fabric-server
LOW
maintainer jSQrD
11 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The source downloads a Fabric installer JAR from maven.fabricmc.net, which is the project's official Maven repository, and a tarball from GitHub; both are legitimate project sources, so the non-standard host flag is a false positive.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source downloads a Fabric installer JAR from maven.fabricmc.net, which is the project's official Maven repository, and a tarball from GitHub; both are legitimate project sources, so the non-standard host flag is a false positive.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:38
"fabric-installer-${_fabric_ver}.jar::https://maven.fabricmc.net/net/fabricmc/fabric-installer/${_fabric_ver}/fabric-installer-${_fabric_ver}.jar"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: jSQrD <n1irdwd5 at aur dot addy dot io>
2
3
# Previous 'fabric-server' maintainers
4
## Contributor: lgm <lgm dot aur at outlook dot com>
5
## Contributor: Ndoskrnl <lollipop.studio.cn@gmail.com>
6
## Contributor: flying <flyinghat42@gmail.com>
7
8
# Based on the 'forge-server' AUR package by:
9
## Maintainer: Nitroretro <nitroretro@protonmail.com>
10
11
# Based on the `minecraft-server` AUR package by:
12
## Maintainer: Gordian Edenhofer <gordian.edenhofer@gmail.com>
13
## Contributor: Philip Abernethy <chais.z3r0@gmail.com>
14
## Contributor: sowieso <sowieso@dukun.de>
15
16
_minecraft_ver="26.3"
17
_fabric_ver="1.1.2"
18
_fabric_loader_ver="0.19.5"
19
_mng_ver=1.0.4
20
21
pkgname="fabric-server"
22
_fabric_name="fabric"
23
pkgver=${_minecraft_ver}_${_fabric_loader_ver}_${_fabric_ver}
24
pkgrel=1
25
pkgdesc="A Fabric (a modular, lightweight mod loader) enabled Minecraft server"
26
arch=("any")
27
url="https://fabricmc.net"
28
license=("Apache-2.0")
29
depends=("java-runtime-headless>=21" "tmux" "sudo" "bash" "awk" "sed")
30
optdepends=("tar: required in order to create world backups"
31
"netcat: required in order to suspend an idle server")
32
provides=("fabric-server=${pkgver}")
33
backup=("etc/conf.d/${_fabric_name}")
34
install="fabric-server.install"
35
36
source=(
37
"minecraft-server-${_mng_ver}.tar.gz::https://github.com/Edenhofer/minecraft-server/archive/refs/tags/v${_mng_ver}.tar.gz"
38
"fabric-installer-${_fabric_ver}.jar::https://maven.fabricmc.net/net/fabricmc/fabric-installer/${_fabric_ver}/fabric-installer-${_fabric_ver}.jar"
39
)
40
noextract=("fabric-${pkgver}.jar")
41
sha512sums=(
42
'dd4d68ca061c97a1e3cb5c0bb68439f7d8d45b15092344f3c4dbd4f7f39fef433d566670ad440970061007d93055183b570c7bf98f09c111ecdf8ab0f208f556'
43
'3cbe7b69498c44d814fc95e71cd9ce9c12c45a9e1dcf01085cb3e9aaf6fe63134b701065167be1fa6e4c2df19dfa5400bc5b6b1b7fb5e99e334d24dcdca55c20'
44
)
45
46
_game="fabric"
47
_server_root="/srv/${_fabric_name}"
48
49
prepare() {
50
java -Duser.home="${srcdir}" -jar "fabric-installer-${_fabric_ver}.jar" server -mcversion "${_minecraft_ver}" -downloadMinecraft -loader "${_fabric_loader_ver}"
51
}
52
53
build() {
54
make -C "${srcdir}/minecraft-server-${_mng_ver}" clean
55
make -C "${srcdir}/minecraft-server-${_mng_ver}" \
56
GAME=${_game} \
57
INAME=${_game}d \
58
SERVER_ROOT="${_server_root}" \
59
BACKUP_PATHS="world banned-ips.json banned-players.json config ops.json server.properties usercache.json user_jvm_args.txt whitelist.json" \
60
GAME_USER=${_game} \
61
MAIN_EXECUTABLE=fabric-server-launch.jar \
62
SERVER_START_CMD="java -Dlog4j2.formatMsgNoLookups=true -Xms512M -Xmx1024M -jar './\$\${MAIN_EXECUTABLE}' nogui" \
63
all
64
}
65
66
package() {
67
make -C "${srcdir}/minecraft-server-${_mng_ver}" \
68
DESTDIR="${pkgdir}" \
69
GAME=${_game} \
70
INAME=${_game}d \
71
install
72
73
# Install Fabric & Minecraft server jars
74
install -Dm644 "fabric-server-launch.jar" "${pkgdir}${_server_root}/fabric-server-launch.jar"
75
install -Dm644 "server.jar" "${pkgdir}${_server_root}/server.jar"
76
77
# Install libraries
78
install -dm755 "libraries" "${pkgdir}${_server_root}/libraries"
79
cp -r libraries/* "${pkgdir}${_server_root}/libraries/"
80
find "${pkgdir}${_server_root}/libraries" -type d -exec chmod 755 {} +
81
find "${pkgdir}${_server_root}/libraries" -type f -exec chmod 644 {} +
82
83
# Link log files
84
install -dm755 "${pkgdir}/var/log"
85
install -dm2755 "${pkgdir}${_server_root}/logs"
86
ln -s "/srv/${_fabric_name}/logs" "${pkgdir}/var/log/${_fabric_name}"
87
88
# Give the group write permissions and set user or group ID on execution
89
chmod g+ws "${pkgdir}${_server_root}"
90
}
91
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |