idos-timetable-data-chaps-trains-europe-2016-latest

LOW
maintainer dreieck 0 votes scanned 2026-11-01 00:21:48.120785
View on AUR
Why flagged

The package downloads archived timetable data from web.archive.org, which is a non-standard host but serves as a legitimate archive of the original project site; the data is non-executable and used solely for timetable lookups, posing minimal risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads archived timetable data from web.archive.org, which is a non-standard host but serves as a legitimate archive of the original project site; the data is non-executable and used solely for timetable lookups, posing minimal risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:61 "${_target}::https://web.archive.org/web/20160806152205/http://ttakt.chaps.cz/TTAktual/Win/${_zipfile}"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: dreieck
2
3# PKGBUILD last time manually edited: At least on 2026-10-21.
4
5_pkgname=idos-timetable-data-chaps-trains-europe-2016
6pkgname="${_pkgname}-latest"
7epoch=0
8_pkgver=2016_08_06
9pkgver="${_pkgver}"
10pkgrel=6
11pkgdesc="2015/2016 Timetable data for the timetable search engines by CHAPS: European trains."
12arch=(any)
13url="https://web.archive.org/web/20160806152205/http://chaps.cz/eng/download/idos/#kotvatt"
14license=('custom')
15
16groups=(
17 "idos-timetable"
18 )
19
20depends=(
21 "idos-timetable-data-trains-common"
22 )
23
24makedepends=(
25 "p7zip"
26 "wget"
27)
28
29optdepends=(
30 "idos-timetable-tariff-trains-europe: For showing prices."
31 "idos-timetable-tariff-trains-cz: For showing prices (for Czech Republic only)."
32 "idos-timetable-tariff-trains-sk: For showing prices (for Slovakia only)."
33 "idos-timetable-maps-trains-europe: For displaying routes on maps."
34 "idos-timetable-maps-trains-cz: For displaying routes on (for Czech Republic only)."
35 "idos-timetable-maps-trains-sk: For displaying routes on (for Slovakia only)."
36 "idos-timetable-additionalinfo-trains-europe: For (links to) additional information about train composition and stations."
37 "idos-timetable-additionalinfo-trains-cz: For (links to) additional information about train composition and stations (for Chech Republic only)"
38 "idos-timetable-additionalinfo-trains-sk: For (links to) additional information about train composition and stations (for Slovakia only)."
39 )
40
41provides=(
42 "${_pkgname}=${pkgver}"
43
44 "idos-timetable-data=${pkgver}"
45 "idos-timetable-data-trains=${pkgver}"
46
47 "idos-timetable-data-trains-europe=${pkgver}"
48 "idos-timetable-data-trains-europe-2016=${pkgver}"
49)
50
51conflicts=(
52 "${_pkgname}"
53 ### The conflict will be handled by idos-timetable-data-chaps-all, if needed. Sometimes idos-timetable-data-chaps-all does not provide the train data, and then idos-timetable-data-chaps-all will depend on this package, thus this package should not have idos-timetable-data-chaps-all as conflict.
54 # "idos-timetable-data-chaps-all"
55)
56
57_zipfile="VLAK16E.EXE"
58_target="vlak16e-${_pkgver}.exe"
59
60source=(
61 "${_target}::https://web.archive.org/web/20160806152205/http://ttakt.chaps.cz/TTAktual/Win/${_zipfile}"
62 "IDOS-Licence.pdf::https://web.archive.org/web/20160806152205/http://chaps.cz/files/idos/IDOS-Licence.pdf"
63 "license-dummy.txt"
64)
65
66noextract=("${_target}")
67
68sha256sums=(
69 'be895b093a2989b999624b7749268ca40b4316d72235d497ace2ce382e307aec'
70 "SKIP"
71 "c6bb216055d3670d3100b7a74e04ce0644030f365f4349a09e630ef60fbcb9a4"
72)
73
74
75prepare() {
76 cd "${srcdir}"
77 7z x "${_target}"
78}
79
80package() {
81 _instdirbase='/opt/idos-timetable'
82 _instdir="${pkgdir}/${_instdirbase}"
83 install -d -m755 "${_instdir}"
84
85 cp -r "${srcdir}"/Data* "${_instdir}/"
86 chmod 755 "${_instdir}"/Data*
87 chmod 644 "${_instdir}"/Data*/*
88 rm -f "${_instdir}/Data1"/[vV][lL][aA][kK].[tT][tT][rR] # This one is provided by idos-timetable-data-trains-common.
89
90 install -d -m755 "${pkgdir}/usr/share/doc/${_pkgname}"
91 echo "${url}" > "${pkgdir}/usr/share/doc/${_pkgname}/info.url"
92 chmod 644 "${pkgdir}/usr/share/doc/${_pkgname}/info.url"
93
94 install -D -m644 "${srcdir}/license-dummy.txt" "${pkgdir}/usr/share/licenses/${pkgname}/copying.txt"
95 install -D -m644 "${srcdir}/IDOS-Licence.pdf" "${pkgdir}/usr/share/licenses/${pkgname}/IDOS-Licence.pdf"
96}
97

Changes since previous scan

--- PKGBUILD @ 2026-10-21 00:12
+++ PKGBUILD @ 2026-11-01 00:21
@@ -1,6 +1,6 @@
# Maintainer: dreieck
-# PKGBUILD last time manually edited: At least on 2023-09-04.
+# PKGBUILD last time manually edited: At least on 2026-10-21.
_pkgname=idos-timetable-data-chaps-trains-europe-2016
pkgname="${_pkgname}-latest"
@@ -40,10 +40,10 @@
provides=(
"${_pkgname}=${pkgver}"
-
+
"idos-timetable-data=${pkgver}"
"idos-timetable-data-trains=${pkgver}"
-
+
"idos-timetable-data-trains-europe=${pkgver}"
"idos-timetable-data-trains-europe-2016=${pkgver}"
)
@@ -62,6 +62,8 @@
"IDOS-Licence.pdf::https://web.archive.org/web/20160806152205/http://chaps.cz/files/idos/IDOS-Licence.pdf"
"license-dummy.txt"
)
+
+noextract=("${_target}")
sha256sums=(
'be895b093a2989b999624b7749268ca40b4316d72235d497ace2ce382e307aec'

Scan history

Scanned at (UTC)SeverityRules
2026-11-01 00:21:48 Low 2
2026-10-31 00:07:41 Low 2
2026-10-30 00:29:30 Low 2
2026-10-29 00:13:55 Low 2
2026-10-28 00:06:54 Low 2
2026-10-27 00:23:28 Low 2
2026-10-26 00:12:40 Low 2
2026-10-25 00:20:48 Low 2
2026-10-24 00:14:55 Low 2
2026-10-23 00:02:19 Low 2
2026-10-22 00:13:10 Low 2
2026-10-21 21:33:09 Medium 1
2026-10-21 00:12:50 Low 2
2026-10-20 00:10:31 Low 2
2026-10-19 00:03:55 Low 2
2026-10-18 00:06:55 Low 2
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 00:06:47 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion