masterpdfeditor-qt6
LOW
maintainer ninetailedtori
1 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads the source from the project's official domain and builds from it; the untrusted host flag is a false positive as code-industry.net is the legitimate publisher, and the checksum is verified against the same site.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads the source from the project's official domain and builds from it; the untrusted host flag is a false positive as code-industry.net is the legitimate publisher, and the checksum is verified against the same site.
2 higher static findings superseded - not the current verdict (shown for transparency)
Medium
External download from an untrusted host, not in source=()
external_download_not_in_source
curl/wget fetches a URL on a non-allowlisted host that is not part of source=(), so it is not checksum-verified by makepkg.
-
PKGBUILD:13
_checksum=$(curl 'https://code-industry.net/checksum-information/' | grep -oP '[a-f0-9]{40}(?=.*master-pdf-editor-'"${pkgver}${_patchver}"'-qt6.11.1.x86_64.tar.gz)')
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:42
"https://code-industry.net/public/master-pdf-editor-${pkgver}${_patchver}-qt6.11.1.x86_64.tar.gz"
PKGBUILD
2 offending line(s) highlighted
1
#!/usr/bin/env bash
2
# shellcheck disable=SC2034,SC2148,SC2154
3
#
4
# Maintainer: Toria <ninetailedtori@uwu.gal>
5
#
6
_pkgname=masterpdfeditor
7
pkgname="${_pkgname}-qt6"
8
pkgver=5.9.99
9
_patchver=''
10
pkgrel=1
11
pkgdesc='A complete solution for viewing, creating and editing PDF files.'
12
url='https://code-industry.net/free-pdf-editor/'
13
_checksum=$(curl 'https://code-industry.net/checksum-information/' | grep -oP '[a-f0-9]{40}(?=.*master-pdf-editor-'"${pkgver}${_patchver}"'-qt6.11.1.x86_64.tar.gz)')
14
_checksum=${checksum% *}
15
_checksum=${checksum:-f6e09030bca6bc16bebb34a494e90b63ab5df484}
16
arch=('x86_64')
17
license=('custom')
18
makedepends=(
19
'curl'
20
'patchelf'
21
)
22
provides=("${_pkgname}=${pkgver}")
23
conflicts=(
24
"${_pkgname}-qt_include"
25
"${_pkgname}-qt5"
26
)
27
depends=(
28
'libgl'
29
'pkcs11-helper'
30
'sane'
31
'qt6-base'
32
'qt6-svg'
33
'qt6-declarative'
34
'qt6-5compat'
35
'xcb-util-image'
36
'xcb-util-keysyms'
37
'xcb-util-renderutil'
38
'xcb-util-wm'
39
'glibc>=2.28'
40
)
41
source_x86_64=(
42
"https://code-industry.net/public/master-pdf-editor-${pkgver}${_patchver}-qt6.11.1.x86_64.tar.gz"
43
)
44
sha1sums_x86_64=(
45
"${_checksum}"
46
)
47
48
package() {
49
# Move all required files to opt/masterpdfeditor
50
install -d \
51
"${pkgdir}/opt"
52
install -d \
53
"${pkgdir}/usr/bin"
54
cp -a --no-preserve=ownership \
55
"master-pdf-editor-${pkgver%%.*}" \
56
"${pkgdir}/opt/${_pkgname}"
57
58
# Finally, the application extras, such as launcher
59
cd "${pkgdir}/opt/${_pkgname}" || return 1
60
61
# Link it to /usr/bin for a PATHed binary.
62
ln -sfv '/opt/masterpdfeditor/masterpdfeditor5' "${pkgdir}/usr/bin/masterpdfeditor"
63
64
# Patch the desktop to use usr/bin launcher
65
sed -i \
66
-e 's|^Exec=.*|Exec=/usr/bin/masterpdfeditor %f|' \
67
-e 's|^Path=.*|Path=/opt/masterpdfeditor|' \
68
-e 's|^Icon=.*|Icon=/opt/masterpdfeditor/masterpdfeditor5.png|' \
69
"${_pkgname}${pkgver%%.*}.desktop"
70
71
# Install all the files.
72
install -Dm644 \
73
"${_pkgname}${pkgver%%.*}.desktop" \
74
-t "${pkgdir}/usr/share/applications/"
75
install -Dm644 \
76
'license_en.txt' \
77
-t "${pkgdir}/usr/share/licenses/${pkgname}/"
78
}
79
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 3 |
| 2026-09-16 00:03:17 | Low | 3 |
| 2026-09-15 00:25:31 | Low | 3 |
| 2026-09-14 00:27:57 | Low | 3 |
| 2026-09-13 00:19:54 | Low | 3 |
| 2026-09-12 00:25:17 | Low | 3 |
| 2026-09-11 00:19:22 | Low | 3 |
| 2026-09-10 00:22:44 | Low | 3 |
| 2026-09-09 00:04:09 | Low | 3 |
| 2026-09-08 00:18:08 | Low | 3 |
| 2026-09-07 00:30:15 | Low | 3 |
| 2026-09-06 00:17:06 | Low | 3 |
| 2026-09-05 00:16:27 | Low | 3 |
| 2026-09-04 00:03:13 | Low | 3 |
| 2026-09-03 00:15:47 | Low | 3 |
| 2026-09-02 00:02:31 | Low | 3 |
| 2026-09-01 00:11:19 | Low | 3 |
| 2026-08-31 00:19:57 | Low | 3 |
| 2026-08-30 00:04:14 | Low | 3 |
| 2026-08-29 00:29:17 | Low | 3 |