gcap

MEDIUM

maintainer dbermond 0 votes scanned 2026-10-05 23:40:58.404909

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:18 source=("https://downloadirpf.receita.fazenda.gov.br/irpf/${pkgver%%.*}/gcap/GCAP${pkgver%%.*}v${pkgver#*.}.zip"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Daniel Bermond <dbermond@archlinux.org>
    
      2
    
      3pkgname=gcap
    
      4pkgver=2026.1.2
    
      5pkgrel=1
    
      6pkgdesc='Brazilian physical person income tax (IRPF) auxiliary program for calculation of capital gains'
    
      7arch=('any')
    
      8url='https://www.gov.br/receitafederal/pt-br/centrais-de-conteudo/download/pgd/gcap'
    
      9license=('LicenseRef-Custom')
    
      10depends=(
    
      11    'hicolor-icon-theme'
    
      12    'java-runtime'
    
      13    'sh')
    
      14optdepends=(
    
      15    'cups: for print support')
    
      16makedepends=(
    
      17    'icoutils')
    
      18source=("https://downloadirpf.receita.fazenda.gov.br/irpf/${pkgver%%.*}/gcap/GCAP${pkgver%%.*}v${pkgver#*.}.zip"
    
      19        'gcap.desktop'
    
      20        'gcap.sh'
    
      21        'LICENSE')
    
      22sha256sums=('5adac86250d26720244452fc00f62d6e660a4552b0f2357a769fd646d8e5dbfc'
    
      23            'b99928d51f23e0ca4544fcf3adde1d5650eb7dec7c4e3021b2164ba958b15e07'
    
      24            'c7798ec0aa6010e722840d1b2989dc7fe66cdcf91c40fe2749797222063f51ff'
    
      25            'a406e102e2c10c202bd7a0ba775b004c0f04440544db73ce6923172a62aacd67')
    
      26
    
      27prepare() {
    
      28    icotool -x -o "GCAP${pkgver%%.*}" "GCAP${pkgver%%.*}/RFB_GCAP.ico"
    
      29}
    
      30
    
      31package() {
    
      32    install -D -m755 gcap.sh "${pkgdir}/usr/bin/${pkgname}"
    
      33    install -D -m644 gcap.desktop "${pkgdir}/usr/share/applications/${pkgname}.desktop"
    
      34    install -D -m644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}"
    
      35    install -D -m644 "GCAP${pkgver%%.*}/GCAP.jar" "${pkgdir}/usr/share/java/${pkgname}/gcap.jar"
    
      36    install -D -m644 "GCAP${pkgver%%.*}"/{pgd-updater.jar,GCAP.acb} -t "${pkgdir}/usr/share/java/${pkgname}"
    
      37    install -D -m644 "GCAP${pkgver%%.*}/Leia_me.htm" -t "${pkgdir}/usr/share/doc/${pkgname}"
    
      38    cp -dr --no-preserve='ownership' "GCAP${pkgver%%.*}/help" "${pkgdir}/usr/share/doc/${pkgname}"
    
      39    cp -dr --no-preserve='ownership' "GCAP${pkgver%%.*}/lib" "${pkgdir}/usr/share/java/${pkgname}"
    
      40    ln -sr "${pkgdir}/usr/share/doc/${pkgname}/help" "${pkgdir}/usr/share/java/${pkgname}/help"
    
      41    
    
      42    local _file
    
      43    local _res
    
      44    while read -r -d '' _file
    
      45    do
    
      46        _res="$(sed 's/\.png$//;s/^.*_//;s/x.*$//' <<< "$_file")"
    
      47        install -D -m644 "$_file" "${pkgdir}/usr/share/icons/hicolor/${_res}x${_res}/apps/${pkgname}.png"
    
      48    done < <(find "GCAP${pkgver%%.*}" -maxdepth 1 -type f -name 'RFB_GCAP_*_*x*x*.png' -print0)
    
      49}
    
      50

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-05 23:40
@@ -1,7 +1,7 @@
 # Maintainer: Daniel Bermond <dbermond@archlinux.org>
 
 pkgname=gcap
-pkgver=2026.1.1
+pkgver=2026.1.2
 pkgrel=1
 pkgdesc='Brazilian physical person income tax (IRPF) auxiliary program for calculation of capital gains'
 arch=('any')
@@ -19,7 +19,7 @@
         'gcap.desktop'
         'gcap.sh'
         'LICENSE')
-sha256sums=('4beee3bbdf266659fa8f34928f76582f58b5f3c0b429a9af55d4d74120ee74fd'
+sha256sums=('5adac86250d26720244452fc00f62d6e660a4552b0f2357a769fd646d8e5dbfc'
             'b99928d51f23e0ca4544fcf3adde1d5650eb7dec7c4e3021b2164ba958b15e07'
             'c7798ec0aa6010e722840d1b2989dc7fe66cdcf91c40fe2749797222063f51ff'
             'a406e102e2c10c202bd7a0ba775b004c0f04440544db73ce6923172a62aacd67')

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-05 23:40:58	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 18:55:24	Clean	2
2026-06-18 16:11:54	Medium	1