liberica-nik-23-full-bin
LOW
maintainer parsaloi
1 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a prebuilt Liberica NIK JDK from the official bell-sw.com domain, which is the project's own release infrastructure; despite the static analyzer flaging the host as non-standard, the source is legitimate and expected for this package.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt Liberica NIK JDK from the official bell-sw.com domain, which is the project's own release infrastructure; despite the static analyzer flaging the host as non-standard, the source is legitimate and expected for this package.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:59
"https://download.bell-sw.com/vm/${_nikver/+*}/bellsoft-liberica-vm-full-openjdk${_pkgver}-${_nikver}+1-linux-amd64.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Elvis Parsaloi <parsaloi35@gmail.com>
2
_jdkname=liberica-nik-23-full
3
pkgname="${_jdkname}-bin"
4
_java_ver=21
5
_pkgver=${_java_ver}.0.8+13
6
_nikver=23.1.8
7
pkgver=${_nikver/+/.}
8
pkgrel=1
9
pkgdesc='Liberica NIK is a downstream of GraalVM Community edition. The full version provides support for JavaFX and Swing.'
10
arch=(x86_64)
11
url='https://bell-sw.com/'
12
license=('custom')
13
depends=('java-environment-common=3' 'java-runtime-common>=3' 'ca-certificates-utils')
14
optdepends=('ffmpeg' 'freetype2' 'gtk2' 'gtk3' 'libnet')
15
provides=(
16
"java-environment=${_java_ver}"
17
"java-environment-openjdk=${_java_ver}"
18
"java-openjfx=${_java_ver}"
19
"java-runtime-headless=${_java_ver}"
20
"java-runtime-headless-openjdk=${_java_ver}"
21
"java-runtime=${_java_ver}"
22
"java-runtime-openjdk=${_java_ver}"
23
"liberica-jdk-${_java_ver}-bin=${_pkgver}"
24
"liberica-jdk-${_java_ver}-full-bin=${_pkgver}"
25
"liberica-jdk-${_java_ver}-lite-bin=${_pkgver}"
26
"liberica-jre-${_java_ver}-bin=${_pkgver}"
27
"liberica-jre-${_java_ver}-full-bin=${_pkgver}"
28
)
29
install=${_jdkname}.install
30
31
backup=(
32
"etc/${_jdkname}/logging.properties"
33
"etc/${_jdkname}/management/jmxremote.access"
34
"etc/${_jdkname}/management/jmxremote.password.template"
35
"etc/${_jdkname}/management/management.properties"
36
"etc/${_jdkname}/net.properties"
37
"etc/${_jdkname}/security/java.policy"
38
"etc/${_jdkname}/security/java.security"
39
"etc/${_jdkname}/security/policy/README.txt"
40
"etc/${_jdkname}/security/policy/limited/default_US_export.policy"
41
"etc/${_jdkname}/security/policy/limited/default_local.policy"
42
"etc/${_jdkname}/security/policy/limited/exempt_local.policy"
43
"etc/${_jdkname}/security/policy/unlimited/default_US_export.policy"
44
"etc/${_jdkname}/security/policy/unlimited/default_local.policy"
45
"etc/${_jdkname}/sound.properties"
46
)
47
48
source=(
49
'freedesktop-java.desktop.in'
50
'freedesktop-jconsole.desktop.in'
51
'freedesktop-jshell.desktop.in'
52
"${_jdkname}16.png::https://raw.githubusercontent.com/openjdk/jdk/master/src/java.desktop/unix/classes/sun/awt/X11/java-icon16.png"
53
"${_jdkname}24.png::https://raw.githubusercontent.com/openjdk/jdk/master/src/java.desktop/unix/classes/sun/awt/X11/java-icon24.png"
54
"${_jdkname}32.png::https://raw.githubusercontent.com/openjdk/jdk/master/src/java.desktop/unix/classes/sun/awt/X11/java-icon32.png"
55
"${_jdkname}48.png::https://raw.githubusercontent.com/openjdk/jdk/master/src/java.desktop/unix/classes/sun/awt/X11/java-icon48.png"
56
)
57
58
source_x86_64=(
59
"https://download.bell-sw.com/vm/${_nikver/+*}/bellsoft-liberica-vm-full-openjdk${_pkgver}-${_nikver}+1-linux-amd64.tar.gz"
60
)
61
62
sha1sums=(
63
'648589b6de677b9ef3f8864494bf69aaa7e4fc8e'
64
'00eacd0bb3f880bfac258413431388ff0613dadb'
65
'4039a3cbbea0467f224b324ee4fe5d378a49d4aa'
66
'36096a57cebd346e08efc68326fe77960d43726f'
67
'b8233f9ff931ce97a265827fac18ed90f4e248c6'
68
'a0da2952bc87a425182c3ac88e88649fbaa7cb65'
69
'eb36aa73a9be98164447774217865b91e79d503c'
70
)
71
72
sha1sums_x86_64=('76718e38bd6123fc8a9bcc258d54044deb5cce77')
73
74
_jvmdir="/usr/lib/jvm/${_jdkname}"
75
76
prepare() {
77
for f in *.desktop.in; do
78
sed "s|@@VER@@|${_java_ver}|g" "$f" > "${f/.in/}"
79
done
80
}
81
82
package() {
83
cd "bellsoft-liberica-vm-full-openjdk${_java_ver}-${_nikver/+*}"
84
85
install -dm 755 "${pkgdir}/${_jvmdir}"
86
cp -a . "${pkgdir}/${_jvmdir}/"
87
88
# Conf
89
install -dm 755 "${pkgdir}/etc"
90
cp -r conf "${pkgdir}/etc/${_jdkname}"
91
rm -rf "${pkgdir}/${_jvmdir}/conf"
92
ln -s "/etc/${_jdkname}" "${pkgdir}/${_jvmdir}/conf"
93
94
# Legal
95
install -dm 755 "${pkgdir}/usr/share/licenses"
96
cp -r legal "${pkgdir}/usr/share/licenses/${_jdkname}"
97
rm -rf "${pkgdir}/${_jvmdir}/legal"
98
ln -s "/usr/share/licenses/${_jdkname}" "${pkgdir}/${_jvmdir}/legal"
99
100
# Man pages
101
for f in man/man1/*; do
102
install -Dm 644 "${f}" "${pkgdir}/usr/share/${f/\.1/-${_jdkname}.1}"
103
done
104
rm -rf "${pkgdir}/${_jvmdir}/man"
105
ln -s /usr/share/man "${pkgdir}/${_jvmdir}/man"
106
107
# Link JKS keystore from ca-certificates-utils
108
rm -f "${pkgdir}/${_jvmdir}/lib/security/cacerts"
109
ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}/${_jvmdir}/lib/security/cacerts"
110
111
# Icons and launchers
112
for s in 16 24 32 48; do
113
install -Dm644 "${srcdir}/${_jdkname}${s}.png" "${pkgdir}/usr/share/icons/hicolor/${s}x${s}/apps/${_jdkname}.png"
114
done
115
for f in java jconsole jshell; do
116
install -Dm644 "${srcdir}/freedesktop-${f}.desktop" "${pkgdir}/usr/share/applications/${f}-${_jdkname}.desktop"
117
done
118
}
119
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |