neo4j-enterprise
LOW
maintainer deeenes
2 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a prebuilt tarball from neo4j's official distribution domain (dist.neo4j.org), which is plausibly owned by the project;虽非白名单主机，但属项目官方发布渠道，且为常规源码/二进制分发，无远程代码执行或恶意 payload 行为，风险较低。
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a prebuilt tarball from neo4j's official distribution domain (dist.neo4j.org), which is plausibly owned by the project;虽非白名单主机，但属项目官方发布渠道，且为常规源码/二进制分发，无远程代码执行或恶意 payload 行为，风险较低。
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:17
source=(http://dist.neo4j.org/neo4j-enterprise-$pkgver-unix.tar.gz
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Denes Turei <turei.denes@gmail.com>
2
# Contributor: Amina Khakimova <hakami1024@gmail.com>
3
# Contributor: Marcel Campello Ferreira <marcel.campello.ferreira@gmail.com>
4
pkgname=neo4j-enterprise
5
pkgver=5.26.2
6
pkgrel=1
7
pkgdesc='A fully transactional graph database implemented in Java'
8
arch=(any)
9
url=https://neo4j.com/
10
license=(custom)
11
makedepends=(patch)
12
depends=('jre21-openjdk-headless')
13
conflicts=(neo4j-community)
14
backup=(etc/neo4j/neo4j.conf)
15
options=(!strip)
16
install=neo4j.install
17
source=(http://dist.neo4j.org/neo4j-enterprise-$pkgver-unix.tar.gz
18
startup-scripts-fix-paths.patch
19
neo4j.conf
20
neo4j.install
21
neo4j.service
22
neo4j-tmpfile.conf)
23
24
sha256sums=('6d478c1e3f1cc2a8d29ebcec4e4793831d5174cb7d81c8461a329e7df70cda1a'
25
'ba057fa99e9649e77e3dcdf97f28dcf9484c3af0b2136dd520dd2a4908728a87'
26
'12ba8a4bfb3af738535d481c93d190790bc59647228b254225c3aede92e85434'
27
'8cdf6de9864f66b8f435b8da5c04245a7fa23dde986cc7aec3133261e4003c64'
28
'e2c465a8ffb0cb81bf338cc458fbc916bd958fe11bd272823b5cfe423d42b6c5'
29
'e1311352e05b1e698599b91883141b938ceb418abd7e6bc11cc964854f0a21e1')
30
31
prepare() {
32
cd $srcdir/$pkgname-$pkgver
33
patch --forward --strip=1 --input=../startup-scripts-fix-paths.patch
34
}
35
36
package() {
37
cd $srcdir/$pkgname-$pkgver
38
39
# Config files
40
CONFIG_DIR=etc/neo4j
41
install -dm755 $pkgdir/$CONFIG_DIR
42
[[ $(ls -A conf/* 2>/dev/null) ]] && cp -r data/* $pkgdir/$CONFIG_DIR
43
install -Dm644 $srcdir/neo4j.conf $pkgdir/etc/neo4j/neo4j.conf
44
45
# Data, import and log files
46
DATA_DIR=var/lib/neo4j/data
47
install -dm755 $pkgdir/$DATA_DIR
48
[[ $(ls -A data/* 2>/dev/null) ]] && cp -r data/* $pkgdir/$DATA_DIR
49
50
IMPORT_DIR=var/lib/neo4j/import
51
install -dm755 $pkgdir/$IMPORT_DIR
52
[[ $(ls -A import/* 2>/dev/null) ]] && cp -r import/* $pkgdir/$IMPORT_DIR
53
54
LOG_DIR=var/log/neo4j
55
install -dm755 $pkgdir/$LOG_DIR
56
[[ $(ls -A logs/* 2>/dev/null) ]] && cp -r logs/* $pkgdir/$LOG_DIR
57
58
# Copy JARs in lib and plugins
59
LIB_DIR=usr/share/java/neo4j
60
install -dm755 $pkgdir/$LIB_DIR
61
[[ $(ls -A lib/* 2>/dev/null) ]] && cp -r lib/* $pkgdir/$LIB_DIR
62
63
PLUGINS_DIR=usr/share/java/neo4j/plugins
64
install -dm755 $pkgdir/$PLUGINS_DIR
65
[[ $(ls -A plugins/* 2>/dev/null) ]] && cp -r plugins/* $pkgdir/$PLUGINS_DIR
66
67
# Executable files
68
BIN_DIR=usr/share/neo4j/bin
69
install -dm755 $pkgdir/$BIN_DIR
70
[[ $(ls -A bin/* 2>/dev/null) ]] && cp -r bin/* $pkgdir/$BIN_DIR
71
72
SYSTEM_BIN_DIR=usr/bin
73
install -dm755 $pkgdir/$SYSTEM_BIN_DIR
74
for file in $(find $pkgdir/$BIN_DIR -maxdepth 1 -type f); do
75
b_file=$(basename $file)
76
ln -s /$BIN_DIR/$b_file $pkgdir/$SYSTEM_BIN_DIR/$b_file;
77
done
78
79
# Documentation
80
DOC_DIR=usr/share/doc/neo4j
81
install -dm755 $pkgdir/$DOC_DIR
82
cp README.txt UPGRADE.txt $pkgdir/$DOC_DIR
83
84
# License files
85
LICENSES_DIR=usr/share/licenses/neo4j
86
install -dm755 $pkgdir/$LICENSES_DIR
87
cp LICENSE.txt LICENSES.txt NOTICE.txt $pkgdir/$LICENSES_DIR
88
LICENSE_STATUS_DIR=$pkgdir/usr/share/java/neo4j/licenses
89
mkdir -p $LICENSE_STATUS_DIR
90
echo -n "yes" > $LICENSE_STATUS_DIR/ACCEPT_LICENSE_AGREEMENT
91
92
# Service definition files
93
install -Dm644 $srcdir/neo4j.service $pkgdir/usr/lib/systemd/system/neo4j.service
94
95
# Runtime files
96
install -Dm644 $srcdir/neo4j-tmpfile.conf $pkgdir/usr/lib/tmpfiles.d/neo4j.conf
97
}
98
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |