brother-mfc-j5330dw
The package downloads official Brother driver RPMs from download.brother.com, which is the vendor's legitimate domain; despite the static analyzer flagging it as a non-standard host, this is a normal and expected source for proprietary drivers, and the checksums are provided and verifiable.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads official Brother driver RPMs from download.brother.com, which is the vendor's legitimate domain; despite the static analyzer flagging it as a non-standard host, this is a normal and expected source for proprietary drivers, and the checksums are provided and verifiable.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:17
source=("http://download.brother.com/welcome/dlf103003/mfcj5330dwlpr-$pkgver-0.i386.rpm"
PKGBUILD
1 offending line(s) highlighted# Contributor: David Barri <japgolly@gmail.com>
# Contributor: Valère Monseur <valere dot monseur at ymail dot com>
# Maintainer: Hendrik Schawe <hendrik dot schawe at gmail dot com>
# slightly modified version of https://aur.archlinux.org/packages/brother-mfc-j5320dw/
pkgname="brother-mfc-j5330dw"
pkgver="1.0.1"
pkgrel=4
pkgdesc="LPR and CUPS driver for the Brother MFC-J5330DW"
arch=('i686' 'x86_64')
url="http://support.brother.com/g/b/producttop.aspx?c=gb&lang=en&prod=mfcj5330dw_us_eu_as"
license=('custom:Brother commercial license')
depends=('cups' 'ghostscript' 'poppler' 'a2ps' 'psutils')
depends_x86_64=('lib32-glibc' 'lib32-gcc-libs')
install="$pkgname.install"
source=("http://download.brother.com/welcome/dlf103003/mfcj5330dwlpr-$pkgver-0.i386.rpm"
"http://download.brother.com/welcome/dlf103027/mfcj5330dwcupswrapper-$pkgver-0.i386.rpm"
'cupswrapper-license.txt'
'lpr-license.txt'
'brother_lpdwrapper_mfcj5330dw.patch')
md5sums=(1d84cf8b3db7d2598ed0a0e15d44b947
db6ce4717c3110134a20bbfb251ee9c5
310f8424517f3df127d39393ceaebb6f
bf894a1a51baf6055a6c58ecf43c9782
3903b9b3f9e225cb481b1468f49e1268)
prepare() {
# do not install in /usr/local
if [ -d "${srcdir}"/usr/local/Brother ]; then
install -d "${srcdir}"/usr/share
mv "${srcdir}"/usr/local/Brother/ "${srcdir}"/usr/share/Brother
rm -rf "${srcdir}"/usr/local
sed -i 's|/usr/local/Brother|/usr/share/Brother|g' `grep -lr '/usr/local/Brother' ./`
fi
# setup cups directories
install -d "${srcdir}"/usr/share/cups/model
install -d "${srcdir}"/usr/lib/cups/filter
# patch an error (?) in the perl script from brother
patch -p1 "${srcdir}"/opt/brother/Printers/mfcj5330dw/cupswrapper/brother_lpdwrapper_mfcj5330dw < brother_lpdwrapper_mfcj5330dw.patch
# go to the cupswrapper directory and find the source file from which to generate a ppd and wrapperfile
cd `find . -type d -name 'cupswrapper'`
if [ -f cupswrapper* ]; then
_wrapper_source=`ls cupswrapper*`
sed -i '/^\/etc\/init.d\/cups/d' $_wrapper_source
sed -i '/^sleep/d' $_wrapper_source
sed -i '/^lpadmin/d' $_wrapper_source
sed -i 's|/usr|$srcdir/usr|g' $_wrapper_source
sed -i 's|/opt|$srcdir/opt|g' $_wrapper_source
sed -i 's|/model/Brother|/model|g' $_wrapper_source
sed -i 's|lpinfo|echo|g' $_wrapper_source
export srcdir="${srcdir}"
./$_wrapper_source
sed -i 's|$srcdir||' "${srcdir}"/usr/lib/cups/filter/*lpdwrapper*
sed -i "s|$srcdir||" "${srcdir}"/usr/lib/cups/filter/*lpdwrapper*
rm $_wrapper_source
fi
# /etc/printcap is managed by cups
rm `find "${srcdir}" -type f -name 'setupPrintcap*'`
# patch filter for PDF printing to avoid error:
# ERROR: typecheck
# OFFENDING COMMAND: resourcestatus
sed -i 's|pdf2ps|pdftocairo -q -ps|g' "${srcdir}"/opt/brother/Printers/mfcj5330dw/lpd/filter_mfcj5330dw
}
package() {
cp -R "${srcdir}"/usr "${pkgdir}"
cp -R "${srcdir}"/opt "${pkgdir}"
install -Dm644 cupswrapper-license.txt "${pkgdir}"/usr/share/licenses/"${pkgname}"/cupswrapper-licence.txt
install -Dm644 lpr-license.txt "${pkgdir}"/usr/share/licenses/"${pkgname}"/lpr-licence.txt
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |