eusoft-eudic

LOW

maintainer Chapman 0 votes scanned 2026-10-08 18:12:15.641396

View on AUR

Why flagged

Downloads a prebuilt .deb from static.eudic.net, which is the official Eudic/Eusoft vendor domain, with a pinned sha256 checksum; this is a legitimate repackage of proprietary software from its own official distribution host, not an unrelated swappable third-party source.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 75%): Downloads a prebuilt .deb from static.eudic.net, which is the official Eudic/Eusoft vendor domain, with a pinned sha256 checksum; this is a legitimate repackage of proprietary software from its own official distribution host, not an unrelated swappable third-party source.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:36 "${pkgname}-${pkgver}.deb::https://static.eudic.net/pkg/eudic.deb?v=${pkgver}"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Chapman <touch65536@gmail.com>
    
      2
    
      3pkgname=eusoft-eudic
    
      4pkgver=26.9.1
    
      5pkgrel=1
    
      6pkgdesc="Eudic (欧路词典) - English dictionary software for Linux (Community Repackage)"
    
      7arch=('x86_64')
    
      8url="https://www.eudic.net/v4/en/app/eudic"
    
      9license=('LicenseRef-Proprietary')
    
      10provides=('eudic' 'eusoft-eudic')
    
      11conflicts=('eudic')
    
      12depends=(
    
      13    'at-spi2-core'
    
      14    'gtk3'
    
      15    'hicolor-icon-theme'
    
      16    'libnotify'
    
      17    'libsecret'
    
      18    'libxkbcommon-x11'
    
      19    'libxss'
    
      20    'libxtst'
    
      21    'nss'
    
      22    'util-linux-libs'
    
      23    'xdg-utils'
    
      24)
    
      25optdepends=(
    
      26    'noto-fonts-cjk: Chinese font support'
    
      27)
    
      28options=(!strip !debug)
    
      29
    
      30source=(
    
      31    "eudic.sh"
    
      32    "eusoft-eudic.desktop"
    
      33    "LICENSE"
    
      34)
    
      35source_x86_64=(
    
      36    "${pkgname}-${pkgver}.deb::https://static.eudic.net/pkg/eudic.deb?v=${pkgver}"
    
      37)
    
      38noextract=("${pkgname}-${pkgver}.deb")
    
      39
    
      40sha256sums=(
    
      41    '3e25eab799ce856d306afc89427cb3aed2a97b5671f90847d9dccb4c408e4bf4'
    
      42    'af51836b59312a8e52c41516ec2931303e76baf2c8f67a4e088b4f1d69c14fb3'
    
      43    '377ddd4aecf677aa2b0fdd264f6285118f3e01f6463eb957db972d0b8404cf69'
    
      44)
    
      45sha256sums_x86_64=(
    
      46    'dd1faab01940cbf8a019a6d813e2ef1f0b50df65ebacdc96939a4d9f0b4d2892'
    
      47)
    
      48
    
      49prepare() {
    
      50    bsdtar -xf "${pkgname}-${pkgver}.deb" data.tar.zst
    
      51}
    
      52
    
      53package() {
    
      54    # Extract data hierarchy from official deb
    
      55    bsdtar -xf data.tar.zst -C "${pkgdir}"
    
      56
    
      57    # Remove upstream obsolete Ubuntu system libraries dumped in root dir
    
      58    rm -f "${pkgdir}/usr/share/${pkgname}"/lib*.so* 2>/dev/null || true
    
      59
    
      60    # Remove bundled outdated libxkbcommon-x11 to avoid segfault with Arch libxkbcommon
    
      61    rm -f "${pkgdir}/usr/share/${pkgname}/lib/libxkbcommon-x11.so.0" 2>/dev/null || true
    
      62
    
      63    # Remove upstream AppRun (replaced by our launcher)
    
      64    rm -f "${pkgdir}/usr/share/${pkgname}/AppRun" 2>/dev/null || true
    
      65
    
      66    # Clean up empty apprun-hooks from deb if present
    
      67    rm -rf "${pkgdir}/apprun-hooks" 2>/dev/null || true
    
      68
    
      69    # Install clean launcher script
    
      70    install -Dm755 "${srcdir}/eudic.sh" "${pkgdir}/usr/bin/eudic"
    
      71    ln -sf eudic "${pkgdir}/usr/bin/${pkgname}"
    
      72
    
      73    # Install desktop entry
    
      74    install -Dm644 "${srcdir}/eusoft-eudic.desktop" "${pkgdir}/usr/share/applications/eusoft-eudic.desktop"
    
      75    ln -sf eusoft-eudic.desktop "${pkgdir}/usr/share/applications/eudic.desktop"
    
      76
    
      77    # Install hicolor icons
    
      78    install -Dm644 "${pkgdir}/usr/share/pixmaps/com.eusoft.eudic.png" \
    
      79        "${pkgdir}/usr/share/icons/hicolor/256x256/apps/com.eusoft.eudic.png"
    
      80    ln -sf com.eusoft.eudic.png "${pkgdir}/usr/share/icons/hicolor/256x256/apps/eudic.png"
    
      81    ln -sf com.eusoft.eudic.png "${pkgdir}/usr/share/pixmaps/eudic.png"
    
      82
    
      83    # Install license
    
      84    install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      85
    
      86    # Normalize directory and file permissions
    
      87    find "${pkgdir}" -type d -exec chmod 755 {} +
    
      88    chmod 755 "${pkgdir}/usr/share/${pkgname}/eudic"
    
      89}
    
      90

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-08 18:12:15	Low	3
2026-10-08 18:09:39	Medium	2