brother-hll1222

LOW
maintainer lmarcondes95 0 votes scanned 2026-10-03 00:23:04.761738
View on AUR
Why flagged

Downloads a prebuilt RPM from download.brother.com, which is Brother's official support/download infrastructure, so the source is vendor-official; the checksum is provided; the package installs a proprietary printer driver which is normal for Brother AUR packages.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 80%): Downloads a prebuilt RPM from download.brother.com, which is Brother's official support/download infrastructure, so the source is vendor-official; the checksum is provided; the package installs a proprietary printer driver which is normal for Brother AUR packages.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:13 source=("https://download.brother.com/welcome/dlf106419/hll1222pdrv-${pkgver}-${_pkgrel_brother}.x86_64.rpm")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Lucas Marcondes <lucasnascimento95@gmail.com>
2
3pkgname=brother-hll1222
4pkgver=4.4.0
5_pkgrel_brother=2
6pkgrel=1
7pkgdesc='Brother HL-L1222 CUPS driver'
8arch=('x86_64')
9url='https://support.brother.com/'
10license=('LicenseRef-Brother' 'GPL-2.0-or-later')
11depends=('cups' 'ghostscript' 'perl')
12options=('!strip' '!debug')
13source=("https://download.brother.com/welcome/dlf106419/hll1222pdrv-${pkgver}-${_pkgrel_brother}.x86_64.rpm")
14sha256sums=('beed9c0d31eaf09297d6bfe5fa2eaaf291ca3deae5cf39883d7d4f7f03764ee8')
15install="${pkgname}.install"
16
17package() {
18 local _model=HLL1222
19 local _basedir="opt/brother/Printers/${_model}"
20
21 # Brother layout (filter resolves paths via realpath of itself under /opt)
22 cp -a "${srcdir}/opt" "${pkgdir}/"
23
24 # Vendor postinst would link arch binaries into lpd/
25 ln -s "x86_64/rawtobr3" "${pkgdir}/${_basedir}/lpd/rawtobr3"
26 ln -s "x86_64/brprintconflsr3" "${pkgdir}/${_basedir}/lpd/brprintconflsr3"
27
28 # CUPS expects filter name from the PPD
29 install -dm755 "${pkgdir}/usr/lib/cups/filter"
30 ln -s "/${_basedir}/cupswrapper/lpdwrapper" \
31 "${pkgdir}/usr/lib/cups/filter/brother_lpdwrapper_${_model}"
32
33 install -dm755 "${pkgdir}/usr/share/cups/model/Brother"
34 ln -s "/${_basedir}/cupswrapper/brother-${_model}-cups-en.ppd" \
35 "${pkgdir}/usr/share/cups/model/Brother/"
36
37 install -Dm644 "${_basedir}/LICENSE_ENG.txt" \
38 "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE_ENG.txt"
39 install -Dm644 "${_basedir}/cupswrapper/Copying" \
40 "${pkgdir}/usr/share/licenses/${pkgname}/Copying"
41}
42

Scan history

Scanned at (UTC)SeverityRules
2026-10-03 00:23:04 Low 2
2026-10-02 00:00:32 Low 2
2026-10-01 00:02:06 Low 2
2026-09-30 00:20:07 Low 2
2026-09-29 00:07:46 Low 2
2026-09-28 00:28:32 Low 2
2026-09-27 00:07:07 Low 2
2026-09-26 00:12:15 Low 2
2026-09-25 00:03:36 Low 2
2026-09-24 00:24:14 Low 2
2026-09-23 00:28:13 Low 2
2026-09-22 00:15:14 Low 2
2026-09-21 00:26:32 Low 2
2026-09-20 00:25:31 Low 2
2026-09-19 00:25:36 Low 2
2026-09-18 00:17:11 Low 2
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion