jdownloader2-svn

maintainer carsme · 3 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from source via SVN repositories owned by the project (svn.jdownloader.org, svn.appwork.org), which is normal for AUR packages; the non-whitelisted hosts are the project's own infrastructure, and the SKIP'd checksums are expected for VCS sources.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source via SVN repositories owned by the project (svn.jdownloader.org, svn.appwork.org), which is normal for AUR packages; the non-whitelisted hosts are the project's own infrastructure, and the SKIP'd checksums are expected for VCS sources.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:21 "AppWorkUtils::svn://svn.appwork.org/utils"
PKGBUILD:22 "JDBrowser::svn://svn.jdownloader.org/jdownloader/browser"

PKGBUILD

2 offending line(s) highlighted

      1# Maintainer: Carl Smedstad <carsme@archlinux.org>
    
      2
    
      3pkgname=jdownloader2-svn
    
      4_pkgname=JDownloader
    
      5pkgver=r50760
    
      6pkgrel=1
    
      7pkgdesc="Download manager for one-click hosting sites like Rapidshare and Megaupload"
    
      8arch=(x86_64)
    
      9url="https://jdownloader.org/"
    
      10license=(GPL-3.0-or-later)
    
      11depends=(java-runtime)
    
      12makedepends=(
    
      13  ant
    
      14  java-environment
    
      15  subversion
    
      16)
    
      17provides=(jdownloader2)
    
      18conflicts=(jdownloader2)
    
      19options=(!emptydirs)
    
      20source=(
    
      21  "AppWorkUtils::svn://svn.appwork.org/utils"
    
      22  "JDBrowser::svn://svn.jdownloader.org/jdownloader/browser"
    
      23  "JDownloader::svn://svn.jdownloader.org/jdownloader/trunk"
    
      24  "MyJDownloaderClient::svn://svn.jdownloader.org/jdownloader/MyJDownloaderClient"
    
      25  "jd-containers.desktop"
    
      26  "jdownloader"
    
      27  "jdownloader-headless"
    
      28  "jdownloader.desktop"
    
      29  "jdownloader.sysusers"
    
      30  "jdownloader.tmpfiles"
    
      31  "jdownloader.xml"
    
      32)
    
      33sha256sums=(
    
      34  'SKIP'
    
      35  'SKIP'
    
      36  'SKIP'
    
      37  'SKIP'
    
      38  'bd8e68c6d9cff95a6d99a58991a14219e9bbcfa28a841c917e46f5594690e427'
    
      39  '87c1e675507e0476bbf30cb624dd9e628f2452b3899c237e39cd8bb64edde733'
    
      40  '5d7b893c98c0a194d17b7b3ae9975c3c97cf0622735f8dc479053a6e91f7f2fc'
    
      41  '4caf551a092a7c8467b334bb6f6f7c6750aa00b410ec4c857e7d0296405e4fdc'
    
      42  '901a874cb14389096ea54505dc9af48e99db310d937fce681417d2e00dd1d24f'
    
      43  'e8a07754c7e6c4036f9039d4f6b49513372a65f1d7d1c16cb517a24bef941ea7'
    
      44  'c4301592694b3273ed44814debcc03bf1e4fc85882954f5c03e55508c53c4491'
    
      45)
    
      46
    
      47pkgver() {
    
      48  cd $_pkgname
    
      49  local ver="$(svnversion)"
    
      50  printf "r%s" "${ver//[[:alpha:]]/}"
    
      51}
    
      52
    
      53build() {
    
      54  cd $_pkgname
    
      55  cp build/newBuild/build_standalone.xml build.xml
    
      56  ant standalone
    
      57}
    
      58
    
      59package() {
    
      60  cd $_pkgname
    
      61  install -vDm644 themes/themes/standard/org/jdownloader/images/logo/jd_logo_256_256.png \
    
      62    "$pkgdir/usr/share/pixmaps/jdownloader.png"
    
      63  install -vDm644 -t "$pkgdir/usr/share/applications" "$srcdir/jdownloader.desktop"
    
      64  install -vDm644 -t "$pkgdir/usr/share/applications" "$srcdir/jd-containers.desktop"
    
      65  install -vDm644 -t "$pkgdir/usr/share/mime/packages" "$srcdir/jdownloader.xml"
    
      66
    
      67  install -vDm644 "$srcdir/jdownloader.sysusers" "$pkgdir/usr/lib/sysusers.d/jdownloader.conf"
    
      68  install -vDm644 "$srcdir/jdownloader.tmpfiles" "$pkgdir/usr/lib/tmpfiles.d/jdownloader.conf"
    
      69
    
      70  install -vdm755 "$pkgdir/opt/jdownloader"
    
      71  cp -av -t "$pkgdir/opt/jdownloader" standalone/dist/*
    
      72
    
      73  install -vDm644 -t "$pkgdir/usr/share/licenses/$pkgname" standalone/dist/license.txt
    
      74  cp -av -t "$pkgdir/usr/share/licenses/$pkgname" standalone/dist/licenses/*
    
      75
    
      76  # Remove license files from /opt
    
      77  rm -vr "$pkgdir/opt/jdownloader/licenses"
    
      78  rm -v "$pkgdir/opt/jdownloader/license.txt" "$pkgdir/opt/jdownloader/license_german.txt"
    
      79
    
      80  # Remove bundled ffmpeg
    
      81  rm -vr "$pkgdir/opt/jdownloader/tools"
    
      82
    
      83  install -vDm755 -t "$pkgdir/usr/bin" "$srcdir/jdownloader"
    
      84  install -vDm755 -t "$pkgdir/usr/bin" "$srcdir/jdownloader-headless"
    
      85}
    
      86

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2