n80-printer-bin

MEDIUM

maintainer ZonicTrout 0 votes scanned 2026-08-28 01:36:49.699239

View on AUR

Why flagged

Installs a prebuilt architecture-specific binary (rastertoN80 CUPS filter) from a Shopify CDN, which is not the project's own release infrastructure and could be silently swapped; however, the sha512 checksum is present and the vendor URL is plausibly legitimate for a thermal printer driver.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source=("https://cdn.shopify.com/s/files/1/0608/6128/4400/files/N80-Driver-Linux-v1.0.5.tar.gz")

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 65%): Installs a prebuilt architecture-specific binary (rastertoN80 CUPS filter) from a Shopify CDN, which is not the project's own release infrastructure and could be silently swapped; however, the sha512 checksum is present and the vendor URL is plausibly legitimate for a thermal printer driver.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: ZonicTrout AUR@zonictrout.net 
    
      2#
    
      3pkgname="n80-printer-bin"
    
      4pkgver="1.0.5"
    
      5pkgrel="1"
    
      6pkgdesc="Installs the driver tarball for the N80 Thermal printer (sold by the company NDYIN)"
    
      7arch=("x86_64" "i686" "aarch64" "armv7h")
    
      8options=('!debug')
    
      9url="https://ndyin.com/pages/download"
    
      10depends=("cups")
    
      11optdepends=("cups-pdf")
    
      12license=("custom")
    
      13source=("https://cdn.shopify.com/s/files/1/0608/6128/4400/files/N80-Driver-Linux-v1.0.5.tar.gz")
    
      14sha512sums=("e59b002843944ec715d08ec5603c41465039bea06e5a4811ced0aa5cd72ff0f2acc2ec4d8ccc71c636a7e15bd976b5f2d7a14554cb9c8aba4fcfae84bc381db1")
    
      15
    
      16package() {
    
      17  mkdir -p "${pkgdir}/usr/share/cups/model/"
    
      18  mkdir -p "${pkgdir}/usr/lib/cups/filter/"
    
      19
    
      20  if [[ "$CARCH" == "x86_64" ]]; then
    
      21    _archdir="x86_64"
    
      22  elif [[ "$CARCH" == "aarch64" ]]; then
    
      23    _archdir="aarch64"
    
      24  elif [[ "$CARCH" == "armv7h" ]]; then
    
      25    _archdir="armv7l"
    
      26  elif [[ "$CARCH" == "i686" ]]; then
    
      27    _archdir="i386"
    
      28  else
    
      29    echo "Unsupported architecture: $CARCH"
    
      30    return 1
    
      31  fi
    
      32
    
      33  /usr/bin/install -m 755 "${srcdir}/Linux_ZHJY-N80_driver_v1.0.5/filter/$_archdir/rastertoN80" "${pkgdir}/usr/lib/cups/filter/rastertoN80"
    
      34
    
      35  /usr/bin/install -m 755 -d "${pkgdir}/usr/share/cups/model/"
    
      36  /usr/bin/install -m 644 "${srcdir}/Linux_ZHJY-N80_driver_v1.0.5/ppd/ZHJY-N80.ppd" "${pkgdir}/usr/share/cups/model/"
    
      37
    
      38}
    
      39
    
      40

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-28 01:36:49	Medium	3
2026-08-28 01:33:41	Medium	2