epsonscan2

LOW

maintainer tecnotercio 27 votes scanned 2026-10-02 00:00:32.890515

View on AUR

Why flagged

The package downloads source and binary blobs from Epson's official download domain; while the host is not a standard code forge, it is plausibly the vendor's legitimate distribution infrastructure, and the artifacts are verified via b2sums.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads source and binary blobs from Epson's official download domain; while the host is not a standard code forge, it is plausibly the vendor's legitimate distribution infrastructure, and the artifacts are verified via b2sums.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 source=('https://download-center.epson.com/f/module/793c84de-6ffb-4ca6-9383-0390b06eb6bf/epsonscan2-6.7.92.0-1.src.tar.gz'

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Tércio Martins <echo dGVyY2lvd2VuZGVsQGdtYWlsLmNvbQo= | base64 -d>
    
      2
    
      3_epsonscan2_non_free_plugin_version='1.0.0.6'
    
      4
    
      5pkgname=epsonscan2
    
      6pkgver=6.7.92.0
    
      7_pkgver="$pkgver-1"
    
      8pkgrel=1
    
      9arch=('armv7h' 'x86_64')
    
      10pkgdesc="Epson scanner management utility"
    
      11url="https://download-center.epson.com/"
    
      12license=('GPL-3.0-or-later' 'LicenseRef-EULA')
    
      13depends=('libjpeg-turbo' 'libpng' 'libtiff' 'libusb' 'qt5-base' 'sane' 'zlib')
    
      14makedepends=('bbe' 'boost' 'cmake' 'qt5-singlecoreapplication' 'rapidjson')
    
      15conflicts=('epsonscan2-non-free-plugin')
    
      16options=('!buildflags')
    
      17source=('https://download-center.epson.com/f/module/793c84de-6ffb-4ca6-9383-0390b06eb6bf/epsonscan2-6.7.92.0-1.src.tar.gz'
    
      '0002-Fix-crash.patch'
    
      '0003-Use-XDG-open-to-open-the-directory.patch'
    
      '0005-Fix-folder-creation-crash.patch'
    
      '0006-Fix-crash-no-serial-number.patch'
    
      '0007-Detect-scanners-that-need-firmware.patch')
    
      23source_armv7h=('https://download-center.epson.com/f/module/f31a93a4-d21c-4420-8f29-b9c7ccc4bd12/epsonscan2-bundle-6.7.92.0.armv7l.deb.tar.gz')
    
      24source_x86_64=('https://download-center.epson.com/f/module/967b0efe-4805-4723-bb6a-6ea0f68c5e2a/epsonscan2-bundle-6.7.92.0.x86_64.deb.tar.gz')
    
      25b2sums=('65857d7cdb00a804619701c8b20e7e12d200d25159d721c6ccb421c9440e7dc76369801caba1c1b2bc46d4b4c3d6278bf94571c1b3dac562252a0f9994e871d6'
    
      'c763f16b2fac22b7ac0093228142a516222dc044533b7b320087f87b0fcad1f614ea93210f544f093f3e07c89220ab097901628a4d5dc57213bae505c4bebd58'
    
      'e398e821704599be0b6ba9192c32411f92650f2e455b088718ba4b643562c21bc02044df30affe2b7ea99069cd0c1c59902e586e9de7e1bb9b3e0ae013c9e30d'
    
      '5e2af573e616a6afaeb4b9035e54f5a0e05684f194a5fac52eb9ced619fdc156a62ab22bcf62af14a058f74d80a6606abf5e056ea720109c013624802d4b62e5'
    
      '282a18ad086446f290d795141d63235e67416cea894945d2c65dac7ffa36b3288ef920ef627df349f06e5f482b16e8fa6dbd0064db4b701437a01b913bd8a3fb'
    
      '5a3416356913438cfe901195198b0c00167d69f726ef2913e2dc209151d4c1b736c2a608e8b556bc201acc320548a56263f2782fdb79249c46e490ef756c2700')
    
      31b2sums_armv7h=('f66304ef47c455b10c611b3023f745e039902f931822db8f0f26363bc224ce9f10b3965d06995c382d0e73976fe8b0581b99a7c1b0cf0695c53f04a942320408')
    
      32b2sums_x86_64=('dc422c9f2d1ff4f00e9ebe6c264b2ee03daad9701c7c971a1b6a2f887dd999c64bb6894c6f7ee7afb1fff315ce871dcd0d580be99c651a14ac53b953f43da7dc')
    
      33
    
      34DLAGENTS=("https::/usr/bin/curl -A 'Mozilla' -fLC - --retry 3 --retry-delay 3 -o %o %u")
    
