jeveassets

LOW

maintainer denspirit 9 votes scanned 2026-11-01 00:21:48.120785

View on AUR

Why flagged

The package downloads source code and data from the project's official GitHub and project-maintained domain; the 'SKIP' checksum for data.zip is acceptable as it contains non-executable data, and all other sources are properly verified.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads source code and data from the project's official GitHub and project-maintained domain; the 'SKIP' checksum for data.zip is acceptable as it contains non-executable data, and all other sources are properly verified.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 "https://eve.nikr.net/jeveassets/data.zip"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Denis Borisevich <elfmax@tut.by>
    
      2# Maintainer: Tyr Heimdal <tyr.heimdal@warning.no>
    
      3
    
      4pkgname=jeveassets
    
      5pkgver=8.2.0
    
      6pkgrel=1
    
      7pkgdesc="Out-of-game asset manager for Eve-Online, written in Java"
    
      8arch=('any')
    
      9url="http://eve.nikr.net/jeveasset"
    
      10license=('GPL2')
    
      11depends=('java-runtime')
    
      12install=$pkgname.install
    
      13
    
      14source=(
    
      15  "https://github.com/GoldenGnu/jeveassets/releases/download/${pkgname}-${pkgver}/${pkgname}-${pkgver}.zip"
    
      16  "https://eve.nikr.net/jeveassets/data.zip"
    
      17  "packagemanager.properties"
    
      18  "${pkgname}.desktop"
    
      19  "${pkgname}_16x16.png"
    
      20  "${pkgname}_32x32.png"
    
      21  "${pkgname}_64x64.png"
    
      22  "${pkgname}.sh"
    
      23)
    
      24
    
      25sha256sums=(
    
      26  '6ff0b1e0340b616eccaccef8d2a9bbfd75ff92fe2576ccf43bba4fc34e9e360c'
    
      27  'SKIP'
    
      28  '0203673802ba5102e8acae19c463ab1cd79663653cce38431362367d220f951e'
    
      29  '99dd564f33ea7e7a71980b829125207a53a18c2c31f5907d1e8842b64217d69b'
    
      30  '23ff2740653dddaafc0a40dcdadfa667a55d28389088dda8bc6eca1c66298150'
    
      31  '392c10b8b5c9f467eaf915542d5c0737d25ee44d0f14e14ca1099839fdc09daa'
    
      32  'c488589609bff3e2d60f191fb3bc149b19f31c6b3c25400a87639faf35126878'
    
      33  'eb94c90e9da414f351e027f4ddaae12ab563f5babbf0dfdbf9c13c7aa583c354'
    
      34)
    
      35
    
      36package() {
    
      37
    
      38  install -d "${pkgdir}/opt/"
    
      39  cp -dr --no-preserve=ownership "${srcdir}/jEveAssets" "${pkgdir}/opt/"
    
      40  install -Dm644 "${startdir}/packagemanager.properties" "${pkgdir}/opt/jEveAssets/packagemanager.properties"
    
      41
    
      42  install -d "${pkgdir}/usr/bin/"
    
      43  cp -dr --no-preserve=ownership "${srcdir}/jeveassets.sh" "${pkgdir}/usr/bin"
    
      44
    
      45  install -Dm755 "${startdir}/jeveassets.sh" "${pkgdir}/usr/bin/jeveassets.sh"
    
      46
    
      47  install -d "${pkgdir}/usr/share/applications/"
    
      48  cp -dr --no-preserve=ownership "${srcdir}/jeveassets.desktop" "${pkgdir}/usr/share/applications/"
    
      49
    
      50  for res in 16x16 32x32 64x64; do
    
      51    install -Dm644 "${srcdir}/${pkgname}_${res}.png" \
    
      52      "${pkgdir}/usr/share/icons/hicolor/${res}/apps/jEveAssets.png"
    
      53  done
    
      54
    
      55  install -Dm644 "${srcdir}/${pkgname}.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"
    
      56}
    
      57# vim: set ts=2 sw=2 et:
    
      58

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-01 00:21:48	Low	2
2026-10-31 00:07:41	Low	2
2026-10-30 00:29:30	Low	2
2026-10-29 00:13:55	Low	2
2026-10-28 00:06:54	Low	2
2026-10-27 00:23:28	Low	2
2026-10-26 00:12:40	Low	2
2026-10-25 00:20:48	Low	2
2026-10-24 00:14:55	Low	2
2026-10-23 00:02:19	Low	2
2026-10-22 00:13:10	Low	2
2026-10-21 00:12:50	Low	2
2026-10-20 00:10:31	Low	2
2026-10-19 00:03:55	Low	2
2026-10-18 00:06:55	Low	2
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2