masterpdfeditor

maintainer pgoetz · 201 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package downloads a source tarball from the official project domain (code-industry.net) which is not on the whitelist but plausibly legitimate; it installs prebuilt binaries, but from the vendor's own release infrastructure, not a swappable host.

Triggered rules

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a source tarball from the official project domain (code-industry.net) which is not on the whitelist but plausibly legitimate; it installs prebuilt binaries, but from the vendor's own release infrastructure, not a swappable host.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 source_x86_64=("https://code-industry.net/public/master-pdf-editor-${pkgver}-qt6.x86_64.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Patrick Goetz <pgoetz at mail dot utexas dot edu>
    
      2# Contributor: Doug Newgard <scimmia at archlinux dot org>
    
      3# Contributor: Jiachen Yang <farseerfc@gmail.com>
    
      4# Contributor: Miguel Revilla <yo@miguelrevilla.com>
    
      5# Contributor: Ferik <djferik at gmail dot com>
    
      6
    
      7pkgname=masterpdfeditor
    
      8pkgver=5.9.99
    
      9pkgrel=1
    
      10pkgdesc='A complete solution for viewing, creating and editing PDF files'
    
      11url='https://code-industry.net/free-pdf-editor/'
    
      12arch=('x86_64')
    
      13license=('custom')
    
      14makedepends=('patchelf')
    
      15source_x86_64=("https://code-industry.net/public/master-pdf-editor-${pkgver}-qt6.x86_64.tar.gz")
    
      16sha1sums_x86_64=('bbb128f7f23594d11cabbb7865ea85510f0833db')
    
      17
    
      18package() {
    
      19  depends=('libgl' 'pkcs11-helper' 'qt6-base' 'qt6-svg' 'qt6-declarative' 'sane')
    
      20
    
      21  install -d "$pkgdir"{/opt/,/usr/bin/}
    
      22  cp -a --no-preserve=ownership master-pdf-editor-${pkgver%%.*} "$pkgdir/opt/"
    
      23
    
      24  cd "$pkgdir/opt/master-pdf-editor-${pkgver%%.*}"
    
      25  ln -sr masterpdfeditor${pkgver%%.*} -t "$pkgdir/usr/bin/"
    
      26  install -Dm644 usr/share/applications/net.code-industry.masterpdfeditor${pkgver%%.*}.desktop -t "$pkgdir/usr/share/applications/"
    
      27  install -Dm644 license_en.txt -t "$pkgdir/usr/share/licenses/$pkgname/"
    
      28  find usr/share/icons -type f -exec install -Dm644 "{}" "$pkgdir/{}" \;
    
      29  patchelf --remove-rpath masterpdfeditor${pkgver%%.*}
    
      30}
    
      31
    
      32

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-08-18 00:03
@@ -5,18 +5,18 @@
 # Contributor: Ferik <djferik at gmail dot com>
 
 pkgname=masterpdfeditor
-pkgver=5.9.98
-pkgrel=2
+pkgver=5.9.99
+pkgrel=1
 pkgdesc='A complete solution for viewing, creating and editing PDF files'
 url='https://code-industry.net/free-pdf-editor/'
 arch=('x86_64')
 license=('custom')
 makedepends=('patchelf')
-source_x86_64=("https://code-industry.net/public/master-pdf-editor-${pkgver}-1-qt5.x86_64.tar.gz")
-sha1sums_x86_64=('aeffacb7beaa1ced1abd31b6d239dc4820cd760c')
+source_x86_64=("https://code-industry.net/public/master-pdf-editor-${pkgver}-qt6.x86_64.tar.gz")
+sha1sums_x86_64=('bbb128f7f23594d11cabbb7865ea85510f0833db')
 
 package() {
-  depends=('libgl' 'pkcs11-helper' 'qt5-base' 'qt5-svg' 'qt5-declarative' 'sane')
+  depends=('libgl' 'pkcs11-helper' 'qt6-base' 'qt6-svg' 'qt6-declarative' 'sane')
 
   install -d "$pkgdir"{/opt/,/usr/bin/}
   cp -a --no-preserve=ownership master-pdf-editor-${pkgver%%.*} "$pkgdir/opt/"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 00:03:41	LOW	2
2026-08-13 00:17:07	LOW	2
2026-08-12 03:22:23	LOW	2
2026-08-12 01:22:13	LOW	2
2026-06-19 19:07:35	CLEAN	2
2026-06-18 16:11:54	LOW	1