dmde-linux
maintainer maximalisimus
· 2 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads a prebuilt binary from the official project domain (dmde.ru), which is not on the whitelist but is plausibly legitimate; the software is installed locally and no untrusted remote code execution occurs.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt binary from the official project domain (dmde.ru), which is not on the whitelist but is plausibly legitimate; the software is installed locally and no untrusted remote code execution occurs.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:16
source_x86_64=("https://dmde.ru/download/${pkg_name}")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Mikhail Artamonov <maximalis171091@yandex.ru>
2
# makepkg --printsrcinfo > .SRCINFO && makepkg -scC --nocheck --skipchecksums --skipinteg --skippgpcheck
3
4
pkgname=dmde-linux
5
pkgver=4.2.0
6
pkg_name="dmde-4-2-0-814-lin64-gui.zip"
7
pkgrel=1
8
pkgdesc="DMDE is a powerful tool for data searching, editing, and recovery on disks"
9
arch=('x86_64')
10
url="https://dmde.ru/"
11
license=('custom')
12
depends=(zenity sudo)
13
makedepends=(unzip)
14
replaces=($pkgname)
15
16
source_x86_64=("https://dmde.ru/download/${pkg_name}")
17
18
source=(dmde-linux.desktop
19
logo.png
20
dmde-start.sh)
21
22
sha512sums=('3a4718b824861ea8a72a93cc7ae66828e5160d3642331e1b8f1d299affcfdd71f32d521521abdceda6c31a58830e6808c815c1edb0eb77fda1b9d162223d1dc2'
23
'c32bbbb33b629b1953077fe9669a451c0adc308f94ce42c21e319ffe776695cb55c4d23831724186f966922a9fea073f8e65bb1f9a73afb5cb2e8075a0e5ebfe'
24
'3ae42d333b768e0d761601a1bc8d85a785056e7a2a943394bee9be3de210c4033ceb5bf48660d2a13b0f67f9b54990c14db9d8fc6e18b462cbf95f496e95ff7a')
25
26
sha512sums_x86_64=('4827fed6a327984ce3e762fc35e4430956bdf6a253df6ff2b247646555bf67fdc88e797e2e5d10c85121a20965c7823105b86806d0003b224dd118ab3e4fc136')
27
28
package() {
29
replaces=("${pkgname[0]}")
30
depends=(zenity sudo)
31
cd $srcdir
32
mkdir -p ./usr/share/dmde-linux/ $pkgdir/usr/bin/ $pkgdir/usr/share/applications/ $pkgdir/usr/share/pixmaps/
33
_pkgname=$(basename "${source_x86_64[0]}")
34
rm -rf $srcdir/usr/share/dmde-cli
35
unzip "./${_pkgname[*]}" -d $srcdir/usr/share/dmde-linux/
36
cp -r usr $pkgdir
37
chmod +x $pkgdir/usr/share/dmde-linux/dmde
38
chmod +x $pkgdir/usr/share/dmde-linux/dmde-su
39
install -vDm644 $srcdir/logo.png $pkgdir/usr/share/pixmaps/$pkgname.png
40
install -vDm644 $srcdir/$pkgname.desktop $pkgdir/usr/share/applications/$pkgname.desktop
41
chmod +x $pkgdir/usr/share/applications/$pkgname.desktop
42
install -vDm644 $srcdir/dmde-start.sh $pkgdir/usr/share/dmde-linux/dmde-start.sh
43
chmod +x $pkgdir/usr/share/dmde-linux/dmde-start.sh
44
ln -sr /usr/share/dmde-linux/dmde-start.sh $pkgdir/usr/bin/dmde
45
}
46
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |