jeveassets

maintainer denspirit · 9 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads source code and data from the project's official GitHub and project-maintained domain; the 'SKIP' checksum for data.zip is acceptable as it contains non-executable data, and all other sources are properly verified.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads source code and data from the project's official GitHub and project-maintained domain; the 'SKIP' checksum for data.zip is acceptable as it contains non-executable data, and all other sources are properly verified.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 "https://eve.nikr.net/jeveassets/data.zip"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Denis Borisevich <elfmax@tut.by>
    
      2# Maintainer: Tyr Heimdal <tyr.heimdal@warning.no>
    
      3
    
      4pkgname=jeveassets
    
      5pkgver=8.2.0
    
      6pkgrel=1
    
      7pkgdesc="Out-of-game asset manager for Eve-Online, written in Java"
    
      8arch=('any')
    
      9url="http://eve.nikr.net/jeveasset"
    
      10license=('GPL2')
    
      11depends=('java-runtime')
    
      12install=$pkgname.install
    
      13
    
      14source=(
    
      15  "https://github.com/GoldenGnu/jeveassets/releases/download/${pkgname}-${pkgver}/${pkgname}-${pkgver}.zip"
    
      16  "https://eve.nikr.net/jeveassets/data.zip"
    
      17  "packagemanager.properties"
    
      18  "${pkgname}.desktop"
    
      19  "${pkgname}_16x16.png"
    
      20  "${pkgname}_32x32.png"
    
      21  "${pkgname}_64x64.png"
    
      22  "${pkgname}.sh"
    
      23)
    
      24
    
      25sha256sums=(
    
      26  '6ff0b1e0340b616eccaccef8d2a9bbfd75ff92fe2576ccf43bba4fc34e9e360c'
    
      27  'SKIP'
    
      28  '0203673802ba5102e8acae19c463ab1cd79663653cce38431362367d220f951e'
    
      29  '99dd564f33ea7e7a71980b829125207a53a18c2c31f5907d1e8842b64217d69b'
    
      30  '23ff2740653dddaafc0a40dcdadfa667a55d28389088dda8bc6eca1c66298150'
    
      31  '392c10b8b5c9f467eaf915542d5c0737d25ee44d0f14e14ca1099839fdc09daa'
    
      32  'c488589609bff3e2d60f191fb3bc149b19f31c6b3c25400a87639faf35126878'
    
      33  'eb94c90e9da414f351e027f4ddaae12ab563f5babbf0dfdbf9c13c7aa583c354'
    
      34)
    
      35
    
      36package() {
    
      37
    
      38  install -d "${pkgdir}/opt/"
    
      39  cp -dr --no-preserve=ownership "${srcdir}/jEveAssets" "${pkgdir}/opt/"
    
      40  install -Dm644 "${startdir}/packagemanager.properties" "${pkgdir}/opt/jEveAssets/packagemanager.properties"
    
      41
    
      42  install -d "${pkgdir}/usr/bin/"
    
      43  cp -dr --no-preserve=ownership "${srcdir}/jeveassets.sh" "${pkgdir}/usr/bin"
    
      44
    
      45  install -Dm755 "${startdir}/jeveassets.sh" "${pkgdir}/usr/bin/jeveassets.sh"
    
      46
    
      47  install -d "${pkgdir}/usr/share/applications/"
    
      48  cp -dr --no-preserve=ownership "${srcdir}/jeveassets.desktop" "${pkgdir}/usr/share/applications/"
    
      49
    
      50  for res in 16x16 32x32 64x64; do
    
      51    install -Dm644 "${srcdir}/${pkgname}_${res}.png" \
    
      52      "${pkgdir}/usr/share/icons/hicolor/${res}/apps/jEveAssets.png"
    
      53  done
    
      54
    
      55  install -Dm644 "${srcdir}/${pkgname}.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"
    
      56}
    
      57# vim: set ts=2 sw=2 et:
    
      58

Changes since previous scan

--- PKGBUILD @ 2026-07-29 00:25
+++ PKGBUILD @ 2026-08-03 00:08
@@ -2,7 +2,7 @@
 # Maintainer: Tyr Heimdal <tyr.heimdal@warning.no>
 
 pkgname=jeveassets
-pkgver=8.1.2
+pkgver=8.2.0
 pkgrel=1
 pkgdesc="Out-of-game asset manager for Eve-Online, written in Java"
 arch=('any')
@@ -23,7 +23,7 @@
 )
 
 sha256sums=(
-  'f059d5b9e75ec3531b293560a3bd583d6285efa518757a90ec4e2462833a631b'
+  '6ff0b1e0340b616eccaccef8d2a9bbfd75ff92fe2576ccf43bba4fc34e9e360c'
   'SKIP'
   '0203673802ba5102e8acae19c463ab1cd79663653cce38431362367d220f951e'
   '99dd564f33ea7e7a71980b829125207a53a18c2c31f5907d1e8842b64217d69b'

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 21:12:47	MEDIUM	1
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2