brother-hl6180dw-lpr-bin
The package downloads a prebuilt Brother LPR driver .deb from Brother's official download domain; while the host is not universally whitelisted, it is a legitimate vendor domain, and the binary is part of standard printer driver distribution, not an arbitrary remote executable.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt Brother LPR driver .deb from Brother's official download domain; while the host is not universally whitelisted, it is a legitimate vendor domain, and the binary is part of standard printer driver distribution, not an arbitrary remote executable.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:26
"${_deb}::https://download.brother.com/welcome/dlf006041/${_deb}" -
PKGBUILD:27
'LICENSE.html::https://support.brother.com/g/s/agreement/English_lpr/agree.html'
PKGBUILD
2 offending line(s) highlighted# Maintainer: Vincent Schult <viboschu@gmail.com>
pkgname=brother-hl6180dw-lpr-bin
pkgver=3.0.0_1
pkgrel=2
pkgdesc='LPR driver for Brother HL-6180DW printer'
arch=('i686' 'x86_64')
url='https://support.brother.com/g/b/producttop.aspx?c=us&lang=en&prod=hl6180dw_all'
license=('LicenseRef-Brother-EULA' 'GPL-2.0-or-later')
depends=(
ghostscript
sh
)
depends_i686=(
glibc
)
depends_x86_64=(
lib32-glibc
)
options=('!strip' '!debug' '!emptydirs')
_deb="hl6180dwlpr-${pkgver/_/-}.i386.deb"
source=(
"${_deb}::https://download.brother.com/welcome/dlf006041/${_deb}"
'LICENSE.html::https://support.brother.com/g/s/agreement/English_lpr/agree.html'
)
noextract=(
"${_deb}"
)
sha256sums=('3b9db34d70b8199c17a56df746da1431ee7bbac9df299cfd6ed28b78350c6769'
'194f2a3b820f6533e7abbce7fdb727a1434a6e07f1851be696e40771e7a884ea')
prepare(){
cd "${srcdir}"
rm -rf deb-root
mkdir -p deb-root
bsdtar -xf "${_deb}" -C deb-root
}
package(){
local data_tar=("${srcdir}/deb-root"/data.tar.*)
bsdtar -xf "${data_tar[0]}" -C "${pkgdir}"
local vendor="${pkgdir}/opt/brother/Printers/HL6180DW"
sed -i 's|GHOST_SCRIPT=`which gs`|GHOST_SCRIPT=/usr/bin/gs|' "${vendor}/lpd/psconvert2"
rm -f "${vendor}/inf/braddprinter" "${vendor}/inf/setupPrintcap" "${vendor}/lpd/brprintconflsr3"
rm -rf "${pkgdir}/var/spool/lpd" "${pkgdir}/etc/opt" "${pkgdir}/usr/share/doc"
install -Dm644 "${srcdir}/LICENSE.html" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.html"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |