eusoft-frhelper-bin

LOW
maintainer zxp19821005 0 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The package downloads a prebuilt .deb from the official vendor's domain (eudic.net), which hosts the software authoritatively;虽非标准镜像源但属项目官方发布渠道,且安装内容为声明的法语助手应用,无代码执行或隐蔽行为,风险低。

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt .deb from the official vendor's domain (eudic.net), which hosts the software authoritatively;虽非标准镜像源但属项目官方发布渠道,且安装内容为声明的法语助手应用,无代码执行或隐蔽行为,风险低。

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:64 "${pkgname%-bin}-${pkgver}.deb::https://www.eudic.net/download/${_pkgname}.deb"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
2_pkgname=frhelper
3pkgname="eusoft-${_pkgname}-bin"
4pkgver=11.6.0
5pkgrel=4
6pkgdesc="Authoritative French dictionary software, an essential tool for French learners.(Prebuilt version)法语助手,权威的法语词典软件,法语学习者必备的工具."
7arch=('x86_64')
8url="https://www.eudic.net/v4/fr/app/frhelper"
9license=('LicenseRef-custom')
10conflicts=(
11 "${pkgname%-bin}"
12 "${_pkgname}"
13)
14options=('!strip')
15depends=(
16 'libvorbis'
17 'nss'
18 'speex'
19 'libjpeg-turbo'
20 'gdk-pixbuf2'
21 'v4l-utils'
22 'harfbuzz'
23 'lame'
24 'gst-plugins-base-libs'
25 'libogg'
26 'libpng'
27 'gmp'
28 'libthai'
29 'mesa'
30 'gst-plugins-bad-libs'
31 'libgudev'
32 'gstreamer'
33 'libiec61883'
34 'libavc1394'
35 'libpulse'
36 'util-linux-libs'
37 'libtheora'
38 'bzip2'
39 'pipewire-jack'
40 'libgpg-error'
41 'libxfixes'
42 'mpg123'
43 'cdparanoia'
44 'orc'
45 'libxext'
46 'graphene'
47 'libxv'
48 'libp11-kit'
49 'alsa-lib'
50 'libraw1394'
51 'libglvnd'
52 'gtk3'
53 'opus'
54 'openssl-1.0'
55 'libdv'
56 'aalib'
57 'libshout'
58 'twolame'
59 'libsoup'
60 'wavpack'
61 'libcaca'
62)
63source=(
64 "${pkgname%-bin}-${pkgver}.deb::https://www.eudic.net/download/${_pkgname}.deb"
65 "LICENSE.html"
66 "${pkgname%-bin}.sh"
67)
68sha256sums=('ce5fcba8f0a2ffd0bff6b62e63f658883e795577caca130698de799a8647530c'
69 'c12c477048571d64eb8651ec470bfc1b3b738b591cfce0322eeadbe921a86917'
70 '07aefce5b6c9dce4fec424cfb3d1c2456680d6936e62651484253a031c921db9')
71prepare() {
72 sed -i -e "
73 s/@appname@/${pkgname%-bin}/g
74 s/@runname@/${_pkgname}/g
75 " "${srcdir}/${pkgname%-bin}.sh"
76 bsdtar -xf "${srcdir}/data."*
77 sed -i -e "
78 s/\/usr\/share\/${pkgname%-bin}\/AppRun/${pkgname%-bin}/g
79 s/com.eusoft.${_pkgname}/${pkgname%-bin}/g
80 " "${srcdir}/usr/share/applications/${pkgname%-bin}.desktop"
81}
82package() {
83 install -Dm755 "${srcdir}/${pkgname%-bin}.sh" "${pkgdir}/usr/bin/${pkgname%-bin}"
84 install -Dm755 -d "${pkgdir}/usr/lib"
85 cp -Pr --no-preserve=ownership "${srcdir}/usr/share/${pkgname%-bin}" "${pkgdir}/usr/lib"
86 install -Dm644 "${srcdir}/usr/share/applications/${pkgname%-bin}.desktop" -t "${pkgdir}/usr/share/applications"
87 install -Dm644 "${srcdir}/usr/share/pixmaps/com.eusoft.${_pkgname}.png" "${pkgdir}/usr/share/pixmaps/${pkgname%-bin}.png"
88 install -Dm644 "${srcdir}/LICENSE.html" -t "${pkgdir}/usr/share/licenses/${pkgname}"
89}

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion