faenza-cupertino-icon-theme

maintainer Kwpolska · 103 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads icon theme data files from a personal domain, but these are non-executable resources; the worst case of a swapped source is limited to cosmetic or data tampering, not code execution.

Triggered rules

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-07-25) reviewed this and agrees it is LOW (confidence 95%): The package downloads icon theme data files from a personal domain, but these are non-executable resources; the worst case of a swapped source is limited to cosmetic or data tampering, not code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:20 source=("https://chriswarrick.com/pub/faenza-cupertino-icon-theme/129008-Faenza-Cupertino.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Chris Warrick <aur@chriswarrick.com>
    
      2# Submitter/Contributor: KosmosElohim <bdsjunior@live.com>
    
      3
    
      4pkgname=faenza-cupertino-icon-theme
    
      5epoch=1
    
      6pkgver=9
    
      7pkgrel=7
    
      8pkgdesc="Icon theme designed for Equinox GTK theme, recolored"
    
      9url="http://gnome-look.org/content/show.php/Faenza-Cupertino?content=129008"
    
      10# and https://www.gnome-look.org/content/show.php/Faenza-Cupertino-Dark?content=133677
    
      11license=('GPL3')
    
      12arch=('any')
    
      13makedepends=()
    
      14depends=('faenza-icon-theme')
    
      15optdepends=()
    
      16# Rehosting due to issues with gnome-look/opendesktop.org not liking scripting.
    
      17# Original sources:
    
      18# https://www.gnome-look.org/p/1012542/
    
      19# https://www.gnome-look.org/p/1012259/
    
      20source=("https://chriswarrick.com/pub/faenza-cupertino-icon-theme/129008-Faenza-Cupertino.tar.gz"
    
      21        "https://chriswarrick.com/pub/faenza-cupertino-icon-theme/133677-Faenza-Cupertino-Dark.tar.gz")
    
      22sha1sums=('a691e8489a857f7e3891d7f02cbcda14f7c81a45'
    
      23          'ff1854636fcee20ab10ada5fc60a87dfb6e7e01f')
    
      24
    
      25package() {
    
      26    mkdir -p "${pkgdir}/usr/share/icons"
    
      27    cp -raf "${srcdir}/"Faenza-Cupertino* "${pkgdir}/usr/share/icons/"
    
      28    chown -R root:root "${pkgdir}/usr"
    
      29}
    
      30

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2