bedrock-connect-git

maintainer Kaleidox · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package builds from the project's own GitHub source using Maven, which is normal for Java projects; the low severity is due to unverified sources (SKIP'd checksums) and few votes, but it does not execute untrusted prebuilt binaries or remote code.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own GitHub source using Maven, which is normal for Java projects; the low severity is due to unverified sources (SKIP'd checksums) and few votes, but it does not execute untrusted prebuilt binaries or remote code.

PKGBUILD

      1# Maintainer: Kaley Burdow <kaleidox@comroid.org>
    
      2
    
      3pkgname=bedrock-connect-git
    
      4pkgver=0.1
    
      5pkgrel=2
    
      6pkgdesc="BedrockConnect as an AUR package (Not affiliated with the Developer)"
    
      7arch=('any')
    
      8url="https://github.com/Pugmatt/BedrockConnect"
    
      9license=('GPL-3.0')
    
      10makedepends=('maven' 'xq' 'java-environment-common')
    
      11checkdepends=('java-environment-common')
    
      12depends=('java-runtime-common')
    
      13source=("git+https://github.com/Pugmatt/BedrockConnect.git" "bedrockconnect.service" "bedrockconnect.sysusers")
    
      14md5sums=('SKIP' 'SKIP' 'SKIP')
    
      15options+=("!strip")
    
      16
    
      17build() {
    
      18    cd BedrockConnect/serverlist-server
    
      19    mvn package
    
      20}
    
      21
    
      22check() {
    
      23    cd BedrockConnect/serverlist-server
    
      24    mvn test
    
      25}
    
      26
    
      27package() {
    
      28    cd BedrockConnect/serverlist-server
    
      29    version="$(cat pom.xml | xq -x '/project/version')"
    
      30    install -Dm644 "target/BedrockConnect-$version.jar" "$pkgdir/var/lib/bedrockconnect/BedrockConnect.jar"
    
      31    install -Dm644 "$srcdir/bedrockconnect.service" "$pkgdir/usr/lib/systemd/system/bedrockconnect.service"
    
      32    install -Dm644 "$srcdir/bedrockconnect.sysusers" "$pkgdir/usr/lib/sysusers.d/$pkgname.conf"
    
      33    chown -R bedrockconnect "$pkgdir/var/lib/bedrockconnect"
    
      34}
    
      35

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 00:03:41	LOW	2
2026-08-13 00:17:07	LOW	2
2026-08-12 19:24:47	LOW	2