brother-dcp7030

LOW
maintainer aaronfischer 17 votes scanned 2026-11-01 00:21:48.120785
View on AUR
Why flagged

The package downloads official Brother driver .deb files from brother.com, a legitimate vendor domain, to extract and install printer drivers; despite the non-whitelisted host, this is a standard and expected practice for proprietary hardware drivers on the AUR.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads official Brother driver .deb files from brother.com, a legitimate vendor domain, to extract and install printer drivers; despite the non-whitelisted host, this is a standard and expected practice for proprietary hardware drivers on the AUR.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:15 source=(http://www.brother.com/pub/bsc/linux/dlf/cupswrapperDCP7030-$pkgver-1.i386.deb

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Aaron Fischer <mail@aaron-fischer.net>
2# Contributor: Andrej Gelenberg <andrej.gelenberg@udo.edu>
3# Contributor: Alexander Konarev <AVKonarev@gmail.com>
4# Contributor: Germain Bossu <germainbossu@yahoo.fr>
5
6pkgname=brother-dcp7030
7pkgver=2.0.2
8pkgrel=4
9pkgdesc="Brother cupd and lpd driver for DCP-7030"
10arch=('x86_64')
11url="http://support.brother.com/g/b/downloadlist.aspx?c=de&lang=de&prod=dcp7030_all&os=128&flang=English"
12license=('custom')
13depends=('lib32-glibc' 'psutils' 'cups')
14optdepends=('system-config-printer')
15source=(http://www.brother.com/pub/bsc/linux/dlf/cupswrapperDCP7030-$pkgver-1.i386.deb
16 http://www.brother.com/pub/bsc/linux/dlf/brdcp7030lpr-$pkgver-1.i386.deb
17 brlpdwrapperDCP7030
18 DCP7030.ppd.gz
19 cupswrapper-systemd.patch)
20noextract=(DCP7030.ppd.gz)
21sha256sums=('a9a4e0ec5f941cf17fcc7156febf8aff21673bc78a6313176527a0423847627d'
22 'cd4e6c4b16c5e734721068134699c65b2eca0584bc86031ee7eef7af05b36d8c'
23 '0320e1f19c3be746442b7c6324f0732b17928d2bb611ef143007f6ca0882765b'
24 'ff55d56e1d4488768cbe3ca843a26a284bd2988bd9dddf4a0f1d39c637929997'
25 '11bfa0871ec5fda4e49e8d768840ca0de8a5aa6e8aec740b0a42ef8bc9e53c8a')
26
27build() {
28 for i in $startdir/*.deb; do
29 ar -x $i
30 bsdtar xf data.tar.gz
31 done
32
33 cat <<END >>$srcdir/usr/local/Brother/inf/brDCP7030func
34 [psconvert2]
35 pstops=/usr/bin/pstops
36END
37
38 patch $srcdir/usr/local/Brother/cupswrapper/cupswrapperDCP7030-2.0.2 < $startdir/cupswrapper-systemd.patch
39}
40
41package() {
42 cp -r "$srcdir/usr" "$pkgdir"
43 cp -r "$srcdir/var" "$pkgdir"
44
45 install -d -m755 "$pkgdir/usr/lib/cups/filter"
46 install -d -m755 "$pkgdir/usr/share/cups/model"
47 install -D -m755 "$startdir/brlpdwrapperDCP7030" "$pkgdir/usr/lib/cups/filter"
48 install -D -m644 "$startdir/DCP7030.ppd.gz" "$pkgdir/usr/share/cups/model"
49
50 # Clean up some stuff
51 rm "$pkgdir/usr/share/doc/cupswrapperdcp7030/changelog.Debian.gz"
52}
53
54

Scan history

Scanned at (UTC)SeverityRules
2026-11-01 00:21:48 Low 2
2026-10-31 00:07:41 Low 2
2026-10-30 00:29:30 Low 2
2026-10-29 00:13:55 Low 2
2026-10-28 00:06:54 Low 2
2026-10-27 00:23:28 Low 2
2026-10-26 00:12:40 Low 2
2026-10-25 00:20:48 Low 2
2026-10-24 00:14:55 Low 2
2026-10-23 00:02:19 Low 2
2026-10-22 00:13:10 Low 2
2026-10-21 00:12:50 Low 2
2026-10-20 00:10:31 Low 2
2026-10-19 00:03:55 Low 2
2026-10-18 00:06:55 Low 2
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 00:06:47 Low 2
2026-10-13 00:23:45 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion