idos-timetable-data-chaps-trains-cz-2016-latest

LOW
maintainer dreieck 0 votes scanned 2026-11-02 00:26:00.633185
View on AUR
Why flagged

The package downloads archived timetable data from the Wayback Machine, which is non-standard but not malicious; the data is not executable and the source is a legitimate historical archive of the official site.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads archived timetable data from the Wayback Machine, which is non-standard but not malicious; the data is not executable and the source is a legitimate historical archive of the official site.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:55 "${_target}::https://web.archive.org/web/20160806152205/http://ttakt.chaps.cz/TTAktual/Win/${_zipfile}"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: dreieck
2
3# PKGBUILD last time manually edited: At least on 2026-10-21.
4
5_pkgname=idos-timetable-data-chaps-trains-cz-2016
6pkgname="${_pkgname}-latest"
7epoch=0
8_pkgver=2016_08_05
9pkgver="${_pkgver}"
10pkgrel=7
11pkgdesc="2015/2016 Timetable data for the timetable search engines by CHAPS: Czech trains."
12arch=(any)
13url="https://web.archive.org/web/20160806152205/http://chaps.cz/eng/download/idos/#kotvatt"
14license=('custom')
15
16groups=(
17 "idos-timetable"
18 )
19
20depends=(
21 "idos-timetable-data-trains-common"
22 )
23
24makedepends=(
25 "p7zip"
26 "wget"
27)
28
29optdepends=(
30 "idos-timetable-tariff-trains-cz: For showing prices."
31 "idos-timetable-maps-trains-cz: For displaying routes on maps."
32 "idos-timetable-additionalinfo-trains-cz: For (links to) additional information about train composition and stations."
33 )
34
35provides=(
36 "${_pkgname}=${pkgver}"
37
38 "idos-timetable-data=${pkgver}"
39 "idos-timetable-data-trains=${pkgver}"
40
41 "idos-timetable-data-trains-cz=${pkgver}"
42 "idos-timetable-data-trains-cz-2016=${pkgver}"
43)
44
45conflicts=(
46 "${_pkgname}"
47 ### The conflict will be handled by idos-timetable-data-chaps-all, if needed. Sometimes idos-timetable-data-chaps-all does not provide the train data, and then idos-timetable-data-chaps-all will depend on this package, thus this package should not have idos-timetable-data-chaps-all as conflict.
48 # "idos-timetable-data-chaps-all"
49)
50
51_zipfile="VLAK16C.EXE"
52_target="vlak16c-${_pkgver}.exe"
53
54source=(
55 "${_target}::https://web.archive.org/web/20160806152205/http://ttakt.chaps.cz/TTAktual/Win/${_zipfile}"
56 "IDOS-Licence.pdf::https://web.archive.org/web/20160806152205/http://chaps.cz/files/idos/IDOS-Licence.pdf"
57 "license-dummy.txt"
58)
59
60noextract=("${_target}")
61
62sha256sums=(
63 'ccbfee7e570e441bfe75e429c713694d56dded50ebebe2f2c88158caf1da4246'
64 "SKIP"
65 "c6bb216055d3670d3100b7a74e04ce0644030f365f4349a09e630ef60fbcb9a4"
66)
67
68
69prepare() {
70 cd "${srcdir}"
71 7z x "${_target}"
72}
73
74package() {
75 _instdirbase='/opt/idos-timetable'
76 _instdir="${pkgdir}/${_instdirbase}"
77 install -d -m755 "${_instdir}"
78
79 cp -r "${srcdir}"/Data* "${_instdir}/"
80 chmod 755 "${_instdir}"/Data*
81 chmod 644 "${_instdir}"/Data*/*
82 rm -f "${_instdir}/Data1"/[vV][lL][aA][kK].[tT][tT][rR] # This one is provided by idos-timetable-data-trains-common.
83
84 install -d -m755 "${pkgdir}/usr/share/doc/${_pkgname}"
85 echo "${url}" > "${pkgdir}/usr/share/doc/${_pkgname}/info.url"
86 chmod 644 "${pkgdir}/usr/share/doc/${_pkgname}/info.url"
87
88 install -D -m644 "${srcdir}/license-dummy.txt" "${pkgdir}/usr/share/licenses/${pkgname}/copying.txt"
89 install -D -m644 "${srcdir}/IDOS-Licence.pdf" "${pkgdir}/usr/share/licenses/${pkgname}/IDOS-Licence.pdf"
90}
91

Changes since previous scan

--- PKGBUILD @ 2026-10-21 00:12
+++ PKGBUILD @ 2026-11-02 00:26
@@ -1,6 +1,6 @@
# Maintainer: dreieck
-# PKGBUILD last time manually edited: At least on 2023-09-04.
+# PKGBUILD last time manually edited: At least on 2026-10-21.
_pkgname=idos-timetable-data-chaps-trains-cz-2016
pkgname="${_pkgname}-latest"
@@ -34,10 +34,10 @@
provides=(
"${_pkgname}=${pkgver}"
-
+
"idos-timetable-data=${pkgver}"
"idos-timetable-data-trains=${pkgver}"
-
+
"idos-timetable-data-trains-cz=${pkgver}"
"idos-timetable-data-trains-cz-2016=${pkgver}"
)
@@ -56,6 +56,8 @@
"IDOS-Licence.pdf::https://web.archive.org/web/20160806152205/http://chaps.cz/files/idos/IDOS-Licence.pdf"
"license-dummy.txt"
)
+
+noextract=("${_target}")
sha256sums=(
'ccbfee7e570e441bfe75e429c713694d56dded50ebebe2f2c88158caf1da4246'

Scan history

Scanned at (UTC)SeverityRules
2026-11-02 00:26:00 Low 2
2026-11-01 00:21:48 Low 2
2026-10-31 00:07:41 Low 2
2026-10-30 00:29:30 Low 2
2026-10-29 00:13:55 Low 2
2026-10-28 00:06:54 Low 2
2026-10-27 00:23:28 Low 2
2026-10-26 00:12:40 Low 2
2026-10-25 00:20:48 Low 2
2026-10-24 00:14:55 Low 2
2026-10-23 00:02:19 Low 2
2026-10-22 00:13:10 Low 2
2026-10-21 21:33:09 Medium 1
2026-10-21 00:12:50 Low 2
2026-10-20 00:10:31 Low 2
2026-10-19 00:03:55 Low 2
2026-10-18 00:06:55 Low 2
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion