liberica-nik-23-full-bin

maintainer parsaloi · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt Liberica NIK JDK from the official bell-sw.com domain, which is the project's own release infrastructure; despite the static analyzer flaging the host as non-standard, the source is legitimate and expected for this package.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt Liberica NIK JDK from the official bell-sw.com domain, which is the project's own release infrastructure; despite the static analyzer flaging the host as non-standard, the source is legitimate and expected for this package.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:59 "https://download.bell-sw.com/vm/${_nikver/+*}/bellsoft-liberica-vm-full-openjdk${_pkgver}-${_nikver}+1-linux-amd64.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Elvis Parsaloi <parsaloi35@gmail.com>
    
      2_jdkname=liberica-nik-23-full
    
      3pkgname="${_jdkname}-bin"
    
      4_java_ver=21
    
      5_pkgver=${_java_ver}.0.8+13
    
      6_nikver=23.1.8
    
      7pkgver=${_nikver/+/.}
    
      8pkgrel=1
    
      9pkgdesc='Liberica NIK is a downstream of GraalVM Community edition. The full version provides support for JavaFX and Swing.'
    
      10arch=(x86_64)
    
      11url='https://bell-sw.com/'
    
      12license=('custom')
    
      13depends=('java-environment-common=3' 'java-runtime-common>=3' 'ca-certificates-utils')
    
      14optdepends=('ffmpeg' 'freetype2' 'gtk2' 'gtk3' 'libnet')
    
      15provides=(
    
      16  "java-environment=${_java_ver}"
    
      17  "java-environment-openjdk=${_java_ver}"
    
      18  "java-openjfx=${_java_ver}"
    
      19  "java-runtime-headless=${_java_ver}"
    
      20  "java-runtime-headless-openjdk=${_java_ver}"
    
      21  "java-runtime=${_java_ver}"
    
      22  "java-runtime-openjdk=${_java_ver}"
    
      23  "liberica-jdk-${_java_ver}-bin=${_pkgver}"
    
      24  "liberica-jdk-${_java_ver}-full-bin=${_pkgver}"
    
      25  "liberica-jdk-${_java_ver}-lite-bin=${_pkgver}"
    
      26  "liberica-jre-${_java_ver}-bin=${_pkgver}"
    
      27  "liberica-jre-${_java_ver}-full-bin=${_pkgver}"
    
      28)
    
      29install=${_jdkname}.install
    
      30
    
      31backup=(
    
      32  "etc/${_jdkname}/logging.properties"
    
      33  "etc/${_jdkname}/management/jmxremote.access"
    
      34  "etc/${_jdkname}/management/jmxremote.password.template"
    
      35  "etc/${_jdkname}/management/management.properties"
    
      36  "etc/${_jdkname}/net.properties"
    
      37  "etc/${_jdkname}/security/java.policy"
    
      38  "etc/${_jdkname}/security/java.security"
    
      39  "etc/${_jdkname}/security/policy/README.txt"
    
      40  "etc/${_jdkname}/security/policy/limited/default_US_export.policy"
    
      41  "etc/${_jdkname}/security/policy/limited/default_local.policy"
    
      42  "etc/${_jdkname}/security/policy/limited/exempt_local.policy"
    
      43  "etc/${_jdkname}/security/policy/unlimited/default_US_export.policy"
    
      44  "etc/${_jdkname}/security/policy/unlimited/default_local.policy"
    
      45  "etc/${_jdkname}/sound.properties"
    
      46)
    
      47
    
      48source=(
    
      49  'freedesktop-java.desktop.in'
    
      50  'freedesktop-jconsole.desktop.in'
    
      51  'freedesktop-jshell.desktop.in'
    
      52  "${_jdkname}16.png::https://raw.githubusercontent.com/openjdk/jdk/master/src/java.desktop/unix/classes/sun/awt/X11/java-icon16.png"
    
      53  "${_jdkname}24.png::https://raw.githubusercontent.com/openjdk/jdk/master/src/java.desktop/unix/classes/sun/awt/X11/java-icon24.png"
    
      54  "${_jdkname}32.png::https://raw.githubusercontent.com/openjdk/jdk/master/src/java.desktop/unix/classes/sun/awt/X11/java-icon32.png"
    
      55  "${_jdkname}48.png::https://raw.githubusercontent.com/openjdk/jdk/master/src/java.desktop/unix/classes/sun/awt/X11/java-icon48.png"
    
      56)
    
      57
    
      58source_x86_64=(
    
      59  "https://download.bell-sw.com/vm/${_nikver/+*}/bellsoft-liberica-vm-full-openjdk${_pkgver}-${_nikver}+1-linux-amd64.tar.gz"
    
      60)
    
      61
    
      62sha1sums=(  
    
      63  '648589b6de677b9ef3f8864494bf69aaa7e4fc8e'
    
      64  '00eacd0bb3f880bfac258413431388ff0613dadb'
    
      65  '4039a3cbbea0467f224b324ee4fe5d378a49d4aa'
    
      66  '36096a57cebd346e08efc68326fe77960d43726f'
    
      67  'b8233f9ff931ce97a265827fac18ed90f4e248c6'
    
      68  'a0da2952bc87a425182c3ac88e88649fbaa7cb65'
    
      69  'eb36aa73a9be98164447774217865b91e79d503c'
    
      70)
    
      71
    
      72sha1sums_x86_64=('76718e38bd6123fc8a9bcc258d54044deb5cce77')
    
      73
    
      74_jvmdir="/usr/lib/jvm/${_jdkname}"
    
      75
    
      76prepare() {
    
      77  for f in *.desktop.in; do
    
      78    sed "s|@@VER@@|${_java_ver}|g" "$f" > "${f/.in/}"
    
      79  done
    
      80}
    
      81
    
      82package() {
    
      83  cd "bellsoft-liberica-vm-full-openjdk${_java_ver}-${_nikver/+*}"
    
      84
    
      85  install -dm 755 "${pkgdir}/${_jvmdir}"
    
      86  cp -a . "${pkgdir}/${_jvmdir}/"
    
      87
    
      88  # Conf
    
      89  install -dm 755 "${pkgdir}/etc"
    
      90  cp -r conf "${pkgdir}/etc/${_jdkname}"
    
      91  rm -rf "${pkgdir}/${_jvmdir}/conf"
    
      92  ln -s "/etc/${_jdkname}" "${pkgdir}/${_jvmdir}/conf"
    
      93
    
      94  # Legal
    
      95  install -dm 755 "${pkgdir}/usr/share/licenses"
    
      96  cp -r legal "${pkgdir}/usr/share/licenses/${_jdkname}"
    
      97  rm -rf "${pkgdir}/${_jvmdir}/legal"
    
      98  ln -s "/usr/share/licenses/${_jdkname}" "${pkgdir}/${_jvmdir}/legal"
    
      99
    
      100  # Man pages
    
      101  for f in man/man1/*; do
    
      102    install -Dm 644 "${f}" "${pkgdir}/usr/share/${f/\.1/-${_jdkname}.1}"
    
      103  done
    
      104  rm -rf "${pkgdir}/${_jvmdir}/man"
    
      105  ln -s /usr/share/man "${pkgdir}/${_jvmdir}/man"
    
      106
    
      107  # Link JKS keystore from ca-certificates-utils
    
      108  rm -f "${pkgdir}/${_jvmdir}/lib/security/cacerts"
    
      109  ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}/${_jvmdir}/lib/security/cacerts"
    
      110
    
      111  # Icons and launchers
    
      112  for s in 16 24 32 48; do
    
      113    install -Dm644 "${srcdir}/${_jdkname}${s}.png" "${pkgdir}/usr/share/icons/hicolor/${s}x${s}/apps/${_jdkname}.png"
    
      114  done
    
      115  for f in java jconsole jshell; do
    
      116    install -Dm644 "${srcdir}/freedesktop-${f}.desktop" "${pkgdir}/usr/share/applications/${f}-${_jdkname}.desktop"
    
      117  done
    
      118}
    
      119

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2