brother-ql1100nwb

maintainer kbabioch · 2 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads a driver from Brother's official domain, which is a standard and trusted source for this hardware; the non-whitelisted host is a subdomain of brother.com, used for legitimate downloads, and the downloaded RPM is a standard part of the driver installation process.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a driver from Brother's official domain, which is a standard and trusted source for this hardware; the non-whitelisted host is a subdomain of brother.com, used for legitimate downloads, and the downloaded RPM is a standard part of the driver installation process.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:16 source=("http://download.brother.com/welcome/dlfp100576/ql1110nwbpdrv-${pkgver/r/-}.i386.rpm"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Karol Babioch <karol@babioch.de>
2# Inspired by package brother-dcp130c
3
4pkgname='brother-ql1100nwb'
5pkgver=2.1.4r0
6pkgrel=1
7pkgdesc='LPR and CUPS driver for Brother QL-1100NWB label printer'
8url='http://solutions.brother.com/linux/en_us/'
9arch=('i686' 'x86_64')
10license=('custom')
11depends='cups'
12if [ "$CARCH" = 'x86_64' ]; then
13 depends+=('lib32-glibc')
14fi
15install="$pkgname.install"
16source=("http://download.brother.com/welcome/dlfp100576/ql1110nwbpdrv-${pkgver/r/-}.i386.rpm"
17 'LICENSE')
18sha256sums=('560f71c6c6785e10e1696fee0096fb7ef9592d2dd5beb90fc9cd67200cc921c3'
19 'cdd1955a9996bc246ba54e84f0a5ccbfdf6623962b668188762389aa79ef9811')
20
21prepare()
22{
23 # do not install in '/usr/local'
24 if [ -d $srcdir/usr/local/Brother ]; then
25 install -d $srcdir/usr/share
26 mv $srcdir/usr/local/Brother/ $srcdir/usr/share/brother
27 rm -rf $srcdir/usr/local
28 sed -i 's|/usr/local/Brother|/usr/share/brother|g' `grep -lr '/usr/local/Brother' ./`
29 fi
30
31 # setup cups directories
32 install -d "$srcdir/usr/share/cups/model"
33 install -d "$srcdir/usr/lib/cups/filter"
34
35 # go to the cupswrapper directory and find the source file from wich to generate a ppd- and wrapper-file
36 cd `find . -type d -name 'cupswrapper'`
37 if [ -f cupswrapper* ]; then
38 _wrapper_source=`ls cupswrapper*`
39 sed -i '/^\/etc\/init.d\/cups/d' $_wrapper_source
40 sed -i '/^sleep/d' $_wrapper_source
41 sed -i '/^echo lpadmin/d' $_wrapper_source
42 sed -i '/^lpadmin/d' $_wrapper_source
43 sed -i 's|/usr|$srcdir/usr|g' $_wrapper_source
44 sed -i 's|/opt|$srcdir/opt|g' $_wrapper_source
45 sed -i 's|/model/Brother|/model|g' $_wrapper_source
46 sed -i 's|lpinfo|echo|g' $_wrapper_source
47 export srcdir=$srcdir
48 ./$_wrapper_source
49 sed -i 's|$srcdir||' $srcdir/usr/lib/cups/filter/*lpdwrapper*
50 sed -i "s|$srcdir||" $srcdir/usr/lib/cups/filter/*lpdwrapper*
51 rm $_wrapper_source
52 fi
53
54 # /etc/printcap is managed by cups
55 rm `find $srcdir -type f -name 'setupPrintcap*'`
56}
57
58package() {
59 cd "$srcdir"
60
61 cp -R usr $pkgdir
62 if [ -d opt ]; then cp -R opt $pkgdir; fi
63
64 install -Dm0644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
65}
66
67

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion