openjdk-liberica8-full-bin
maintainer Carlson24
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads a prebuilt Liberica JDK binary from the official bell-sw.com domain, which is the vendor's legitimate release infrastructure; despite the static analyzer flag for a non-whitelisted host, this is a normal and expected source for the software, and the checksum is provided, making the risk low.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt Liberica JDK binary from the official bell-sw.com domain, which is the vendor's legitimate release infrastructure; despite the static analyzer flag for a non-whitelisted host, this is a normal and expected source for the software, and the checksum is provided, making the risk low.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:37
source=("https://download.bell-sw.com/java/${_jdkver}+${_bellver}/bellsoft-jdk${_jdkver}+${_bellver}-linux-amd64-full.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Aubrey Carlson (Carlson) <aubreycarlson24@outlook.com>
2
3
_javaver=8
4
_bellver=11
5
_jdkver=8u472
6
7
pkgname="openjdk-liberica8-full-bin"
8
pkgver="${_javaver}+${_bellver}+${_jdkver}"
9
pkgrel=1
10
pkgdesc="Liberica ${_javaver} includes LibericaFX, which is based on OpenJFX ${_javaver} and Minimal VM, where suitable."
11
arch=('x86_64')
12
url='https://https://bell-sw.com/pages/downloads'
13
license=('custom')
14
depends=('java-environment-common>=3'
15
'java-runtime-common>=3'
16
'ca-certificates-utils')
17
provides=("java-environment=${_javaver}"
18
"java-environment-openjdk=${_javaver}"
19
"java-runtime=${_javaver}"
20
"java-runtime-openjdk=${_javaver}"
21
"java-runtime-headless=${_javaver}"
22
"java-runtime-headless-openjdk=${_javaver}"
23
"jre-openjdk=${_javaver}"
24
"jdk-openjdk=${_javaver}"
25
"jre-openjdk-headless=${_javaver}"
26
"java-openjfx=${_javaver}"
27
"java${_javaver}-environment=${_javaver}"
28
"java${_javaver}-environment-openjdk=${_javaver}"
29
"java${_javaver}-runtime=${_javaver}"
30
"java${_javaver}-runtime-openjdk=${_javaver}"
31
"java${_javaver}-runtime-headless=${_javaver}"
32
"java${_javaver}-runtime-headless-openjdk=${_javaver}"
33
"jre${_javaver}-openjdk=${_javaver}"
34
"jdk${_javaver}-openjdk=${_javaver}"
35
"jre${_javaver}-openjdk-headless=${_javaver}"
36
"java${_javaver}-openjfx=${_javaver}")
37
source=("https://download.bell-sw.com/java/${_jdkver}+${_bellver}/bellsoft-jdk${_jdkver}+${_bellver}-linux-amd64-full.tar.gz")
38
sha1sums=('ff9f4b2fc62bb977e6675eb9d666cf085dd2c23d')
39
install="install_${pkgname}.sh"
40
41
_jvmdir="/usr/lib/jvm/${pkgname}"
42
43
_conf_files=(
44
amd64/jvm.cfg
45
calendars.properties
46
content-types.properties
47
flavormap.properties
48
images/cursors/cursors.properties
49
logging.properties
50
management/jmxremote.access
51
management/jmxremote.password
52
management/management.properties
53
management/snmp.acl
54
net.properties
55
psfont.properties.ja
56
psfontj2d.properties
57
security/java.policy
58
security/java.security
59
sound.properties
60
)
61
62
package() {
63
cd ${srcdir}/jdk${_jdkver}-full
64
install -dm 755 "${pkgdir}${_jvmdir}"
65
cp -a . "${pkgdir}${_jvmdir}"
66
67
# Conf
68
mv "${pkgdir}${_jvmdir}"/jre/lib/management/jmxremote.password{.template,}
69
mv "${pkgdir}${_jvmdir}"/jre/lib/management/snmp.acl{.template,}
70
install -dm 755 "${pkgdir}/etc/openjdk-liberica/${pkgname}"
71
for f in "${_conf_files[@]}"; do
72
_file="${_jvmdir}/jre/lib/$f"
73
install -Dm 644 "${pkgdir}${_file}" "${pkgdir}/etc/openjdk-liberica/${pkgname}/$f"
74
ln -sf "/etc/openjdk-liberica/${pkgname}/$f" "${pkgdir}${_file}"
75
done
76
77
# Legal
78
install -dm 755 "${pkgdir}/usr/share/licenses/${pkgname}/"
79
install -Dm 644 ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README "${pkgdir}/usr/share/licenses/${pkgname}"
80
81
# Man pages
82
for f in bin/*; do
83
f=$(basename "${f}")
84
_man=man/man1/"${f}.1"
85
test -f "${_man}" && install -Dm 644 "${_man}" "${pkgdir}/usr/share/man/man1/${f}-bell${_javaver}.1"
86
done
87
rm -r "${pkgdir}${_jvmdir}/man"
88
ln -s /usr/share/man "${pkgdir}${_jvmdir}/man"
89
90
# Link JKS keystore from ca-certificates-utils
91
rm -f "${pkgdir}${_jvmdir}/lib/security/cacerts"
92
ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}${_jvmdir}/jre/lib/security/cacerts"
93
}
94
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |