brother-hll2320d

maintainer xanx · 8 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads official Brother printer driver RPMs from brother.com's download subdomain, which is the vendor's legitimate distribution channel; the source is unverifiable due to lack of upstream signature checks but not malicious, and the installed files are configuration and wrapper scripts, not executable code.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads official Brother printer driver RPMs from brother.com's download subdomain, which is the vendor's legitimate distribution channel; the source is unverifiable due to lack of upstream signature checks but not malicious, and the installed files are configuration and wrapper scripts, not executable code.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:11 "http://download.brother.com/welcome/dlf101906/hll2320dlpr-${pkgver//_/-}.i386.rpm"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Brian Durksen <brian at durksen dot pw>
    
      2pkgname=brother-hll2320d
    
      3pkgver=3.2.0_1
    
      4pkgrel=1
    
      5pkgdesc="Brother HL-L2320D CUPS driver"
    
      6url="http://www.brother.com"
    
      7arch=('x86_64' 'i686')
    
      8depends=('perl' 'bash')
    
      9license=('custom:Brother')
    
      10source=(
    
      11  "http://download.brother.com/welcome/dlf101906/hll2320dlpr-${pkgver//_/-}.i386.rpm"
    
      12  "http://download.brother.com/welcome/dlf101907/hll2320dcupswrapper-${pkgver//_/-}.i386.rpm"
    
      13)
    
      14md5sums=(
    
      15  'ca753f68807bd1002c2000225512a75b'
    
      16  '98d6f5fdbb50d6a3a2557a2630c7bc0e'
    
      17)
    
      18
    
      19if [[ "$CARCH" == "x86_64" ]]; then
    
      20  depends+=('lib32-glibc')
    
      21fi
    
      22
    
      23package() {
    
      24  mkdir -p "${pkgdir}/opt"
    
      25  cp -R "${srcdir}/opt/brother" "${pkgdir}/opt/brother"
    
      26
    
      27  mkdir -p "${pkgdir}/usr/lib/cups/filter"
    
      28  echo "#! /opt/brother/Printers/HLL2320D/cupswrapper/brother_lpdwrapper_HLL2320D" > "${srcdir}/filter-shim"
    
      29  install -m 0755 -o root -g root "${srcdir}/filter-shim" "${pkgdir}/usr/lib/cups/filter/brother_lpdwrapper_HLL2320D"
    
      30
    
      31  mkdir -p "${pkgdir}/usr/share/ppd/cupsfilters"
    
      32  install -m 0644 -o root -g root "${srcdir}/opt/brother/Printers/HLL2320D/cupswrapper/brother-HLL2320D-cups-en.ppd" "${pkgdir}/usr/share/ppd/cupsfilters"
    
      33}

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2