bcpkix

MEDIUM

maintainer bbc 4 votes scanned 2026-10-27 21:48:49.990097

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 "https://www.bouncycastle.org/download/bcpkix-jdk18on-${pkgver/./}.jar"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Bertrand Bonnefoy-Claudet <bertrand@bertrandbc.com>
    
      2
    
      3pkgname=bcpkix
    
      4pkgver=1.77
    
      5pkgrel=1
    
      6pkgdesc='Java cryptography APIs (Bouncy Castle) package for PKIX/CMS/EAC/DVCS/PKCS/TSP/OPENSSL'
    
      7arch=('any')
    
      8url='https://www.bouncycastle.org/java.html'
    
      9license=('custom')
    
      10depends=('bcprov')
    
      11source=(
    
      12  "https://www.bouncycastle.org/download/bcpkix-jdk18on-${pkgver/./}.jar"
    
      13  LICENSE.html
    
      14)
    
      15sha256sums=(
    
      16  '1ac7fe8efd5b2f38cdc165be5a0675734fe44808dab92707201f03a535d6f1b8'
    
      17  'e9bb81d9c9486a5de0d1facd674e761b46cc421ddd31bbd2b100871a8bea2ed6'
    
      18)
    
      19noextract=(bcpkix-jdk18on-${pkgver/./}.jar)
    
      20
    
      21package() {
    
      22  cd "${srcdir}"
    
      23  install -m755 -d "${pkgdir}/usr/share/java"
    
      24  install -m755 -d "${pkgdir}/usr/share/licenses/${pkgname}"
    
      25  install -m644 bcpkix-jdk18on-${pkgver/./}.jar "${pkgdir}/usr/share/java/bcpkix.jar"
    
      26  install -m644 LICENSE.html "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      27}
    
      28

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-27 21:48:49	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1