deepin-wine10-stable
MEDIUM
maintainer mzwing
1 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a prebuilt .deb binary from a non-standard host (pro-store-packages.uniontech.com) which is not a common upstream source and has a SKIP'd checksum, creating a supply-chain risk if the host is compromised or the file is swapped.
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:12
source=("https://pro-store-packages.uniontech.com/appstore/pool/appstore/d/deepin-wine10-stable/deepin-wine10-stable_${_pkgver}_amd64.deb")
Medium
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 90%): The package downloads a prebuilt .deb binary from a non-standard host (pro-store-packages.uniontech.com) which is not a common upstream source and has a SKIP'd checksum, creating a supply-chain risk if the host is compromised or the file is swapped.
PKGBUILD
1 offending line(s) highlighted
1
# Contributer: mzwing <mzwing@mzwing.eu.org>
2
3
pkgname='deepin-wine10-stable'
4
_pkgver=10.14deepin11
5
pkgver=${_pkgver//-/_}
6
pkgrel=1
7
pkgdesc="Deepin wine10 stable"
8
arch=('x86_64')
9
url="http://www.deepin.org"
10
license=('Proprietary')
11
makedepends=('tar')
12
source=("https://pro-store-packages.uniontech.com/appstore/pool/appstore/d/deepin-wine10-stable/deepin-wine10-stable_${_pkgver}_amd64.deb")
13
noextract=("deepin-wine10-stable_${_pkgver}_amd64.deb")
14
sha256sums=('a3412982cfb16d8e20d29508779ac5ad8a3b389a41737eebb7f657a1b5b9cb0f')
15
DLAGENTS=("https::/usr/bin/curl -A 'Debian\ APT-HTTP/1.3' -fLC - --retry 3 --retry-delay 3 -o %o %u")
16
depends=(
17
alsa-lib # libasound2 (>= 1.0.16)
18
glibc # libc6 (>= 2.26)
19
# libcapi # libcapi20-3
20
dbus # libdbus-1-3 (>= 1.9.16)
21
gcc-libs # libgcc1 (>= 1:3.0)
22
glib2 # libglib2.0-0 (>= 2.37.3)
23
libgphoto2 # libgphoto2-6 (>= 2.5.10), libgphoto2-port12 (>= 2.5.10)
24
gst-plugins-base-libs # libgstreamer-plugins-base1.0-0 (>= 1.8.0)
25
gstreamer # libgstreamer1.0-0 (>= 1.14.0)
26
pcsclite # libpcsclite1 (>= 1.3.3)
27
libpng # libpng16-16 (>= 1.6.2-1)
28
libpulse # libpulse0 (>= 0.99.1)
29
sane # libsane (>= 1.0.24)
30
systemd-libs # libudev1 (>= 183)
31
libusb # libusb-1.0-0 (>= 2:1.0.21)
32
libx11 # libx11-6
33
libxext # libxext6
34
ocl-icd # ocl-icd-libopencl1 | libopencl1, ocl-icd-libopencl1 (>= 1.0) | libopencl-1.2-1
35
alsa-plugins # libasound2-plugins
36
ncurses # libncurses6 | libncurses5 | libncurses
37
)
38
39
optdepends=(
40
libcap # libcap2-bin
41
cups # libcups2
42
fontconfig # libfontconfig1
43
freetype2 # libfreetype6
44
glu # libglu1-mesa | libglu1
45
gnutls # libgnutls30 | libgnutls28 | libgnutls26
46
libjpeg-turbo # libjpeg62-turbo | libjpeg8
47
krb5 # libgssapi-krb5-2, libkrb5-3
48
unixodbc # libodbc1
49
mesa # libosmesa6
50
sdl2-compat # libsdl2-2.0-0
51
v4l-utils # libv4l-0
52
libxcomposite # libxcomposite1
53
libxcursor # libxcursor1
54
libxfixes # libxfixes3
55
libxi # libxi6
56
libxinerama # libxinerama1
57
libxrandr # libxrandr2
58
libxrender # libxrender1
59
libxxf86vm # libxxf86vm1
60
)
61
62
package() {
63
64
mkdir -p "deepin-wine10-stable_${_pkgver}"
65
ar -x "deepin-wine10-stable_${_pkgver}_amd64.deb" data.tar.xz --output "deepin-wine10-stable_${_pkgver}"
66
tar -xf "deepin-wine10-stable_${_pkgver}/data.tar.xz" --directory="${pkgdir}"
67
}
68
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Medium | 2 |
| 2026-09-16 00:03:17 | Medium | 2 |
| 2026-09-15 00:25:31 | Medium | 2 |
| 2026-09-14 00:27:57 | Medium | 2 |
| 2026-09-13 00:19:54 | Medium | 2 |
| 2026-09-12 00:25:17 | Medium | 2 |
| 2026-09-11 00:19:22 | Medium | 2 |
| 2026-09-10 00:22:44 | Medium | 2 |
| 2026-09-09 00:04:09 | Medium | 2 |
| 2026-09-08 00:18:08 | Medium | 2 |
| 2026-09-07 00:30:15 | Medium | 2 |
| 2026-09-06 00:17:06 | Medium | 2 |
| 2026-09-05 00:16:27 | Medium | 2 |
| 2026-09-04 00:03:13 | Medium | 2 |
| 2026-09-03 00:15:47 | Medium | 2 |
| 2026-09-02 00:02:31 | Medium | 2 |
| 2026-09-01 00:11:19 | Medium | 2 |
| 2026-08-31 00:19:57 | Medium | 2 |
| 2026-08-30 00:04:14 | Medium | 2 |
| 2026-08-29 00:29:17 | Medium | 2 |