      35
    
      36prepare() {
    
# sane and udev: copy files to the build directory
    
sed -i 's|/lib/udev|${CMAKE_INSTALL_PREFIX}/lib/udev|' \
    
       "$srcdir/$pkgname-$_pkgver/CMakeLists.txt"
    
      40
    
sed -i '/LIBDIR}\/sane/ s|${EPSON|\\$ENV{DESTDIR}\\${EPSON|' \
    
       "$srcdir/$pkgname-$_pkgver/CMakeLists.txt"
    
      43
    
# Disable zlib build; use the Arch Linux library
    
sed -i '1 i #include "zlib.h"' \
    
       "$srcdir/$pkgname-$_pkgver/src/CommonUtility/DbgLog.cpp"
    

    
sed -i '/zlib/d' \
    
       "$srcdir/$pkgname-$_pkgver/src/Controller/CMakeLists.txt"
    
      50
    
# Stability improvements from Flatpak maintainers
    
# https://github.com/flathub/net.epson.epsonscan2
    
for file in 0002-Fix-crash \
    
            0003-Use-XDG-open-to-open-the-directory \
    
            0005-Fix-folder-creation-crash
    
do
    
  patch --directory="$srcdir/$pkgname-$_pkgver" --forward --binary \
    
        --strip=1 --input="$srcdir/$file.patch"
    
done
    
      60
    
# Fix a bug when detecting a scanner that does not report its serial number
    
# https://github.com/duck7000/aur_epsonscan2/blob/main/0005-Fix-crash-no-serial-number.patch
    
for file in 0006-Fix-crash-no-serial-number \
    
            0007-Detect-scanners-that-need-firmware
    
do
    
  patch --directory="$srcdir/$pkgname-$_pkgver" --forward --binary \
    
        --strip=1 --input="$srcdir/$file.patch"
    
done
    
      69
    
# Remove Boost setting in CMake config that crashes the package build
    
find "$srcdir/$pkgname-$_pkgver" -type f -name CMakeLists.txt \
    
     -exec sed -i '/BOOST_NO_CXX11_RVALUE_REFERENCES/d' {} \;
    
      73
    
for file in Standalone/lastusedsettings.cpp \
    
            Standalone/defaultsettings.cpp \
    
            CommonUtility/ESCommonTypedef.h \
    
            Controller/Src/KeysValues/Key.hpp \
    
            Controller/Src/KeysValues/KeyMgr.hpp
    
do
    
  sed -i '/BOOST_NO_CXX11_RVALUE_REFERENCES/d' \
    
         "$srcdir/$pkgname-$_pkgver/src/$file"
    
done
    
      83
    
# Remove support for older versions of CMake in the configuration scripts
    
# (needed to build the package)
    
for dir in . \
    
           src \
    
           src/Standalone \
    
           src/ScanSDK \
    
           src/ScanSDK/Src/SDK/SCANSDKsample_C++ \
    
           src/DetectAlert
    
do
    
  sed -Ei '/cmake_minimum_required/ s/2\.([0-9]+|\.)+/4.0/' \
    
          "$srcdir/$pkgname-$_pkgver/$dir/CMakeLists.txt"
    
done
    
      96
    
# Fix compilation failure caused by GCC 15
    
sed -i '/SET.*FLAGS/ s/")/ -Wno-template-body")/' \
    
       "$srcdir/$pkgname-$_pkgver/src/ES2Command/Linux/CMakeLists.txt"
    
      100
    
# Change directory references from "/usr/libexec" to "/usr/lib" in the source code
    
for file in Controller/Src/Scanner/Engine.cpp \
    
            Controller/Src/Filter/GetOrientation.cpp
    
do
    
  sed -i 's/libexec/lib/' \
    
         "$srcdir/$pkgname-$_pkgver/src/$file"
    
done
    
      108
    
# Disable building in debug mode
    
for file in CMakeLists.txt \
    
            src/ES2Emulator/test/CMakeLists.txt \
    
            src/ES2Emulator/Linux/CMakeLists.txt \
    
            src/Controller/Test/CMakeLists.txt
    
do
    
  sed -i '/CMAKE_BUILD_TYPE Debug/ s/^/#/' \
    
         "$srcdir/$pkgname-$_pkgver/$file"
    
done
    
      118
    
# Remove references to the source code in executables
    
sed -i "/add_subdir/ i add_compile_options(\"-fmacro-prefix-map=$(echo $srcdir)=.\")" \
    
       "$srcdir/$pkgname-$_pkgver/CMakeLists.txt"
    
      122
    
# Prepare plugin files
    
cd "$srcdir"/epsonscan2-bundle*/plugins
    
ar x epsonscan2-non-free-plugin*.deb
    
tar -xJf data.tar.xz -C "$srcdir"
    
      127
    
# The “es2intif” program looks for libraries in the default Debian directory:
    
# /usr/lib/x86_64-linux-gnu/epsonscan2/
    
# This command updates to the path used in this package:
    
# /usr/lib/epsonscan2/
    
cd "$srcdir"/usr/lib/*/epsonscan2/non-free-exec
    
case $CARCH in
    
  armv7h)
    
    bbe -e "s|arm-linux-gnueabihf/epsonscan2/|epsonscan2/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00|" es2intif > es2intif.alt
    
  ;;
    
  x86_64)
    
    bbe -e "s|x86_64-linux-gnu/epsonscan2/|epsonscan2/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00|" es2intif > es2intif.alt
    
  ;;
    
esac
    
mv es2intif.alt es2intif
    
chmod +x es2intif
    
      143}
    
      144
    
      145build() {
    
cmake $pkgname-$_pkgver \
    
      -B build \
    
      -DCMAKE_BUILD_TYPE=Release \
    
      -DCMAKE_INSTALL_PREFIX=/usr \
    
      -DEPSON_OCR_INSTALL_PATH="/usr/share/epsonscan2-ocr" \
    
      -DQT_VERSION_MAJOR=5
    
      
    
cmake --build build
    
      154}
    
      155
    
      156package() {
    
DESTDIR="$pkgdir" cmake --install build
    
      158
    
install -Dm644 "$srcdir/$pkgname-$_pkgver/desktop/rpm/i686/$pkgname.desktop" \
    
               "$pkgdir/usr/share/applications/$pkgname.desktop"
    
      161
    
# Package plugin files
    
install -d "$pkgdir/usr/lib/"
    
cd "$srcdir/usr"
    
cp -lr lib/*/epsonscan2* "$pkgdir/usr/lib" && rm -r lib/*/epsonscan2*
    
mv libexec/epsonscan2-ocr/ocr-engine-getrotate "$pkgdir/usr/lib/epsonscan2-ocr"
    
cp -lr share "$pkgdir/usr" && rm -r share
    
install -Dm644 "$pkgdir/usr/share/doc/$pkgname-non-free-plugin-${_epsonscan2_non_free_plugin_version}-1/copyright" \
    
               "$pkgdir/usr/share/licenses/$pkgname/copyright_epsonscan2-non-free-plugin"
    
install -Dm644 "$pkgdir/usr/share/doc/$pkgname-non-free-plugin-${_epsonscan2_non_free_plugin_version}-1/COPYING.EPSON" \
    
               "$pkgdir/usr/share/licenses/$pkgname/EULA_epsonscan2-non-free-plugin"
    
      172}
    
      173

Changes since previous scan

--- PKGBUILD @ 2026-09-14 00:27
+++ PKGBUILD @ 2026-10-02 00:00
@@ -3,9 +3,9 @@
 _epsonscan2_non_free_plugin_version='1.0.0.6'
 
