deepin-wine-weiyunsync
LOW
maintainer zxp19821005
1 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a .deb and a Windows .exe from a university mirror and Tencent's official domain respectively; the .exe is unpacked and repackaged into a Deepin Wine bundle, which is normal for AUR packaging of such applications, and both sources are plausibly official and verifiable via checksums.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a .deb and a Windows .exe from a university mirror and Tencent's official domain respectively; the .exe is unpacked and repackaged into a Deepin Wine bundle, which is normal for AUR packaging of such applications, and both sources are plausibly official and verifiable via checksums.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:30
"${_pkgname}-${_sparkver}.deb::https://mirrors.sdu.edu.cn/spark-store-repository/store/network/${_sparkpkgname}/${_sparkpkgname}_${_sparkver}_i386.deb" -
PKGBUILD:31
"${_officalname}-${pkgver}.exe::https://dldir1.qq.com/weiyun/${_officalname}Install_Beta_1_${pkgver}_20240204_154929_r0.exe"
PKGBUILD
2 offending line(s) highlighted
1
# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
2
_pkgname=weiyunsync
3
pkgname="deepin-wine-${_pkgname}"
4
_officalname=WeiyunSync
5
_sparkpkgname="com.${_pkgname}.spark"
6
pkgver=3.0.0.671
7
_sparkver=3.0.0spark1
8
pkgrel=1
9
_provides=Tencent
10
pkgdesc="WeiyunSync on Deepin Wine6.基于深度Wine6的微云同步助手"
11
arch=("x86_64")
12
url="https://www.weiyun.com"
13
license=('LicenseRef-freeware')
14
provides=("${_pkgname}")
15
conflicts=("${_pkgname}")
16
depends=(
17
'deepin-wine6-stable'
18
'spark-dwine-helper'
19
'xdg-utils'
20
)
21
makedepends=(
22
'p7zip'
23
)
24
optdepends=(
25
'wqy-microhei'
26
'wqy-zenhei'
27
)
28
install="${pkgname}.install"
29
source=(
30
"${_pkgname}-${_sparkver}.deb::https://mirrors.sdu.edu.cn/spark-store-repository/store/network/${_sparkpkgname}/${_sparkpkgname}_${_sparkver}_i386.deb"
31
"${_officalname}-${pkgver}.exe::https://dldir1.qq.com/weiyun/${_officalname}Install_Beta_1_${pkgver}_20240204_154929_r0.exe"
32
"LICENSE::${url}/xy.html"
33
"${pkgname}.sh"
34
)
35
sha256sums=('1c9361a9070ad2bfc85236397c75201c8e63374cc311514b68eae25877cadf84'
36
'736cf7d2dca3449f71a93e9e5857a9efd4fd7c9b319cfbea116ca6418155cc58'
37
'51cc8268ffb29a4155520a7d5d44cce5d0eebd6d128b7c0fefe0ab16cb897240'
38
'10ea79a64179945e5d5489ebf56ecbba08ee2180b251379c5f54cae8e704b5db')
39
build() {
40
sed -e "s|@bottlename@|Deepin-${_officalname}|g" \
41
-e "s|@appver@|${pkgver}|g" \
42
-e "s|@provider@|${_provides}|g" \
43
-e "s|@appname@|${pkgname}|g" \
44
-e "s|@pathname@|${_officalname}|g" \
45
-e "s|@runname@|${_pkgname}|g" \
46
-i "${srcdir}/${pkgname}.sh"
47
bsdtar -xf "${srcdir}/data."*
48
mv "${srcdir}/opt/apps/${_sparkpkgname}" "${srcdir}/opt/apps/${pkgname}"
49
sed -e "s|Icon=${_sparkpkgname}|Icon=${pkgname}|g" \
50
-e "s|/opt/apps/${_sparkpkgname}/files/run.sh|${pkgname}|g" \
51
-i "${srcdir}/opt/apps/${pkgname}/entries/applications/${_sparkpkgname}.desktop"
52
mkdir -p "${srcdir}/tmp"
53
msg "Extracting Deepin Wine ${_officalname} archive ..."
54
7z x -aoa "${srcdir}/opt/apps/${pkgname}/files/files.7z" -o"${srcdir}/tmp"
55
msg "Extracting latest ${_officalname} installer to ${srcdir}/tmp/drive_c/Program Files/${_provides}/${_officalname} ..."
56
7z x -aoa "${srcdir}/${_officalname}-${pkgver}.exe" -o"${srcdir}/tmp/drive_c/Program Files/${_provides}/"
57
rm -r "${srcdir}/tmp/drive_c/Program Files/${_provides}/\$PLUGINSDIR"
58
msg "Repackaging app archive ..."
59
rm -r "${srcdir}/opt/apps/${pkgname}/files/files.7z" "${srcdir}/opt/apps/${pkgname}/info"
60
7z a -t7z -r "${srcdir}/opt/apps/${pkgname}/files/files.7z" "${srcdir}/tmp/*"
61
}
62
package() {
63
cp -r "${srcdir}/opt" "${pkgdir}"
64
md5sum "${pkgdir}/opt/apps/${pkgname}/files/files.7z" | awk '{ print $1 }' > "${pkgdir}/opt/apps/${pkgname}/files/files.md5sum"
65
install -Dm644 "${srcdir}/opt/apps/${pkgname}/entries/applications/${_sparkpkgname}.desktop" \
66
"${pkgdir}/usr/share/applications/${pkgname}.desktop"
67
install -Dm644 "${srcdir}/opt/apps/${pkgname}/entries/icons/hicolor/scalable/apps/${_sparkpkgname}.svg" \
68
"${pkgdir}/usr/share/icons/hicolor/scalable/apps/${pkgname}.svg"
69
install -Dm644 "LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}"
70
install -Dm755 "${pkgname}.sh" "${pkgdir}/usr/bin/${pkgname}"
71
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |