dmde-linux
The package downloads a prebuilt binary from the official project domain (dmde.ru), which is not on the whitelist but is plausibly legitimate; the software is installed locally and no untrusted remote code execution occurs.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt binary from the official project domain (dmde.ru), which is not on the whitelist but is plausibly legitimate; the software is installed locally and no untrusted remote code execution occurs.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:16
source_x86_64=("https://dmde.ru/download/${pkg_name}")
PKGBUILD
1 offending line(s) highlighted# Maintainer: Mikhail Artamonov <maximalis171091@yandex.ru>
# makepkg --printsrcinfo > .SRCINFO && makepkg -scC --nocheck --skipchecksums --skipinteg --skippgpcheck
pkgname=dmde-linux
pkgver=4.2.0
pkg_name="dmde-4-2-0-814-lin64-gui.zip"
pkgrel=1
pkgdesc="DMDE is a powerful tool for data searching, editing, and recovery on disks"
arch=('x86_64')
url="https://dmde.ru/"
license=('custom')
depends=(zenity sudo)
makedepends=(unzip)
replaces=($pkgname)
source_x86_64=("https://dmde.ru/download/${pkg_name}")
source=(dmde-linux.desktop
logo.png
dmde-start.sh)
sha512sums=('3a4718b824861ea8a72a93cc7ae66828e5160d3642331e1b8f1d299affcfdd71f32d521521abdceda6c31a58830e6808c815c1edb0eb77fda1b9d162223d1dc2'
'c32bbbb33b629b1953077fe9669a451c0adc308f94ce42c21e319ffe776695cb55c4d23831724186f966922a9fea073f8e65bb1f9a73afb5cb2e8075a0e5ebfe'
'3ae42d333b768e0d761601a1bc8d85a785056e7a2a943394bee9be3de210c4033ceb5bf48660d2a13b0f67f9b54990c14db9d8fc6e18b462cbf95f496e95ff7a')
sha512sums_x86_64=('4827fed6a327984ce3e762fc35e4430956bdf6a253df6ff2b247646555bf67fdc88e797e2e5d10c85121a20965c7823105b86806d0003b224dd118ab3e4fc136')
package() {
replaces=("${pkgname[0]}")
depends=(zenity sudo)
cd $srcdir
mkdir -p ./usr/share/dmde-linux/ $pkgdir/usr/bin/ $pkgdir/usr/share/applications/ $pkgdir/usr/share/pixmaps/
_pkgname=$(basename "${source_x86_64[0]}")
rm -rf $srcdir/usr/share/dmde-cli
unzip "./${_pkgname[*]}" -d $srcdir/usr/share/dmde-linux/
cp -r usr $pkgdir
chmod +x $pkgdir/usr/share/dmde-linux/dmde
chmod +x $pkgdir/usr/share/dmde-linux/dmde-su
install -vDm644 $srcdir/logo.png $pkgdir/usr/share/pixmaps/$pkgname.png
install -vDm644 $srcdir/$pkgname.desktop $pkgdir/usr/share/applications/$pkgname.desktop
chmod +x $pkgdir/usr/share/applications/$pkgname.desktop
install -vDm644 $srcdir/dmde-start.sh $pkgdir/usr/share/dmde-linux/dmde-start.sh
chmod +x $pkgdir/usr/share/dmde-linux/dmde-start.sh
ln -sr /usr/share/dmde-linux/dmde-start.sh $pkgdir/usr/bin/dmde
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |