brother-dcp7030
The package downloads official Brother driver .deb files from brother.com, a legitimate vendor domain, to extract and install printer drivers; despite the non-whitelisted host, this is a standard and expected practice for proprietary hardware drivers on the AUR.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads official Brother driver .deb files from brother.com, a legitimate vendor domain, to extract and install printer drivers; despite the non-whitelisted host, this is a standard and expected practice for proprietary hardware drivers on the AUR.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:15
source=(http://www.brother.com/pub/bsc/linux/dlf/cupswrapperDCP7030-$pkgver-1.i386.deb
PKGBUILD
1 offending line(s) highlighted# Maintainer: Aaron Fischer <mail@aaron-fischer.net>
# Contributor: Andrej Gelenberg <andrej.gelenberg@udo.edu>
# Contributor: Alexander Konarev <AVKonarev@gmail.com>
# Contributor: Germain Bossu <germainbossu@yahoo.fr>
pkgname=brother-dcp7030
pkgver=2.0.2
pkgrel=4
pkgdesc="Brother cupd and lpd driver for DCP-7030"
arch=('x86_64')
url="http://support.brother.com/g/b/downloadlist.aspx?c=de&lang=de&prod=dcp7030_all&os=128&flang=English"
license=('custom')
depends=('lib32-glibc' 'psutils' 'cups')
optdepends=('system-config-printer')
source=(http://www.brother.com/pub/bsc/linux/dlf/cupswrapperDCP7030-$pkgver-1.i386.deb
http://www.brother.com/pub/bsc/linux/dlf/brdcp7030lpr-$pkgver-1.i386.deb
brlpdwrapperDCP7030
DCP7030.ppd.gz
cupswrapper-systemd.patch)
noextract=(DCP7030.ppd.gz)
sha256sums=('a9a4e0ec5f941cf17fcc7156febf8aff21673bc78a6313176527a0423847627d'
'cd4e6c4b16c5e734721068134699c65b2eca0584bc86031ee7eef7af05b36d8c'
'0320e1f19c3be746442b7c6324f0732b17928d2bb611ef143007f6ca0882765b'
'ff55d56e1d4488768cbe3ca843a26a284bd2988bd9dddf4a0f1d39c637929997'
'11bfa0871ec5fda4e49e8d768840ca0de8a5aa6e8aec740b0a42ef8bc9e53c8a')
build() {
for i in $startdir/*.deb; do
ar -x $i
bsdtar xf data.tar.gz
done
cat <<END >>$srcdir/usr/local/Brother/inf/brDCP7030func
[psconvert2]
pstops=/usr/bin/pstops
END
patch $srcdir/usr/local/Brother/cupswrapper/cupswrapperDCP7030-2.0.2 < $startdir/cupswrapper-systemd.patch
}
package() {
cp -r "$srcdir/usr" "$pkgdir"
cp -r "$srcdir/var" "$pkgdir"
install -d -m755 "$pkgdir/usr/lib/cups/filter"
install -d -m755 "$pkgdir/usr/share/cups/model"
install -D -m755 "$startdir/brlpdwrapperDCP7030" "$pkgdir/usr/lib/cups/filter"
install -D -m644 "$startdir/DCP7030.ppd.gz" "$pkgdir/usr/share/cups/model"
# Clean up some stuff
rm "$pkgdir/usr/share/doc/cupswrapperdcp7030/changelog.Debian.gz"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |