celestia-addon-international_space_station

LOW

maintainer SanskritFritz 5 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads texture and model files for a Celestia addon from a community repository; these are non-executable data assets, not code, and the worst case of a swapped source is limited to resource tampering, not code execution.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads texture and model files for a Celestia addon from a community repository; these are non-executable data assets, not code, and the worst case of a swapped source is limited to resource tampering, not code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 source=('https://www.celestiamotherlode.net/creators/orion_nebula/isstextures.zip'

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: SanskritFritz (gmail)
    
      2
    
      3pkgname=celestia-addon-international_space_station
    
      4pkgver=1
    
      5pkgrel=2
    
      6pkgdesc="Celestia addon: Spacecraft: Earth Orbit: International Space Station"
    
      7arch=('any')
    
      8url='https://www.celestiamotherlode.net/addon/addon_293.html'
    
      9license=('unknown')
    
      10depends=('celestia')
    
      11makedepends=('unzip')
    
      12source=('https://www.celestiamotherlode.net/creators/orion_nebula/isstextures.zip'
    
      13        'https://www.celestiamotherlode.net/creators/orion_nebula/iss1.zip'
    
      14        'https://www.celestiamotherlode.net/creators/orion_nebula/iss2.zip'
    
      15        'https://www.celestiamotherlode.net/creators/orion_nebula/iss3.zip'
    
      16        'https://www.celestiamotherlode.net/creators/orion_nebula/iss4.zip'
    
      17        'https://www.celestiamotherlode.net/creators/orion_nebula/iss5.zip'
    
      18        'https://www.celestiamotherlode.net/creators/orion_nebula/iss6.zip'
    
      19        'https://www.celestiamotherlode.net/creators/orion_nebula/iss7.zip'
    
      20        'https://www.celestiamotherlode.net/creators/orion_nebula/iss8.zip'
    
      21        'https://www.celestiamotherlode.net/creators/orion_nebula/iss9.zip'
    
      22        'https://www.celestiamotherlode.net/creators/orion_nebula/iss10.zip'
    
      23        'https://www.celestiamotherlode.net/creators/orion_nebula/iss11.zip'
    
      24        'https://www.celestiamotherlode.net/creators/orion_nebula/iss12.zip'
    
      25        'https://www.celestiamotherlode.net/creators/orion_nebula/isscomplete.zip')
    
      26
    
      27package() {
    
      28	mkdir --parents "$pkgdir"/usr/share/celestia/{extras,models,textures/medres}
    
      29	cd "$srcdir"
    
      30	cp *.ssc "$pkgdir/usr/share/celestia/extras/"
    
      31	cp *.3DS "$pkgdir/usr/share/celestia/models/"
    
      32	cp "#ISS-Evolution_lire.txt" "$pkgdir/usr/share/celestia/extras/"
    
      33	for file in *.bmp
    
      34		do mv $file `echo $file | sed 's/\(.*\)/\U\1/'`
    
      35	done
    
      36	cp *.BMP "$pkgdir/usr/share/celestia/textures/medres/"
    
      37}
    
      38
    
      39md5sums=('8c29bee1e981f08d9003947fbc7dd91a'
    
      40         '3a9d4ff9e21d2f889af13c5226c38f76'
    
      41         '215d0012f6e7aae3c8ed4bd0a068e16a'
    
      42         '0113aa6e4301e475cb44803d40c508fc'
    
      43         '28d7679e01d413cee649ef8b861d0f63'
    
      44         '971295392a8b17fa24d2b50174c278d0'
    
      45         '57c4a342d3a228bde03080ba94f4be75'
    
      46         'd93807f3201644046bc8ca071807a18a'
    
      47         '0f25f3af177771128aa52f69965bda83'
    
      48         'cab2af968385f8a5f94c91adc5a02c37'
    
      49         '2836ce2ceb9e1dc80f47b716d3e78cfa'
    
      50         'cbfeca74474ea2be0eb2ffb052bc6942'
    
      51         'aa0d3b51b595b79c761bcdcdb2b3731a'
    
      52         '2ea57b66709eae748f8a6f96ffcf0854')
    
      53

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2