mobac-svn

LOW

maintainer erzsebetszabo 10 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source uses an SVN checkout from svn.code.sf.net, a non-whitelisted but project-associated host; this is a standard AUR practice for building from upstream source, posing minimal risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source uses an SVN checkout from svn.code.sf.net, a non-whitelisted but project-associated host; this is a standard AUR practice for building from upstream source, posing minimal risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 source=('mobac.desktop' 'directories.ini' 'mobac::svn://svn.code.sf.net/p/mobac/code/trunk')

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Jozef Riha <jose1711 at gmail dot com>
    
      2
    
      3pkgname=mobac-svn
    
      4pkgver=r2274
    
      5pkgrel=1
    
      6pkgdesc="application that creates atlases for the J2ME application TrekBuddy"
    
      7arch=('i686' 'x86_64')
    
      8url="http://mobac.sourceforge.net/"
    
      9license=('GPL')
    
      10depends=('java-runtime')
    
      11makedepends=('apache-ant' 'sed' 'subversion' 'java-environment')
    
      12source=('mobac.desktop' 'directories.ini' 'mobac::svn://svn.code.sf.net/p/mobac/code/trunk')
    
      13md5sums=('78a831bdc101f859138700f7e61ff148'
    
      14         'eacac8afe131dda257e5d3dfff6c6ac5'
    
      15         'SKIP')
    
      16
    
      17provides=('mobac')
    
      18conflicts=('mobac')
    
      19
    
      20#_svntrunk="http://svn.code.sf.net/p/mobac/code/trunk/"
    
      21#_svnmod="mobac"
    
      22
    
      23pkgver() {
    
      24 cd "${pkgname%%-svn}"
    
      25 local ver="$(svnversion)"
    
      26 printf "r%s" "${ver//[[:alpha:]]}"
    
      27}
    
      28
    
      29
    
      30build() {
    
      31	cd $srcdir/mobac/MOBAC
    
      32	ant #|| /usr/share/java/apache-ant/bin/ant
    
      33}
    
      34
    
      35package() {
    
      36	cd $srcdir/mobac/MOBAC
    
      37	mkdir -p $pkgdir/usr/share/mobac/mapsources
    
      38	install -Dm 644 ./Mobile_Atlas_Creator.jar $pkgdir/usr/share/mobac/Mobile_Atlas_Creator.jar
    
      39	install -Dm 644 ./README.HTM $pkgdir/usr/share/mobac/README.html
    
      40	install -Dm 644 ./CHANGELOG.txt $pkgdir/usr/share/mobac/CHANGELOG.txt
    
      41	install -Dm 644 ./gpl.txt $pkgdir/usr/share/mobac/gpl.txt
    
      42	# we need to supply the full path to starting script
    
      43	/usr/bin/sed "s/Mobile_Atlas_Creator.jar/\/usr\/share\/mobac\/Mobile_Atlas_Creator.jar/" ./start.sh >./mobac
    
      44	install -Dm 755 ./mobac $pkgdir/usr/bin/mobac
    
      45	install -Dm 644 ../website/images/logo3.png $pkgdir/usr/share/pixmaps/mobac.png
    
      46	install -Dm 644 $srcdir/mobac.desktop $pkgdir/usr/share/applications/mobac.desktop
    
      47	install -Dm 644 $srcdir/directories.ini $pkgdir/usr/share/mobac/directories.ini
    
      48	find $srcdir/mobac/MOBAC/mapsources -maxdepth 1 -type f -name "*jar" -exec cp '{}' $pkgdir/usr/share/mobac/mapsources \;
    
      49}
    
      50

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2