pdmaner

LOW

maintainer coolerfall 1 votes scanned 2026-11-01 00:21:48.120785

View on AUR

Why flagged

The source is cloned from the project's official Gitee repository, which is a legitimate hosting platform; building from source is normal for AUR packages, and the checksum is only skipped for the git source, which is expected due to its dynamic nature.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is cloned from the project's official Gitee repository, which is a legitimate hosting platform; building from source is normal for AUR packages, and the checksum is only skipped for the git source, which is expected due to its dynamic nature.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 "git+https://gitee.com/robergroup/pdmaner.git"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Vincent Cheung
    
      2
    
      3pkgname=pdmaner
    
      4pkgver=4.5.1
    
      5pkgrel=1
    
      6pkgdesc="一款多操作系统开源免费的桌面版关系数据库模型建模工具"
    
      7arch=('x86_64')
    
      8url="https://gitee.com/robergroup/pdmaner"
    
      9license=('MulanPubL-2.0')
    
      10provides=('pdmaner')
    
      11source=(
    
      12    "git+https://gitee.com/robergroup/pdmaner.git"
    
      13    "pdmaner.desktop"
    
      14)
    
      15sha256sums=(
    
      16    'SKIP'
    
      17    'ddf5e4a6833ef668e956dcf67fe5714b622f04ab42d93c61dfc8d62f5e97a599'
    
      18)
    
      19
    
      20prepare() {
    
      21    cd pdmaner
    
      22    git checkout v${pkgver}
    
      23}
    
      24
    
      25build() {
    
      26    cd "$srcdir/pdmaner"
    
      27    yarn install
    
      28    yarn run package-linux
    
      29}
    
      30
    
      31package() {
    
      32    mkdir -p "${pkgdir}/opt/${pkgname}"
    
      33    unzip "$srcdir/pdmaner/dist/PDManer-linux_v$pkgver.zip" -d "$pkgdir/opt/${pkgname}/"
    
      34
    
      35    find "$pkgdir"/opt/$pkgname/ -type f -exec chmod 644 {} \;
    
      36    chmod 755 "$pkgdir"/opt/$pkgname/pdmaner
    
      37
    
      38    mkdir -p "$pkgdir"/usr/bin
    
      39    ln -sf /opt/$pkgname/pdmaner "$pkgdir"/usr/bin/$pkgname
    
      40    install -Dm0644 $pkgname.desktop $pkgdir/usr/share/applications/$pkgname.desktop
    
      41    install -Dm0644 $srcdir/pdmaner/public/256x256.png "$pkgdir"/usr/share/pixmaps/$pkgname.png
    
      42}
    
      43
    
      44

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-01 00:21:48	Low	2
2026-10-31 00:07:41	Low	2
2026-10-30 00:29:30	Low	2
2026-10-29 00:13:55	Low	2
2026-10-28 00:06:54	Low	2
2026-10-27 00:23:28	Low	2
2026-10-26 00:12:40	Low	2
2026-10-25 00:20:48	Low	2
2026-10-24 00:14:55	Low	2
2026-10-23 00:02:19	Low	2
2026-10-22 00:13:10	Low	2
2026-10-21 00:12:50	Low	2
2026-10-20 00:10:31	Low	2
2026-10-19 00:03:55	Low	2
2026-10-18 00:06:55	Low	2
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2