jna

MEDIUM

maintainer qubeck 8 votes scanned 2026-10-28 19:50:31.752373

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 "https://repo1.maven.org/maven2/net/java/dev/jna/jna/${pkgver}/jna-${pkgver}.jar"

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Gustavo Alvarez <sl1pkn07@gmail.com>
    
      2
    
      3pkgname=jna
    
      4pkgver=5.17.0
    
      5pkgrel=1
    
      6pkgdesc="Access native libraries with pure Java code."
    
      7arch=('any')
    
      8url='https://github.com/java-native-access/jna'
    
      9license=('LGPL' 'custom:Apache')
    
      10depends=('java-runtime')
    
      11source=(
    
      12  "https://repo1.maven.org/maven2/net/java/dev/jna/jna/${pkgver}/jna-${pkgver}.jar"
    
      13  'https://raw.githubusercontent.com/java-native-access/jna/master/AL2.0'
    
      14  'https://raw.githubusercontent.com/java-native-access/jna/master/LGPL2.1'
    
      15)
    
      16sha256sums=(
    
      17  'b3a9408e7c51e08ef0e3bfcc08f443f6ec0f6191ba8cd7c18d53d2b22e5bdbc0'
    
      18  '0d542e0c8804e39aa7f37eb00da5a762149dc682d7829451287e11b938e94594'
    
      19  'eea173a556abac0370461e57e12aab266894ea6be3874c2be05fd87871f75449'
    
      20)
    
      21
    
      22package() {
    
      23  install -Dm775 "${srcdir}/jna-${pkgver}.jar" "${pkgdir}/usr/share/java/jna.jar"
    
      24
    
      25  install -Dm755 "${srcdir}/AL2.0" "${pkgdir}/usr/share/licenses/${pkgname}/AL2.0"
    
      26  install -Dm755 "${srcdir}/LGPL2.1" "${pkgdir}/usr/share/licenses/${pkgname}/LGPL2.1"
    
      27}
    
      28

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-28 19:50:31	Medium	2
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1