file-roller-linuxmint
LOW
maintainer Santi-Burgos
4 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The source is a tarball from Linux Mint's official package pool, which is a plausible and project-related host for a Linux Mint variant; building from this source is normal packaging practice and not inherently dangerous.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from Linux Mint's official package pool, which is a plausible and project-related host for a Linux Mint variant; building from this source is normal packaging practice and not inherently dangerous.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:54
source=("http://packages.linuxmint.com/pool/upstream/f/${_pkgname}/${_pkgname}_${pkgver}+mint1+${_pkgver}.tar.xz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Santiago Burgos <santiago.burgos1089@gmail.com>
2
# Contributor: Jan Alexander Steffens (heftig) <heftig@archlinux.org>
3
# Contributor: Fabian Bornschein <fabiscafe@archlinux.org>
4
# Contributor: Jan de Groot <jgc@archlinux.org>
5
6
pkgname=file-roller-linuxmint
7
_pkgname=file-roller
8
pkgver=43.0
9
_pkgver=wilma
10
pkgrel=3
11
pkgdesc="Create and modify archives. Linux Mint version"
12
url="https://wiki.gnome.org/Apps/FileRoller"
13
arch=(x86_64)
14
license=(GPL-2.0-or-later)
15
depends=(
16
'dconf'
17
'file'
18
'gcc-libs'
19
'glib2'
20
'glibc'
21
'gtk3'
22
'hicolor-icon-theme'
23
'json-glib'
24
'libarchive'
25
'libhandy'
26
'libportal-gtk3'
27
'pango'
28
'unzip'
29
'zip'
30
)
31
makedepends=(
32
'appstream-glib'
33
'glib2-devel'
34
'libnautilus-extension'
35
'meson'
36
'yelp-tools'
37
)
38
provides=(
39
${_pkgname}
40
file-roller-gtk3
41
)
42
conflicts=(
43
${_pkgname}
44
file-roller-gtk3
45
)
46
optdepends=(
47
'lrzip: lrzip archive support'
48
'7zip: 7z, arj, exe and encrypted zip files support'
49
'squashfs-tools: squashfs image support'
50
'unace: ACE archive support'
51
'unrar: better RAR archive support'
52
)
53
#source=("http://packages.linuxmint.com/pool/upstream/f/${_pkgname}/${_pkgname}_${pkgver}-${pkgrel}+${_pkgver}.tar.xz")
54
source=("http://packages.linuxmint.com/pool/upstream/f/${_pkgname}/${_pkgname}_${pkgver}+mint1+${_pkgver}.tar.xz")
55
sha256sums=('32b3a7a803ac53889c25c006622229685e8bf421bde70712f9f221967df44978')
56
57
prepare() {
58
cd $_pkgname
59
}
60
61
build() {
62
arch-meson $_pkgname build
63
meson compile -C build
64
}
65
66
check() {
67
meson test -C build --print-errorlogs
68
}
69
70
package() {
71
meson install -C build --destdir "$pkgdir"
72
}
73
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |