nconvert-bin
LOW
maintainer dvoraksw
1 votes
scanned 2026-10-28 00:06:54.512692
Why flagged
The package downloads a prebuilt binary from the official vendor's download domain (xnview.com), which is the project's legitimate source; while the host may not be on a whitelist, it is not swappable by an unrelated party, and the checksums are provided, making this a standard AUR binary package with low risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt binary from the official vendor's download domain (xnview.com), which is the project's legitimate source; while the host may not be on a whitelist, it is not swappable by an unrelated party, and the checksums are provided, making this a standard AUR binary package with low risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:14
source_i686=('https://download.xnview.com/NConvert-linux.tgz')
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Jan Dvorak <(firstname).(lastname) @ dvorak-sw.com>
2
pkgname=nconvert-bin
3
_pkgname=nconvert
4
pkgver=7.300
5
pkgrel=1
6
epoch=
7
pkgdesc="Command line batch image processor and converter from XnSoft."
8
arch=('i686' 'x86_64')
9
url="https://www.xnview.com/en/nconvert/"
10
license=('LicenseRef-custom')
11
depends=('libwebp' 'gcc-libs' 'glibc')
12
conflicts=("${_pkgname}")
13
provides=("${_pkgname}")
14
source_i686=('https://download.xnview.com/NConvert-linux.tgz')
15
source_x86_64=('https://download.xnview.com/NConvert-linux64.tgz')
16
sha256sums_i686=('5e8364bdc1fe61d2c37871e0591ddc2048ccf0cd8041846b433ef04f10280cba')
17
sha256sums_x86_64=('e54276c9f5cdde8836d2732eae14d35e536b6315887ed71494f65f1e4a2f7c14')
18
package() {
19
cd NConvert
20
install -d "${pkgdir}/opt/NConvert"
21
install -d "${pkgdir}/opt/NConvert/Plugins"
22
install -d "${pkgdir}/usr/bin"
23
24
install -m 755 -D nconvert "${pkgdir}/opt/NConvert/nconvert"
25
install -m 644 -D license.txt "${pkgdir}/usr/share/licenses/${pkgname}/license.txt"
26
install -m 644 -D {Formats.txt,ReadMe.txt,Usage.txt,WhatsNew.txt} -t "${pkgdir}/usr/share/doc/${pkgname}"
27
install -m 644 Plugins/{libaom.so.3.13.1,libavif.so,libbrotlicommon.so.1.2.0,libbrotlidec.so.1.2.0,libbrotlienc.so.1.2.0,libde265.so.0.2.1,libheif.so.1.23.1,libIex-3_4.so.33.3.4.10,libIlmThread-3_4.so.33.3.4.10,libImath-3_2.so.30.3.2.2,libjxl_cms.so.0.12.0,libjxl_threads.so.0.12.0,libjxl.so.0.12.0,libOpenEXR-3_4.so.33.3.4.10,libOpenEXRCore-3_4.so.33.3.4.10,libOpenEXRUtil-3_4.so.33.3.4.10,libsharpyuv.so.0.1.2,libwebp.so.7.2.0,libwebpdecoder.so.3.2.0,libwebpdemux.so.2.0.17,libwebpmux.so.3.1.2,libx265.so.215,openjp2.so} -t "${pkgdir}/opt/NConvert/Plugins"
28
install -m 755 Plugins/libJPEGXL.so "${pkgdir}/opt/NConvert/Plugins/libJPEGXL.so"
29
install -m 755 Plugins/libdav1d.so.7.0.0 "${pkgdir}/opt/NConvert/Plugins/libdav1d.so.7.0.0"
30
31
ln -sf /opt/NConvert/nconvert "${pkgdir}/usr/bin/nconvert"
32
ln -sf "./libaom.so.3.13.1" "${pkgdir}/opt/NConvert/Plugins/libaom.so.3"
33
ln -sf "./libaom.so.3" "${pkgdir}/opt/NConvert/Plugins/libaom.so"
34
ln -sf "./libbrotlicommon.so.1.2.0" "${pkgdir}/opt/NConvert/Plugins/libbrotlicommon.so.1"
35
ln -sf "./libbrotlicommon.so.1" "${pkgdir}/opt/NConvert/Plugins/libbrotlicommon.so"
36
ln -sf "./libbrotlidec.so.1.2.0" "${pkgdir}/opt/NConvert/Plugins/libbrotlidec.so.1"
37
ln -sf "./libbrotlidec.so.1" "${pkgdir}/opt/NConvert/Plugins/libbrotlidec.so"
38
ln -sf "./libbrotlienc.so.1.2.0" "${pkgdir}/opt/NConvert/Plugins/libbrotlienc.so.1"
39
ln -sf "./libbrotlienc.so.1" "${pkgdir}/opt/NConvert/Plugins/libbrotlienc.so"
40
ln -sf "./libdav1d.so.7.0.0" "${pkgdir}/opt/NConvert/Plugins/libdav1d.so.7"
41
ln -sf "./libdav1d.so.7" "${pkgdir}/opt/NConvert/Plugins/libdav1d.so"
42
ln -sf "./libde265.so.0.2.1" "${pkgdir}/opt/NConvert/Plugins/libde265.so.0"
43
ln -sf "./libde265.so.0" "${pkgdir}/opt/NConvert/Plugins/libde265.so"
44
ln -sf "./libheif.so.1.23.1" "${pkgdir}/opt/NConvert/Plugins/libheif.so.1"
45
ln -sf "./libheif.so.1" "${pkgdir}/opt/NConvert/Plugins/libheif.so"
46
ln -sf "./libIex-3_4.so.33.3.4.10" "${pkgdir}/opt/NConvert/Plugins/libIex-3_4.so.33"
47
ln -sf "./libIex-3_4.so.33" "${pkgdir}/opt/NConvert/Plugins/libIex-3_4.so"
48
ln -sf "./libIex-3_4.so" "${pkgdir}/opt/NConvert/Plugins/libIex.so"
49
ln -sf "./libIlmThread-3_4.so.33.3.4.10" "${pkgdir}/opt/NConvert/Plugins/libIlmThread-3_4.so.33"
50
ln -sf "./libIlmThread-3_4.so.33" "${pkgdir}/opt/NConvert/Plugins/libIlmThread-3_4.so"
51
ln -sf "./libIlmThread-3_4.so" "${pkgdir}/opt/NConvert/Plugins/libIlmThread.so"
52
ln -sf "./libImath-3_2.so.30.3.2.2" "${pkgdir}/opt/NConvert/Plugins/libImath-3_2.so.30"
53
ln -sf "./libImath-3_2.so.30" "${pkgdir}/opt/NConvert/Plugins/libImath-3_2.so"
54
ln -sf "./libImath-3_2.so" "${pkgdir}/opt/NConvert/Plugins/libImath.so"
55
ln -sf "./libjxl_cms.so.0.12.0" "${pkgdir}/opt/NConvert/Plugins/libjxl_cms.so.0.12"
56
ln -sf "./libjxl_cms.so.0.12" "${pkgdir}/opt/NConvert/Plugins/libjxl_cms.so"
57
ln -sf "./libjxl_threads.so.0.12.0" "${pkgdir}/opt/NConvert/Plugins/libjxl_threads.so.0.12"
58
ln -sf "./libjxl_threads.so.0.12" "${pkgdir}/opt/NConvert/Plugins/libjxl_threads.so"
59
ln -sf "./libjxl.so.0.12.0" "${pkgdir}/opt/NConvert/Plugins/libjxl.so.0.12"
60
ln -sf "./libjxl.so.0.12" "${pkgdir}/opt/NConvert/Plugins/libjxl.so"
61
ln -sf "./libOpenEXR-3_4.so.33.3.4.10" "${pkgdir}/opt/NConvert/Plugins/libOpenEXR-3_4.so.33"
62
ln -sf "./libOpenEXR-3_4.so.33" "${pkgdir}/opt/NConvert/Plugins/libOpenEXR-3_4.so"
63
ln -sf "./libOpenEXR-3_4.so" "${pkgdir}/opt/NConvert/Plugins/libOpenEXR.so"
64
ln -sf "./libOpenEXRCore-3_4.so.33.3.4.10" "${pkgdir}/opt/NConvert/Plugins/libOpenEXRCore-3_4.so.33"
65
ln -sf "./libOpenEXRCore-3_4.so.33" "${pkgdir}/opt/NConvert/Plugins/libOpenEXRCore-3_4.so"
66
ln -sf "./libOpenEXRCore-3_4.so" "${pkgdir}/opt/NConvert/Plugins/libOpenEXRCore.so"
67
ln -sf "./libOpenEXRUtil-3_4.so.33.3.4.10" "${pkgdir}/opt/NConvert/Plugins/libOpenEXRUtil-3_4.so.33"
68
ln -sf "./libOpenEXRUtil-3_4.so.33" "${pkgdir}/opt/NConvert/Plugins/libOpenEXRUtil-3_4.so"
69
ln -sf "./libOpenEXRUtil-3_4.so" "${pkgdir}/opt/NConvert/Plugins/libOpenEXRUtil.so"
70
ln -sf "./libsharpyuv.so.0.1.2" "${pkgdir}/opt/NConvert/Plugins/libsharpyuv.so.0"
71
ln -sf "./libsharpyuv.so.0" "${pkgdir}/opt/NConvert/Plugins/libsharpyuv.so"
72
ln -sf "./libwebp.so.7.2.0" "${pkgdir}/opt/NConvert/Plugins/libwebp.so.7"
73
ln -sf "./libwebp.so.7" "${pkgdir}/opt/NConvert/Plugins/libwebp.so"
74
ln -sf "./libwebpdecoder.so.3.2.0" "${pkgdir}/opt/NConvert/Plugins/libwebpdecoder.so.3"
75
ln -sf "./libwebpdecoder.so.3" "${pkgdir}/opt/NConvert/Plugins/libwebpdecoder.so"
76
ln -sf "./libwebpdemux.so.2.0.17" "${pkgdir}/opt/NConvert/Plugins/libwebpdemux.so.2"
77
ln -sf "./libwebpdemux.so.2" "${pkgdir}/opt/NConvert/Plugins/libwebpdemux.so"
78
ln -sf "./libwebpmux.so.3.1.2" "${pkgdir}/opt/NConvert/Plugins/libwebpmux.so.3"
79
ln -sf "./libwebpmux.so.3" "${pkgdir}/opt/NConvert/Plugins/libwebpmux.so"
80
ln -sf "./libx265.so.215" "${pkgdir}/opt/NConvert/Plugins/libx265.so"
81
}
82
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |
| 2026-10-12 00:18:51 | Low | 2 |
| 2026-10-11 00:26:05 | Low | 2 |
| 2026-10-10 00:11:52 | Low | 2 |
| 2026-10-09 00:05:33 | Low | 2 |