eusoft-frhelper-bin

maintainer zxp19821005 · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt .deb from the official vendor's domain (eudic.net), which hosts the software authoritatively;虽非标准镜像源但属项目官方发布渠道，且安装内容为声明的法语助手应用，无代码执行或隐蔽行为，风险低。

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt .deb from the official vendor's domain (eudic.net), which hosts the software authoritatively;虽非标准镜像源但属项目官方发布渠道，且安装内容为声明的法语助手应用，无代码执行或隐蔽行为，风险低。

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:64 "${pkgname%-bin}-${pkgver}.deb::https://www.eudic.net/download/${_pkgname}.deb"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
    
      2_pkgname=frhelper
    
      3pkgname="eusoft-${_pkgname}-bin"
    
      4pkgver=11.6.0
    
      5pkgrel=4
    
      6pkgdesc="Authoritative French dictionary software, an essential tool for French learners.(Prebuilt version)法语助手,权威的法语词典软件,法语学习者必备的工具."
    
      7arch=('x86_64')
    
      8url="https://www.eudic.net/v4/fr/app/frhelper"
    
      9license=('LicenseRef-custom')
    
      10conflicts=(
    
  "${pkgname%-bin}"
    
  "${_pkgname}"
    
      13)
    
      14options=('!strip')
    
      15depends=(
    
  'libvorbis'
    
  'nss'
    
  'speex'
    
  'libjpeg-turbo'
    
  'gdk-pixbuf2'
    
  'v4l-utils'
    
  'harfbuzz'
    
  'lame'
    
  'gst-plugins-base-libs'
    
  'libogg'
    
  'libpng'
    
  'gmp'
    
  'libthai'
    
  'mesa'
    
  'gst-plugins-bad-libs'
    
  'libgudev'
    
  'gstreamer'
    
  'libiec61883'
    
  'libavc1394'
    
  'libpulse'
    
  'util-linux-libs'
    
  'libtheora'
    
  'bzip2'
    
  'pipewire-jack'
    
  'libgpg-error'
    
  'libxfixes'
    
  'mpg123'
    
  'cdparanoia'
    
  'orc'
    
  'libxext'
    
  'graphene'
    
  'libxv'
    
  'libp11-kit'
    
  'alsa-lib'
    
  'libraw1394'
    
  'libglvnd'
    
  'gtk3'
    
  'opus'
    
  'openssl-1.0'
    
  'libdv'
    
  'aalib'
    
  'libshout'
    
  'twolame'
    
  'libsoup'
    
  'wavpack'
    
  'libcaca'
    
      62)
    
      63source=(
    
  "${pkgname%-bin}-${pkgver}.deb::https://www.eudic.net/download/${_pkgname}.deb"
    
  "LICENSE.html"
    
  "${pkgname%-bin}.sh"
    
      67)
    
      68sha256sums=('ce5fcba8f0a2ffd0bff6b62e63f658883e795577caca130698de799a8647530c'
    
          'c12c477048571d64eb8651ec470bfc1b3b738b591cfce0322eeadbe921a86917'
    
          '07aefce5b6c9dce4fec424cfb3d1c2456680d6936e62651484253a031c921db9')
    
      71prepare() {
    
  sed -i -e "
    
      s/@appname@/${pkgname%-bin}/g
    
      s/@runname@/${_pkgname}/g
    
  " "${srcdir}/${pkgname%-bin}.sh"
    
  bsdtar -xf "${srcdir}/data."*
    
  sed -i -e "
    
      s/\/usr\/share\/${pkgname%-bin}\/AppRun/${pkgname%-bin}/g
    
      s/com.eusoft.${_pkgname}/${pkgname%-bin}/g
    
  " "${srcdir}/usr/share/applications/${pkgname%-bin}.desktop"
    
      81}
    
      82package() {
    
  install -Dm755 "${srcdir}/${pkgname%-bin}.sh" "${pkgdir}/usr/bin/${pkgname%-bin}"
    
  install -Dm755 -d "${pkgdir}/usr/lib"
    
  cp -Pr --no-preserve=ownership "${srcdir}/usr/share/${pkgname%-bin}" "${pkgdir}/usr/lib"
    
  install -Dm644 "${srcdir}/usr/share/applications/${pkgname%-bin}.desktop" -t "${pkgdir}/usr/share/applications"
    
  install -Dm644 "${srcdir}/usr/share/pixmaps/com.eusoft.${_pkgname}.png" "${pkgdir}/usr/share/pixmaps/${pkgname%-bin}.png"
    
  install -Dm644 "${srcdir}/LICENSE.html" -t "${pkgdir}/usr/share/licenses/${pkgname}"
    
      89}

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2