fabric-server
maintainer jSQrD
· 11 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The source URL is from maven.fabricmc.net, which is the official Maven repository for FabricMC; despite being flagged as non-standard, it is a legitimate and expected source for the Fabric installer JAR, posing no supply-chain risk.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URL is from maven.fabricmc.net, which is the official Maven repository for FabricMC; despite being flagged as non-standard, it is a legitimate and expected source for the Fabric installer JAR, posing no supply-chain risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:38
"fabric-installer-${_fabric_ver}.jar::https://maven.fabricmc.net/net/fabricmc/fabric-installer/${_fabric_ver}/fabric-installer-${_fabric_ver}.jar"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: jSQrD <n1irdwd5 at aur dot addy dot io>
2
3
# Previous 'fabric-server' maintainers
4
## Contributor: lgm <lgm dot aur at outlook dot com>
5
## Contributor: Ndoskrnl <lollipop.studio.cn@gmail.com>
6
## Contributor: flying <flyinghat42@gmail.com>
7
8
# Based on the 'forge-server' AUR package by:
9
## Maintainer: Nitroretro <nitroretro@protonmail.com>
10
11
# Based on the `minecraft-server` AUR package by:
12
## Maintainer: Gordian Edenhofer <gordian.edenhofer@gmail.com>
13
## Contributor: Philip Abernethy <chais.z3r0@gmail.com>
14
## Contributor: sowieso <sowieso@dukun.de>
15
16
_minecraft_ver="26.2"
17
_fabric_ver="1.1.1"
18
_fabric_loader_ver="0.19.3"
19
_mng_ver=1.0.4
20
21
pkgname="fabric-server"
22
_fabric_name="fabric"
23
pkgver=${_minecraft_ver}_${_fabric_loader_ver}_${_fabric_ver}
24
pkgrel=1
25
pkgdesc="A Fabric (a modular, lightweight mod loader) enabled Minecraft server"
26
arch=("any")
27
url="https://fabricmc.net"
28
license=("Apache-2.0")
29
depends=("java-runtime-headless>=21" "tmux" "sudo" "bash" "awk" "sed")
30
optdepends=("tar: required in order to create world backups"
31
"netcat: required in order to suspend an idle server")
32
provides=("fabric-server=${pkgver}")
33
backup=("etc/conf.d/${_fabric_name}")
34
install="fabric-server.install"
35
36
source=(
37
"minecraft-server-${_mng_ver}.tar.gz::https://github.com/Edenhofer/minecraft-server/archive/refs/tags/v${_mng_ver}.tar.gz"
38
"fabric-installer-${_fabric_ver}.jar::https://maven.fabricmc.net/net/fabricmc/fabric-installer/${_fabric_ver}/fabric-installer-${_fabric_ver}.jar"
39
)
40
noextract=("fabric-${pkgver}.jar")
41
sha512sums=(
42
'dd4d68ca061c97a1e3cb5c0bb68439f7d8d45b15092344f3c4dbd4f7f39fef433d566670ad440970061007d93055183b570c7bf98f09c111ecdf8ab0f208f556'
43
'f95731a5f7b950f309f5b7d367c377727ceca6484fbde3c513e16b508d840ec4dfeb8471a9122a07a029d62cacd8b5d0726c60e27edc0d9a93ad928e34f5e24e'
44
)
45
46
_game="fabric"
47
_server_root="/srv/${_fabric_name}"
48
49
prepare() {
50
java -Duser.home="${srcdir}" -jar "fabric-installer-${_fabric_ver}.jar" server -mcversion "${_minecraft_ver}" -downloadMinecraft -loader "${_fabric_loader_ver}"
51
}
52
53
build() {
54
make -C "${srcdir}/minecraft-server-${_mng_ver}" clean
55
make -C "${srcdir}/minecraft-server-${_mng_ver}" \
56
GAME=${_game} \
57
INAME=${_game}d \
58
SERVER_ROOT="${_server_root}" \
59
BACKUP_PATHS="world banned-ips.json banned-players.json config ops.json server.properties usercache.json user_jvm_args.txt whitelist.json" \
60
GAME_USER=${_game} \
61
MAIN_EXECUTABLE=fabric-server-launch.jar \
62
SERVER_START_CMD="java -Dlog4j2.formatMsgNoLookups=true -Xms512M -Xmx1024M -jar './\$\${MAIN_EXECUTABLE}' nogui" \
63
all
64
}
65
66
package() {
67
make -C "${srcdir}/minecraft-server-${_mng_ver}" \
68
DESTDIR="${pkgdir}" \
69
GAME=${_game} \
70
INAME=${_game}d \
71
install
72
73
# Install Fabric & Minecraft server jars
74
install -Dm644 "fabric-server-launch.jar" "${pkgdir}${_server_root}/fabric-server-launch.jar"
75
install -Dm644 "server.jar" "${pkgdir}${_server_root}/server.jar"
76
77
# Install libraries
78
install -dm755 "libraries" "${pkgdir}${_server_root}/libraries"
79
cp -r libraries/* "${pkgdir}${_server_root}/libraries/"
80
find "${pkgdir}${_server_root}/libraries" -type d -exec chmod 755 {} +
81
find "${pkgdir}${_server_root}/libraries" -type f -exec chmod 644 {} +
82
83
# Link log files
84
install -dm755 "${pkgdir}/var/log"
85
install -dm2755 "${pkgdir}${_server_root}/logs"
86
ln -s "/srv/${_fabric_name}/logs" "${pkgdir}/var/log/${_fabric_name}"
87
88
# Give the group write permissions and set user or group ID on execution
89
chmod g+ws "${pkgdir}${_server_root}"
90
}
91
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |