brother-mfct920dw
The package downloads a driver from an official Brother host, which is plausibly legitimate; the RPM is from the vendor's own infrastructure, reducing supply-chain risk despite the non-whitelisted domain.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a driver from an official Brother host, which is plausibly legitimate; the RPM is from the vendor's own infrastructure, reducing supply-chain risk despite the non-whitelisted domain.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:15
source=("https://download.brother.com/welcome/dlf105186/mfct920dwpdrv-${pkgver}-3.i386.rpm")
PKGBUILD
1 offending line(s) highlighted# Maintainer: Felipe BF <fprgw32 at gmail dot com>
# Contributor: Nissar Chababy <funilrys at outlook dot com>
pkgname=brother-mfct920dw
pkgver=3.5.0
pkgrel=3
pkgdesc="LPR and CUPS driver for Brother MFC-T920DW"
arch=('i686' 'x86_64' 'aarch64' 'armv7h')
url="http://www.brother.com"
license=('custom:Brother')
depends=('cups' 'ghostscript' 'perl')
depends_x86_64=('lib32-glibc')
optdepends=('brscan5: scanning support')
source=("https://download.brother.com/welcome/dlf105186/mfct920dwpdrv-${pkgver}-3.i386.rpm")
sha512sums=('8df722d021223bfb295e2ca63dae51daf73b8746f6ba799a71a1463e364c4855da4fa8832e029e5635b93ce6d0e02991620670464e7ea424b1455d11345c9346')
package() {
_basedir="/opt/brother/Printers/mfct920dw"
# install to expected /opt path
install -d "${pkgdir}${_basedir}"
cp -R "${srcdir}${_basedir}/." "${pkgdir}${_basedir}/"
# symlink cups filters
install -d "${pkgdir}/usr/lib/cups/filter/"
ln -sf "${_basedir}/cupswrapper/brother_lpdwrapper_mfct920dw" \
"${pkgdir}/usr/lib/cups/filter/brother_lpdwrapper_mfct920dw"
# symlink cups ppd files
install -d "${pkgdir}/usr/share/cups/model/"
ln -sf "${_basedir}/cupswrapper/brother_mfct920dw_printer_en.ppd" \
"${pkgdir}/usr/share/cups/model/brother_mfct920dw_printer_en.ppd"
# symlink filters according to architecture
ln -sf "${_basedir}/lpd/${CARCH}/brmfct920dwfilter" \
"${pkgdir}${_basedir}/lpd/brmfct920dwfilter"
ln -sf "${_basedir}/lpd/${CARCH}/brprintconf_mfct920dw" \
"${pkgdir}${_basedir}/lpd/brprintconf_mfct920dw"
# Install license files
install -Dm644 "${pkgdir}${_basedir}/LICENSE_ENG.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE_ENG.txt"
install -Dm644 "${pkgdir}${_basedir}/LICENSE_JPN.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE_JPN.txt"
}
Changes since previous scan
--- PKGBUILD @ 2026-06-19 19:07+++ PKGBUILD @ 2026-10-17 00:21@@ -1,28 +1,45 @@-# Maintainer: Nissar Chababy <funilrys at outlook dot com>+# Maintainer: Felipe BF <fprgw32 at gmail dot com>+# Contributor: Nissar Chababy <funilrys at outlook dot com> pkgname=brother-mfct920dw pkgver=3.5.0-pkgrel=2-pkgdesc="Brother MFC-T920DW CUPS driver"+pkgrel=3+pkgdesc="LPR and CUPS driver for Brother MFC-T920DW" arch=('i686' 'x86_64' 'aarch64' 'armv7h') url="http://www.brother.com"-license=('custom')-depends=('cups' 'ghostscript')+license=('custom:Brother')+depends=('cups' 'ghostscript' 'perl') depends_x86_64=('lib32-glibc')+optdepends=('brscan5: scanning support') -source=("https://download.brother.com/welcome/dlf105186/mfct920dwpdrv-${pkgver}-1.i386.rpm")-sha512sums=('762042c93536606e2fe620b7a0e0eeb54215d962915c10f5a249a55f27681db6fbdba47b0031762947172a3368482da006d5af68ee426ff0188d3930aecefe76')-package(){- install -d "${pkgdir}/usr/share/${pkgname}"- cp -R "$srcdir/opt/brother/Printers/mfct920dw/." "${pkgdir}/usr/share/${pkgname}/"- +source=("https://download.brother.com/welcome/dlf105186/mfct920dwpdrv-${pkgver}-3.i386.rpm")+sha512sums=('8df722d021223bfb295e2ca63dae51daf73b8746f6ba799a71a1463e364c4855da4fa8832e029e5635b93ce6d0e02991620670464e7ea424b1455d11345c9346')++package() {+ _basedir="/opt/brother/Printers/mfct920dw"+ + # install to expected /opt path+ install -d "${pkgdir}${_basedir}"+ cp -R "${srcdir}${_basedir}/." "${pkgdir}${_basedir}/"++ # symlink cups filters install -d "${pkgdir}/usr/lib/cups/filter/"- ln -s "/usr/share/${pkgname}/cupswrapper/brother_lpdwrapper_mfct910dw" "${pkgdir}/usr/lib/cups/filter/brother_lpdwrapper_mfct920dw"+ ln -sf "${_basedir}/cupswrapper/brother_lpdwrapper_mfct920dw" \+ "${pkgdir}/usr/lib/cups/filter/brother_lpdwrapper_mfct920dw" - install -d "$pkgdir/usr/share/cups/model/"- ln -s "/usr/share/${pkgname}/cupswrapper/brother_mfct920dw_printer_en.ppd" "${pkgdir}/usr/share/cups/model"+ # symlink cups ppd files+ install -d "${pkgdir}/usr/share/cups/model/"+ ln -sf "${_basedir}/cupswrapper/brother_mfct920dw_printer_en.ppd" \+ "${pkgdir}/usr/share/cups/model/brother_mfct920dw_printer_en.ppd" - install -Dm644 "${pkgdir}/usr/share/${pkgname}/LICENSE_ENG.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE_ENG.txt"- install -Dm644 "${pkgdir}/usr/share/${pkgname}/LICENSE_JPN.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE_JPN.txt"+ # symlink filters according to architecture+ ln -sf "${_basedir}/lpd/${CARCH}/brmfct920dwfilter" \+ "${pkgdir}${_basedir}/lpd/brmfct920dwfilter"+ ln -sf "${_basedir}/lpd/${CARCH}/brprintconf_mfct920dw" \+ "${pkgdir}${_basedir}/lpd/brprintconf_mfct920dw"+ + # Install license files+ install -Dm644 "${pkgdir}${_basedir}/LICENSE_ENG.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE_ENG.txt"+ install -Dm644 "${pkgdir}${_basedir}/LICENSE_JPN.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE_JPN.txt" } Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |
| 2026-10-12 00:18:51 | Low | 2 |
| 2026-10-11 00:26:05 | Low | 2 |
| 2026-10-11 00:16:25 | Medium | 1 |
| 2026-06-19 19:07:35 | Clean | 2 |
| 2026-06-18 16:11:54 | Medium | 1 |