 pkgname=epsonscan2
-pkgver=6.7.91.1
+pkgver=6.7.92.0
 _pkgver="$pkgver-1"
-pkgrel=3
+pkgrel=1
 arch=('armv7h' 'x86_64')
 pkgdesc="Epson scanner management utility"
 url="https://download-center.epson.com/"
@@ -14,29 +14,34 @@
 makedepends=('bbe' 'boost' 'cmake' 'qt5-singlecoreapplication' 'rapidjson')
 conflicts=('epsonscan2-non-free-plugin')
 options=('!buildflags')
-source=('https://download-center.epson.com/f/module/b35a1723-196e-44d9-b272-6cfd3e0e6349/epsonscan2-6.7.91.1-1.src.tar.gz'
+source=('https://download-center.epson.com/f/module/793c84de-6ffb-4ca6-9383-0390b06eb6bf/epsonscan2-6.7.92.0-1.src.tar.gz'
         '0002-Fix-crash.patch'
         '0003-Use-XDG-open-to-open-the-directory.patch'
         '0005-Fix-folder-creation-crash.patch'
         '0006-Fix-crash-no-serial-number.patch'
         '0007-Detect-scanners-that-need-firmware.patch')
-source_armv7h=('https://download-center.epson.com/f/module/da0de85f-55b8-449a-b761-0a9e2553da8a/epsonscan2-bundle-6.7.90.0.armv7l.deb.tar.gz')
-source_x86_64=('https://download-center.epson.com/f/module/ee3a3a45-95aa-4c80-b14d-ad4cff5f7428/epsonscan2-bundle-6.7.90.0.x86_64.deb.tar.gz')
-b2sums=('f13e3e80b57d98d534598827b1bb53c720dafbf0b667a2e1917da1c9b00cf382b1235a4d9f3af0bc764f4943a42f75a4a9705f525b87d8d2b50bcefbb7199d58'
+source_armv7h=('https://download-center.epson.com/f/module/f31a93a4-d21c-4420-8f29-b9c7ccc4bd12/epsonscan2-bundle-6.7.92.0.armv7l.deb.tar.gz')
+source_x86_64=('https://download-center.epson.com/f/module/967b0efe-4805-4723-bb6a-6ea0f68c5e2a/epsonscan2-bundle-6.7.92.0.x86_64.deb.tar.gz')
+b2sums=('65857d7cdb00a804619701c8b20e7e12d200d25159d721c6ccb421c9440e7dc76369801caba1c1b2bc46d4b4c3d6278bf94571c1b3dac562252a0f9994e871d6'
         'c763f16b2fac22b7ac0093228142a516222dc044533b7b320087f87b0fcad1f614ea93210f544f093f3e07c89220ab097901628a4d5dc57213bae505c4bebd58'
         'e398e821704599be0b6ba9192c32411f92650f2e455b088718ba4b643562c21bc02044df30affe2b7ea99069cd0c1c59902e586e9de7e1bb9b3e0ae013c9e30d'
         '5e2af573e616a6afaeb4b9035e54f5a0e05684f194a5fac52eb9ced619fdc156a62ab22bcf62af14a058f74d80a6606abf5e056ea720109c013624802d4b62e5'
         '282a18ad086446f290d795141d63235e67416cea894945d2c65dac7ffa36b3288ef920ef627df349f06e5f482b16e8fa6dbd0064db4b701437a01b913bd8a3fb'
         '5a3416356913438cfe901195198b0c00167d69f726ef2913e2dc209151d4c1b736c2a608e8b556bc201acc320548a56263f2782fdb79249c46e490ef756c2700')
-b2sums_armv7h=('aeeffb7194b9d9ce2326ff351722c07d06530d106abf3cc4e00cb17c39508882d10b14524e996240dbb923fce459cd881b386cc67789328fe96c928068e71277')
-b2sums_x86_64=('39e130cfb9c1207a4374136e5aa07fc409138c3a0e3db06bdb0363cfb4b0221b2975e7fdcdd80a29f4cebb03d1ddf4da96f6218a07e00b7bbf9838b8686cece1')
+b2sums_armv7h=('f66304ef47c455b10c611b3023f745e039902f931822db8f0f26363bc224ce9f10b3965d06995c382d0e73976fe8b0581b99a7c1b0cf0695c53f04a942320408')
+b2sums_x86_64=('dc422c9f2d1ff4f00e9ebe6c264b2ee03daad9701c7c971a1b6a2f887dd999c64bb6894c6f7ee7afb1fff315ce871dcd0d580be99c651a14ac53b953f43da7dc')
 
 DLAGENTS=("https::/usr/bin/curl -A 'Mozilla' -fLC - --retry 3 --retry-delay 3 -o %o %u")
 
 prepare() {
+  # sane and udev: copy files to the build directory
   sed -i 's|/lib/udev|${CMAKE_INSTALL_PREFIX}/lib/udev|' \
          "$srcdir/$pkgname-$_pkgver/CMakeLists.txt"
 
+  sed -i '/LIBDIR}\/sane/ s|${EPSON|\\$ENV{DESTDIR}\\${EPSON|' \
+         "$srcdir/$pkgname-$_pkgver/CMakeLists.txt"
+
+  # Disable zlib build; use the Arch Linux library
   sed -i '1 i #include "zlib.h"' \
          "$srcdir/$pkgname-$_pkgver/src/CommonUtility/DbgLog.cpp"
  
@@ -154,11 +159,6 @@
   install -Dm644 "$srcdir/$pkgname-$_pkgver/desktop/rpm/i686/$pkgname.desktop" \
                  "$pkgdir/usr/share/applications/$pkgname.desktop"
 
-  install -d $pkgdir/usr/lib/sane ; cd $pkgdir/usr/lib/sane
-  ln -s ../$pkgname/libsane-epsonscan2.so libsane-epsonscan2.so
-  ln -s ../$pkgname/libsane-epsonscan2.so libsane-epsonscan2.so.1
-  ln -s ../$pkgname/libsane-epsonscan2.so libsane-epsonscan2.so.1.0.0
-
   # Package plugin files
   install -d "$pkgdir/usr/lib/"
   cd "$srcdir/usr"

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2
2026-09-27 00:07:07	Low	2
2026-09-26 00:12:15	Low	2
2026-09-25 00:03:36	Low	2
2026-09-24 00:24:14	Low	2
2026-09-23 00:28:13	Low	2
2026-09-22 00:15:14	Low	2
2026-09-21 00:26:32	Low	2
2026-09-20 00:25:31	Low	2
2026-09-19 00:25:36	Low	2
2026-09-18 00:17:11	Low	2
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 05:16:15	Medium	1
2026-09-14 00:27:57	Low	2