dmde-linux

maintainer maximalisimus · 2 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads a prebuilt binary from the official project domain (dmde.ru), which is not on the whitelist but is plausibly legitimate; the software is installed locally and no untrusted remote code execution occurs.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt binary from the official project domain (dmde.ru), which is not on the whitelist but is plausibly legitimate; the software is installed locally and no untrusted remote code execution occurs.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:16 source_x86_64=("https://dmde.ru/download/${pkg_name}")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Mikhail Artamonov <maximalis171091@yandex.ru>
2# makepkg --printsrcinfo > .SRCINFO && makepkg -scC --nocheck --skipchecksums --skipinteg --skippgpcheck
3
4pkgname=dmde-linux
5pkgver=4.2.0
6pkg_name="dmde-4-2-0-814-lin64-gui.zip"
7pkgrel=1
8pkgdesc="DMDE is a powerful tool for data searching, editing, and recovery on disks"
9arch=('x86_64')
10url="https://dmde.ru/"
11license=('custom')
12depends=(zenity sudo)
13makedepends=(unzip)
14replaces=($pkgname)
15
16source_x86_64=("https://dmde.ru/download/${pkg_name}")
17
18source=(dmde-linux.desktop
19 logo.png
20 dmde-start.sh)
21
22sha512sums=('3a4718b824861ea8a72a93cc7ae66828e5160d3642331e1b8f1d299affcfdd71f32d521521abdceda6c31a58830e6808c815c1edb0eb77fda1b9d162223d1dc2'
23 'c32bbbb33b629b1953077fe9669a451c0adc308f94ce42c21e319ffe776695cb55c4d23831724186f966922a9fea073f8e65bb1f9a73afb5cb2e8075a0e5ebfe'
24 '3ae42d333b768e0d761601a1bc8d85a785056e7a2a943394bee9be3de210c4033ceb5bf48660d2a13b0f67f9b54990c14db9d8fc6e18b462cbf95f496e95ff7a')
25
26sha512sums_x86_64=('4827fed6a327984ce3e762fc35e4430956bdf6a253df6ff2b247646555bf67fdc88e797e2e5d10c85121a20965c7823105b86806d0003b224dd118ab3e4fc136')
27
28package() {
29 replaces=("${pkgname[0]}")
30 depends=(zenity sudo)
31 cd $srcdir
32 mkdir -p ./usr/share/dmde-linux/ $pkgdir/usr/bin/ $pkgdir/usr/share/applications/ $pkgdir/usr/share/pixmaps/
33 _pkgname=$(basename "${source_x86_64[0]}")
34 rm -rf $srcdir/usr/share/dmde-cli
35 unzip "./${_pkgname[*]}" -d $srcdir/usr/share/dmde-linux/
36 cp -r usr $pkgdir
37 chmod +x $pkgdir/usr/share/dmde-linux/dmde
38 chmod +x $pkgdir/usr/share/dmde-linux/dmde-su
39 install -vDm644 $srcdir/logo.png $pkgdir/usr/share/pixmaps/$pkgname.png
40 install -vDm644 $srcdir/$pkgname.desktop $pkgdir/usr/share/applications/$pkgname.desktop
41 chmod +x $pkgdir/usr/share/applications/$pkgname.desktop
42 install -vDm644 $srcdir/dmde-start.sh $pkgdir/usr/share/dmde-linux/dmde-start.sh
43 chmod +x $pkgdir/usr/share/dmde-linux/dmde-start.sh
44 ln -sr /usr/share/dmde-linux/dmde-start.sh $pkgdir/usr/bin/dmde
45}
46

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion