ox-console-bin

maintainer sukanka · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt .deb from the official project domain (doornik.com), which is plausibly the vendor's own release infrastructure; the binary is unpacked and installed locally, which is normal for a *-bin AUR package, and the host, while not on a standard whitelist, is the official source for the software.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt .deb from the official project domain (doornik.com), which is plausibly the vendor's own release infrastructure; the binary is unpacked and installed locally, which is normal for a *-bin AUR package, and the host, while not on a standard whitelist, is the official source for the software.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 source=("${_pkgname}-${pkgver//_/-}-${arch}.deb::https://www.doornik.com/download/oxmetrics9/Ox_Console/oxconsole_${pkgver//_/-}_amd64.deb")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: sukanka <su975853527 at gmail.com>
    
      2pkgname=ox-console-bin
    
      3_pkgname=ox-console
    
      4pkgver=9.10_0
    
      5pkgrel=2
    
      6pkgdesc="A family  of software packages providing an integrated solution for the econometric analysis of time series, forecasting, financial econometric modelling, or statistical analysis of cross-section and panel data."
    
      7arch=('x86_64')
    
      8url="https://www.doornik.com/products.html#OxCons"
    
      9license=('unknown')
    
      10depends=('openmp')
    
      11optdepends=('java-runtime' 'r'
    
      12'python'
    
      13)
    
      14provides=(${_pkgname} oxedit)
    
      15source=("${_pkgname}-${pkgver//_/-}-${arch}.deb::https://www.doornik.com/download/oxmetrics9/Ox_Console/oxconsole_${pkgver//_/-}_amd64.deb")
    
      16sha512sums=('ab0d8d88b21e1c9be65ee50df5d0cf1ab2831be08ae2e402b453b78faf0fc58fe5a524ebe7beb68890b99796d4a4418c17cbbf2fc0ed95f3970f95b0dcf21a75')
    
      17
    
      18
    
      19prepare(){
    
      20  cd ${srcdir}
    
      21  tar -xJvf data.tar.xz -C "${srcdir}"
    
      22  rm -rf usr/lib
    
      23  cd $srcdir/usr/share/OxMetrics${pkgver:0:1}/OxEdit_resources
    
      24  mkdir -p ${srcdir}/usr/share/applications
    
      25  sed -i 's|/usr/share/OxMetrics9/||g'  oxedit${pkgver:0:1}.desktop
    
      26  sed -i '7c Icon=oxedit' oxedit${pkgver:0:1}.desktop
    
      27  mv oxedit${pkgver:0:1}.desktop  ${srcdir}/usr/share/applications/oxedit.desktop
    
      28  for res in {48,256}
    
      29  do
    
      30      install -Dm644 oxedit_${res}x${res}.png  \
    
      31      ${srcdir}/usr/share/icons/hicolor/${res}x${res}/apps/oxedit.png
    
      32  done
    
      33}
    
      34
    
      35package() {
    
      36  cd $srcdir/
    
      37  mv usr $pkgdir
    
      38  cd $pkgdir/usr/share/OxMetrics${pkgver:0:1}
    
      39  mkdir -p ${pkgdir}/usr/bin
    
      40  ln -s /usr/share/OxMetrics${pkgver:0:1}/oxedit ${pkgdir}/usr/bin/oxedit
    
      41  ln -s /usr/share/OxMetrics${pkgver:0:1}/ox/oxl.sh ${pkgdir}/usr/bin/oxl
    
      42  mv ox/libox.so.9.1.0  ox/libox.so.9
    
      43  ln -sf /usr/lib/libomp.so $pkgdir/usr/share/OxMetrics${pkgver:0:1}/ox/libomp.so.5
    
      44
    
      45}
    
      46

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2