deepin-wine-baiduwenku
LOW
maintainer zxp19821005
1 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a .deb from a Deepin-related domain and an official Baidu executable from bdimg.com, both plausibly legitimate sources; the build process repackages the official client for Deepin Wine, which is normal for AUR packaging and poses no inherent risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a .deb from a Deepin-related domain and an official Baidu executable from bdimg.com, both plausibly legitimate sources; the build process repackages the official client for Deepin Wine, which is normal for AUR packaging and poses no inherent risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:29
"${pkgname}-${sparkver}.deb::https://d.store.deepinos.org.cn/store/office/${_pkgname}/${_pkgname}_${sparkver}_all.deb" -
PKGBUILD:30
"${pkgname}-${pkgver}.exe::https://edu-wenku.bdimg.com/v1/na/0807/PC%E5%AE%A2%E6%88%B7%E7%AB%AF%E7%89%88%E6%9C%AC%E5%8C%85/%E7%99%BE%E5%BA%A6%E6%96%87%E5%BA%93%20Setup%20${pkgver}.exe"
PKGBUILD
2 offending line(s) highlighted
1
# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
2
pkgname=deepin-wine-baiduwenku
3
_pkgname=com.baidu.wenku.spark
4
_officalname=BaiduWenku
5
_bottlename="Deepin-${BaiduWenku}"
6
_installname=wenku-pc
7
pkgver=2.0.2
8
sparkver=1.2.8spark2
9
pkgrel=2
10
pkgdesc="Baidu wenku Client on Deepin Wine6.一款由百度发布的供网友在线分享文档的平台"
11
arch=('x86_64')
12
url="https://wenku.baidu.com"
13
license=('LicenseRef-custom')
14
depends=(
15
'deepin-wine6-stable'
16
'spark-dwine-helper'
17
'xdg-utils'
18
)
19
makedepends=(
20
'p7zip'
21
)
22
optdepends=(
23
'wqy-microhei'
24
'wqy-zenhei'
25
)
26
provides=("baiduwenku")
27
install="${pkgname}.install"
28
source=(
29
"${pkgname}-${sparkver}.deb::https://d.store.deepinos.org.cn/store/office/${_pkgname}/${_pkgname}_${sparkver}_all.deb"
30
"${pkgname}-${pkgver}.exe::https://edu-wenku.bdimg.com/v1/na/0807/PC%E5%AE%A2%E6%88%B7%E7%AB%AF%E7%89%88%E6%9C%AC%E5%8C%85/%E7%99%BE%E5%BA%A6%E6%96%87%E5%BA%93%20Setup%20${pkgver}.exe"
31
"LICENSE.html::https://edu-wenku.bdimg.com/v1/pc/protocols/help24-new.htm"
32
"${pkgname}.sh"
33
)
34
sha256sums=('06262e7ba445d996cc4cef8c555474ca8b6eef4ac676e2bb86b00df6103d45b4'
35
'866d5192cd751d39c41d3a26464ae217954d4cef7c83a68aa194267c6a78ee30'
36
'e93a1b4112398eefd1d0688d126af3403226c4827a0e4f5f5ee40a97999cf222'
37
'f24db1b1ca08a4bbbd95fd878bffb37b4777df11e300da4a3b8ad86114c56c7f')
38
build() {
39
sed -e "s|@bottlename@|${_bottlename}|g" \
40
-e "s|@appver@|${pkgver}|g" \
41
-e "s|@packagename@|${pkgname}|g" \
42
-e "s|@path@|${_installname}|g" \
43
-i "${srcdir}/${pkgname}.sh"
44
bsdtar -xf "${srcdir}/data."*
45
mv "${srcdir}/opt/apps/${_pkgname}" "${srcdir}/opt/apps/${pkgname}"
46
sed -e "s|\"/opt/apps/${_pkgname}/files/run.sh\"|${pkgname}|g" \
47
-e "s|Icon=${_pkgname}|Icon=${pkgname}|g" \
48
-i "${srcdir}/opt/apps/${pkgname}/entries/applications/${_pkgname}.desktop"
49
50
mkdir -p "${srcdir}/tmp"
51
msg "Extracting Deepin Wine ${_officalname} archive ..."
52
7za x -aoa "${srcdir}/opt/apps/${pkgname}/files/files.7z" -o"${srcdir}/tmp"
53
54
msg "Copying latest ${_officalname} installer to ${srcdir}/tmp/drive_c/Program Files/${_installname} ..."
55
7z e -aoa "${srcdir}/${pkgname}-${pkgver}.exe" -o"${srcdir}/tmp/drive_c/Program Files (x86)/${_installname}/"
56
rm -r "${srcdir}/tmp/drive_c/Program Files/" "${srcdir}/tmp/drive_c/Program Files (x86)/${_installname}/\$2"
57
58
msg "Repackaging app archive ..."
59
rm -r "${srcdir}/opt/apps/${pkgname}/files/files.7z" "${srcdir}/opt/apps/${pkgname}/info"
60
7za a -t7z -r "${srcdir}/opt/apps/${pkgname}/files/files.7z" "${srcdir}/tmp/*"
61
}
62
package() {
63
install -Dm755 "${srcdir}/${pkgname}.sh" "${pkgdir}/usr/bin/${pkgname}"
64
install -Dm755 -d "${pkgdir}/opt"
65
cp -r "${srcdir}/opt/apps" "${pkgdir}/opt"
66
md5sum "${pkgdir}/opt/apps/${pkgname}/files/files.7z" | awk '{ print $1 }' > "${pkgdir}/opt/apps/${pkgname}/files/files.md5sum"
67
install -Dm644 "${srcdir}/opt/apps/${pkgname}/entries/icons/hicolor/scalable/apps/${_pkgname}.png" "${pkgdir}/usr/share/pixmaps/${pkgname}.png"
68
install -Dm644 "${srcdir}/opt/apps/${pkgname}/entries/applications/${_pkgname}.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"
69
install -Dm644 "${srcdir}/LICENSE.html" -t "${pkgdir}/usr/share/licenses/${pkgname}"
70
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |