epson-inkjet-printer-escpr

LOW
maintainer hcartiaux 104 votes scanned 2026-09-07 01:12:52.129078
View on AUR
Why flagged

The source is a prebuilt SRPM from Epson's official download domain, used to build the printer driver; while the host is not a common forge, it is plausibly the vendor's own infrastructure, and the package installs only CUPS printer filters and PPDs, which are low-risk components.

Triggered rules

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The source is a prebuilt SRPM from Epson's official download domain, used to build the printer driver; while the host is not a common forge, it is plausibly the vendor's own infrastructure, and the package installs only CUPS printer filters and PPDs, which are low-risk components.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:20 source=('https://download-center.epson.com/f/module/e934c1f6-0fc1-43e5-8d3e-0de8f3a3d357/epson-inkjet-printer-escpr-1.8.8-1.src.rpm')

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Hyacinthe Cartiaux <hyacinthe.cartiaux@free.fr>
2# Contributor: Bjoern Franke <bjo+aur@schafweide.org>
3# Contributor: Nícolas Bordignon dos Santos <nicolas.bordignon16@gmail.com>
4# Contributor: Bjoern Franke <bjo+aur@schafweide.org>
5# Contributor: Filipe Laíns (FFY00) <lains@archlinux.org>
6# Contributor: James An <james@jamesan.ca>
7# Contributor: Stefano Bergamini <bergs at live dot it>
8# Contributor: Heiko Baums <heiko@baums-on-web.de>
9# Contributor: Quentin Foussette <quentinf7@gmail.com>
10# Contributor: MetaNova
11
12pkgname=epson-inkjet-printer-escpr
13pkgver=1.8.8
14pkgrel=1
15pkgdesc='Epson Inkjet Printer Driver (ESC/P-R) for Linux'
16arch=('x86_64' 'aarch64')
17url='http://support.epson.net/linux/Printer/LSB_distribution_pages/en/escpr.php'
18license=('GPL-2.0-or-later')
19depends=('cups' 'ghostscript')
20source=('https://download-center.epson.com/f/module/e934c1f6-0fc1-43e5-8d3e-0de8f3a3d357/epson-inkjet-printer-escpr-1.8.8-1.src.rpm')
21sha512sums=('85bcaff840fe4dfb256b42e5625e221ad273881b7bbeefafc53cff96ab4ddb91e0045fdfcdcf9e53a469385ec524077bfc40051429fba205b659c95741168a51')
22DLAGENTS=('https::/usr/bin/curl --user-agent Firefox -qgb "" -fLC - --retry 3 --retry-delay 3 -o %o %u')
23
24
25prepare() {
26 tar xzf "${pkgname}-${pkgver}-1.tar.gz"
27 cd "${pkgname}-${pkgver}"
28 autoreconf -vif
29}
30
31build() {
32 cd "${pkgname}-${pkgver}"
33
34 CFLAGS="${CFLAGS} -Wno-implicit-function-declaration"
35
36 ./configure \
37 --prefix=/usr \
38 --with-cupsfilterdir=/usr/lib/cups/filter \
39 --with-cupsppddir=/usr/share/ppd
40
41 make
42}
43
44package() {
45 cd "${pkgname}-${pkgver}"
46
47 make DESTDIR="${pkgdir}" install
48}
49

Scan history

Scanned at (UTC)SeverityRules
2026-09-07 01:12:52 Low 2
2026-06-19 19:07:35 Clean 2
2026-06-18 16:11:54 Low 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion