brother-mfc-j805dw
The package downloads a Brother printer driver .deb from an official brother.com subdomain, which is a legitimate source for the software; unpacks and modifies the installation script to fit Arch, then installs it locally—this is standard practice for AUR printer drivers and poses no inherent security risk beyond the trustworthiness of the vendor's provided binary.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a Brother printer driver .deb from an official brother.com subdomain, which is a legitimate source for the software; unpacks and modifies the installation script to fit Arch, then installs it locally—this is standard practice for AUR printer drivers and poses no inherent security risk beyond the trustworthiness of the vendor's provided binary.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:13
source=("https://download.brother.com/welcome/dlf104569/mfcj805dwpdrv-1.0.5-0.i386.deb")
PKGBUILD
1 offending line(s) highlighted#!/usr/bin/bash
# Maintainer: Solomon Choina <shlomochoina@gmail.com>
pkgname=brother-mfc-j805dw
pkgver=1.0.5
pkgrel=3
pkgdesc="CUPS and LPR driver for Brother mfc-JX05DW(XL) printer"
arch=("i686" "x86_64")
depends_x86_64=('lib32-gcc-libs')
depends=('perl' 'bash')
optdepends=('brscan4')
url="https://support.brother.com/g/b/faqtop.aspx?c=us&lang=en&prod=mfcj805dw_us"
license=("EULA")
source=("https://download.brother.com/welcome/dlf104569/mfcj805dwpdrv-1.0.5-0.i386.deb")
sha256sums=('f299b9674d5edb9c16b5fdbfd39d9ed6b6618f2a30ad942181180e59d3e7a68d')
prepare() {
tar -xf data.tar.gz -C "$srcdir"
install -d $srcdir/usr/share/cups/model
install -d $srcdir/usr/lib/cups/filter
cd `find . -type d -name 'cupswrapper'`
if [ -f cupswrapper* ]; then
_wrapper_source=`ls cupswrapper*`
fi
if [ ! -z $_wrapper_source ];then
sed -i '/^\/etc\/init.d\/cups/d' $_wrapper_source
sed -i '/^sleep/d' $_wrapper_source
sed -i '/^lpadmin/d' $_wrapper_source
sed -i 's|/usr|$srcdir/usr|g' $_wrapper_source
sed -i 's|/opt|$srcdir/opt|g' $_wrapper_source
sed -i 's|lpinfo|echo|g' $_wrapper_source
export srcdir=$srcdir
./$_wrapper_source
sed -i 's|$srcdir||' $srcdir/usr/lib/cups/filter/*lpdwrapper*
sed -i "s|$srcdir||" $srcdir/usr/lib/cups/filter/*lpdwrapper*
rm $_wrapper_source
fi
}
package() {
cp -R $srcdir/usr "$pkgdir"
if [ -d $srcdir/opt ]; then cp -R $srcdir/opt $pkgdir; fi
install -D "$pkgdir"/opt/brother/Printers/mfcj805dw/LICENSE_ENG.txt "$pkgdir/usr/share/licenses/$pkgname"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |