depends=('librsvg')
    
      13optdepends=("imagemagick: To color the iconset."
    
      14            "zenity: To have a GUI for the configuration script."
    
      15            "xdg-utils: To be able to launch programs from the configuration script.")
    
      16source=(awoken-icons.install
    
      17        "https://www.dropbox.com/s/p3hfu7jw3vv7os9/AwOken-2.5.zip?dl=0")
    
      18options=('!strip')
    
      19sha256sums=('846c254776cb4763afc9db13387ff306f77be3537730d76a26f005ab3f77b611'
    
      20            'd122ee0457079aaa30a664ae582fbc6208414e8728f497dce399ed9f33f9b36e')
    
      21install=awoken-icons.install
    
      22
    
      23package() {
    
      24  install -dm755 "$pkgdir"/usr/{bin,share/icons}
    
      25
    
      26  msg2 "Copying files..."
    
      27  for _theme in AwOken-2.5/AwOken{,Dark,White}.tar.gz; do
    
      28    tar --no-same-owner -xzf $_theme -C "$pkgdir/usr/share/icons/"
    
      29  done
    
      30
    
      31  msg2 "Adjusting permissions..."
    
      32  find "$pkgdir/" -type d -exec chmod 755 '{}' \;
    
      33  find "$pkgdir/" -type f -exec chmod 644 '{}' \;
    
      34  find "$pkgdir/" -name awoken-icon-theme-customization\* -exec chmod 755 '{}' \;
    
      35
    
      36  # Symlink customization scripts in the user binaries directory:
    
      37  ln -sf /usr/share/icons/AwOken/awoken-icon-theme-customization* "$pkgdir/usr/bin/"
    
      38  ln -sf /usr/share/icons/AwOkenDark/awoken-icon-theme-customization-dark "$pkgdir/usr/bin/"
    
      39  ln -sf /usr/share/icons/AwOkenWhite/awoken-icon-theme-customization-white "$pkgdir/usr/bin/"
    
      40}
    
      41

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2