celestia-addon-international_space_station

maintainer SanskritFritz · 5 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads texture and model files for a Celestia addon from a community repository; these are non-executable data assets, not code, and the worst case of a swapped source is limited to resource tampering, not code execution.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads texture and model files for a Celestia addon from a community repository; these are non-executable data assets, not code, and the worst case of a swapped source is limited to resource tampering, not code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 source=('https://www.celestiamotherlode.net/creators/orion_nebula/isstextures.zip'

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: SanskritFritz (gmail)
    
      2
    
      3pkgname=celestia-addon-international_space_station
    
      4pkgver=1
    
      5pkgrel=2
    
      6pkgdesc="Celestia addon: Spacecraft: Earth Orbit: International Space Station"
    
      7arch=('any')
    
      8url='https://www.celestiamotherlode.net/addon/addon_293.html'
    
      9license=('unknown')
    
      10depends=('celestia')
    
      11makedepends=('unzip')
    
      12source=('https://www.celestiamotherlode.net/creators/orion_nebula/isstextures.zip'
    
      13        'https://www.celestiamotherlode.net/creators/orion_nebula/iss1.zip'
    
      14        'https://www.celestiamotherlode.net/creators/orion_nebula/iss2.zip'
    
      15        'https://www.celestiamotherlode.net/creators/orion_nebula/iss3.zip'
    
      16        'https://www.celestiamotherlode.net/creators/orion_nebula/iss4.zip'
    
      17        'https://www.celestiamotherlode.net/creators/orion_nebula/iss5.zip'
    
      18        'https://www.celestiamotherlode.net/creators/orion_nebula/iss6.zip'
    
      19        'https://www.celestiamotherlode.net/creators/orion_nebula/iss7.zip'
    
      20        'https://www.celestiamotherlode.net/creators/orion_nebula/iss8.zip'
    
      21        'https://www.celestiamotherlode.net/creators/orion_nebula/iss9.zip'
    
      22        'https://www.celestiamotherlode.net/creators/orion_nebula/iss10.zip'
    
      23        'https://www.celestiamotherlode.net/creators/orion_nebula/iss11.zip'
    
      24        'https://www.celestiamotherlode.net/creators/orion_nebula/iss12.zip'
    
      25        'https://www.celestiamotherlode.net/creators/orion_nebula/isscomplete.zip')
    
      26
    
      27package() {
    
      28	mkdir --parents "$pkgdir"/usr/share/celestia/{extras,models,textures/medres}
    
      29	cd "$srcdir"
    
      30	cp *.ssc "$pkgdir/usr/share/celestia/extras/"
    
      31	cp *.3DS "$pkgdir/usr/share/celestia/models/"
    
      32	cp "#ISS-Evolution_lire.txt" "$pkgdir/usr/share/celestia/extras/"
    
      33	for file in *.bmp
    
      34		do mv $file `echo $file | sed 's/\(.*\)/\U\1/'`
    
      35	done
    
      36	cp *.BMP "$pkgdir/usr/share/celestia/textures/medres/"
    
      37}
    
      38
    
      39md5sums=('8c29bee1e981f08d9003947fbc7dd91a'
    
      40         '3a9d4ff9e21d2f889af13c5226c38f76'
    
      41         '215d0012f6e7aae3c8ed4bd0a068e16a'
    
      42         '0113aa6e4301e475cb44803d40c508fc'
    
      43         '28d7679e01d413cee649ef8b861d0f63'
    
      44         '971295392a8b17fa24d2b50174c278d0'
    
      45         '57c4a342d3a228bde03080ba94f4be75'
    
      46         'd93807f3201644046bc8ca071807a18a'
    
      47         '0f25f3af177771128aa52f69965bda83'
    
      48         'cab2af968385f8a5f94c91adc5a02c37'
    
      49         '2836ce2ceb9e1dc80f47b716d3e78cfa'
    
      50         'cbfeca74474ea2be0eb2ffb052bc6942'
    
      51         'aa0d3b51b595b79c761bcdcdb2b3731a'
    
      52         '2ea57b66709eae748f8a6f96ffcf0854')
    
      53

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2