java-mango

maintainer Feakster · 2 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads source files from the project's own domain, which is not on the whitelist but is plausibly official; the content is built and installed as intended without executing unverified remote code or exhibiting malicious behavior.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads source files from the project's own domain, which is not on the whitelist but is plausibly official; the content is built and installed as intended without executing unverified remote code or exhibiting malicious behavior.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:19 source=("${pkgname}-${pkgver}.zip::http://${_pkgname}viewer.com/downloads/${_pkgname}_unix.zip"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Feakster <feakster at posteo dot eu>
    
      2
    
      3# Notes: https://mangoviewer.com/mango.html
    
      4# User guide: https://mangoviewer.com/userguide.html
    
      5
    
      6### Info ###
    
      7pkgname=java-mango
    
      8_pkgname=${pkgname#java-}
    
      9pkgver=4.1
    
      10pkgrel=8
    
      11pkgdesc='A viewer for medical research images'
    
      12arch=('any')
    
      13url="https://${_pkgname}viewer.com/${_pkgname}.html"
    
      14license=('custom:RII-UTHSCSA')
    
      15changelog=ChangeLog
    
      16depends=(hicolor-icon-theme jre8-openjdk)
    
      17makedepends=(imagemagick)
    
      18options=(!strip)
    
      19source=("${pkgname}-${pkgver}.zip::http://${_pkgname}viewer.com/downloads/${_pkgname}_unix.zip"
    
      20        "${_pkgname}.sh"
    
      21        "${_pkgname}.desktop"
    
      22        "${_pkgname}.png::http://${_pkgname}viewer.com/images/app_icon.png"
    
      23        'ChangeLog'
    
      24        'LICENSE')
    
      25b2sums=('34ed9385f51cc29560a333abd0509bf2a41ef3db73d5b56d73df9ac8a446575f65f403b62daa8e9d589b9fe1dd720dac66fb56e6c345b9929b5b3f725eee7c0e'
    
      26        'd53e92c1f91cef43008bec5178dd4e1fdf08063d066f046f8ba8957f2cfb659f9b639147658cf090efffd76f72138c74d400937a58ce938e641cab425bb19817'
    
      27        'db3bc9fc702cd693a25f0f95554de3603bbac2442c19c1e73194cef53b7fac6f222a99f208bd31bd8add5b4ec999e8d2cddf5c57baf896c6c3ee7fa2e12f487e'
    
      28        '19c51a8fff8cda94117fd64db54d23105a9e1850db1016f391230118edc0c6430bbbc0b0e5a74a60b7c572ab4f7b59b21de8d6a77391267e63a42e17aab7e59a'
    
      29        'd728e4524476b858d3f43796e340cfbcf9287ca6cc011f93eac94290b4739f9c885e939ac6057e6d309416bbe2722ae31f3a2fb90b11511e6d02c1262d54ff01'
    
      30        'afef46bb3cefe57f95f6fa321d3686e15a95848298a1839f4932910f93ad4eb6542da118d9cb115df20b59e2c02b9ec80d3ddbba01c839c2ce68e4ee66d8eedb')
    
      31
    
      32### Prepare ###
    
      33prepare() {
    
      34    ## Rename Directory ##
    
      35    mv "$srcdir"/Mango "$srcdir"/$_pkgname
    
      36
    
      37    ## Remove Unnecessary Directories/Files ##
    
      38    rm -rf "$srcdir"/$_pkgname/{.DS_Store,jre7,$_pkgname,README}
    
      39
    
      40    ## Convert Icons ##
    
      41    for res in 16 22 24 32 48 64 128 256; do
    
      42        convert "$srcdir"/$_pkgname.png \
    
      43            -resize ${res}x${res} \
    
      44            "$srcdir"/$_pkgname/$_pkgname-${res}x${res}.png
    
      45    done
    
      46}
    
      47
    
      48### Package ###
    
      49package() {
    
      50    ## Move Core Contents to /opt/mango/ ##
    
      51    install -dm0755 "$pkgdir"/opt/$_pkgname
    
      52    cp -RLT "$srcdir"/$_pkgname "$pkgdir"/opt/$_pkgname
    
      53
    
      54    ## Move Additional Files to /opt/mango/ ##
    
      55    install -m0755 "$srcdir"/${_pkgname}.sh -t "$pkgdir"/opt/$_pkgname
    
      56    install -m0644 "$srcdir"/{${_pkgname}.desktop,LICENSE} -t "$pkgdir"/opt/$_pkgname
    
      57
    
      58    ## Symlink Desktop File ##
    
      59    install -dm0755 "$pkgdir"/usr/share/applications
    
      60    ln -fs \
    
      61        /opt/$_pkgname/${_pkgname}.desktop \
    
      62        "$pkgdir"/usr/share/applications/${_pkgname}.desktop
    
      63
    
      64    ## Symlink Executable to System PATH ##
    
      65    install -dm0755 "$pkgdir"/usr/bin
    
      66    ln -fs \
    
      67        /opt/$_pkgname/${_pkgname}.sh \
    
      68        "$pkgdir"/usr/bin/$_pkgname
    
      69
    
      70    ## Symlink Icons ##
    
      71    for res in 16 22 24 32 48 64 128 256; do
    
      72        install -dm0755 "$pkgdir"/usr/share/icons/hicolor/${res}x${res}/apps
    
      73        ln -fs \
    
      74            /opt/$_pkgname/$_pkgname-${res}x${res}.png \
    
      75            "$pkgdir"/usr/share/icons/hicolor/${res}x${res}/apps/$_pkgname.png
    
      76    done
    
      77
    
      78    ## Symlink License ##
    
      79    install -dm0755 "$pkgdir"/usr/share/licenses/$_pkgname
    
      80    ln -fs \
    
      81        /opt/$_pkgname/LICENSE \
    
      82        "$pkgdir"/usr/share/licenses/$_pkgname/LICENSE
    
      83}
    
      84

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2