latex-template-springer
LOW
maintainer mod20
18 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads LaTeX template files from Springer's official CMS domain, which is plausibly the project's own source; the files are non-executable data, and the worst case of a swapped source is limited to tampering with templates, not code execution.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads LaTeX template files from Springer's official CMS domain, which is plausibly the project's own source; the files are non-executable data, and the worst case of a swapped source is limited to tampering with templates, not code execution.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:24
source=('llncs.zip::https://resource-cms.springernature.com/springer-cms/rest/v1/content/19238648/data/v8'
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Augusto Modanese <augusto.modanese@cispa.de>
2
# Contributor: Olivier Mehani <shtrom-aur@ssji.net>
3
# Contributor: florianbw <florian.bw@gmail.com>
4
# vim:set ts=2 sw=2 et:
5
6
pkgname=latex-template-springer
7
pkgver=20260524
8
pkgrel=1
9
pkgdesc="Springer templates for LNCS proceedings (llncs), other proceedings (svproc), journal articles (sn-jnl), monographs (svmono), and multiauthor volumes (svmult)"
10
arch=('any')
11
url="https://www.springernature.com/gp/authors/campaigns/latex-author-support"
12
license=('LPPL-1.3c')
13
groups=()
14
depends=('texlive-latex')
15
makedepends=('unzip')
16
optdepends=()
17
provides=(latex-template-lncs)
18
conflicts=(latex-template-lncs)
19
replaces=(latex-template-lncs)
20
backup=()
21
options=()
22
install=texlive.install
23
24
source=('llncs.zip::https://resource-cms.springernature.com/springer-cms/rest/v1/content/19238648/data/v8'
25
'svproc.zip::https://resource-cms.springernature.com/springer-cms/rest/v1/content/19338728/data/v1'
26
'svjour.zip::https://resource-cms.springernature.com/springer-cms/rest/v1/content/18782940/data/v13'
27
'svmono.zip::https://resource-cms.springernature.com/springer-cms/rest/v1/content/27837776/data/v1'
28
'svmult.zip::https://resource-cms.springernature.com/springer-cms/rest/v1/content/27837774/data/v1')
29
30
noextract=("${source[@]%%::*}")
31
32
md5sums=('SKIP'
33
'SKIP'
34
'SKIP'
35
'SKIP'
36
'SKIP')
37
38
package() {
39
for zipfile in *.zip; do
40
unzip $zipfile -d $(echo $zipfile | cut -d'.' -f1)
41
done
42
43
bibdir="${pkgdir}/usr/share/texmf-dist/bibtex/bib/springer"
44
bstdir="${pkgdir}/usr/share/texmf-dist/bibtex/bst/springer"
45
clsdir="${pkgdir}/usr/share/texmf-dist/tex/latex/springer"
46
istdir="${pkgdir}/usr/share/texmf-dist/makeindex/springer"
47
48
# llncs
49
cd llncs
50
install -m 0644 -D -t "${clsdir}" llncs.cls
51
install -m 0644 -D -t "${bstdir}" splncs04.bst
52
install -m 0644 -D -t "${pkgdir}/usr/share/doc/llncs" fig1.eps history.txt \
53
llncsdoc.pdf readme.txt samplepaper.tex
54
cd ..
55
56
# svproc
57
cd svproc
58
install -m 0644 -D -t "${clsdir}" styles/svproc.cls styles/*.sty
59
install -m 0644 -D -t "${istdir}" styles/*.ist
60
install -m 0644 -D -t "${bstdir}" styles/bibtex/*.bst
61
install -m 0644 -D -t "${pkgdir}/usr/share/doc/svproc" authinst.pdf \
62
authsamp.pdf ftpinfo.txt history.txt quickstart.pdf readme.txt \
63
refguide.pdf
64
mv editor "${pkgdir}/usr/share/doc/svproc/"
65
mv templates "${pkgdir}/usr/share/doc/svproc/"
66
cd ..
67
68
# sn-jnl
69
cd svjour/sn-article-template
70
install -m 0644 -D -t "${clsdir}" sn-jnl.cls
71
install -m 0644 -D -t "${bibdir}" sn-bibliography.bib
72
install -m 0644 -D -t "${bstdir}" bst/*.bst
73
install -m 0644 -D -t "${pkgdir}/usr/share/doc/sn-jnl" empty.eps \
74
fig.eps sn-article.pdf sn-article.tex user-manual.pdf
75
cd ../..
76
77
# svmono
78
cd svmono
79
install -m 0644 -D -t "${clsdir}" SNmono.cls
80
install -m 0644 -D -t "${istdir}" book/*.ist
81
install -m 0644 -D -t "${bstdir}" book/*.bst
82
install -m 0644 -D -t "${pkgdir}/usr/share/doc/svmono" history.txt \
83
instructions.pdf readme.txt
84
rm book/*.bst book/*.ist book/SNmono.cls
85
mv book "${pkgdir}/usr/share/doc/svmono/"
86
cd ..
87
88
# svmult
89
cd svmult
90
install -m 0644 -D -t "${clsdir}" SNmult.cls
91
install -m 0644 -D -t "${istdir}" editor/*.ist
92
install -m 0644 -D -t "${bstdir}" author/*.bst
93
install -m 0644 -D -t "${pkgdir}/usr/share/doc/svmult" history.txt \
94
instructions.pdf readme.txt
95
rm author/*.bst author/SNmult.cls
96
mv author "${pkgdir}/usr/share/doc/svmult/"
97
rm editor/*.bst editor/*.ist editor/SNmult.cls
98
mv editor "${pkgdir}/usr/share/doc/svmult/"
99
cd ..
100
}
101
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |