pentaxpj-cups
LOW
maintainer dreieck
1 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The package downloads source code and documentation from non-whitelisted but plausible project-related hosts (openprinting.org, archive.org, web.archive.org); the content consists of PPD files, a CUPS filter, and user manuals—non-executable data or project-owned buildable source—posing no remote code execution or supply-chain risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads source code and documentation from non-whitelisted but plausible project-related hosts (openprinting.org, archive.org, web.archive.org); the content consists of PPD files, a CUPS filter, and user manuals—non-executable data or project-owned buildable source—posing no remote code execution or supply-chain risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:44
"${_target}::https://www.openprinting.org/download/printing/pentaxpj/pocketjet_cups/pocketjet_CUPS.tar.gz" -
PKGBUILD:46
"Pentax_PocketJet_II_and_PocketJet_200_users_guide.pdf::http://web.archive.org/web/20071017093018/http://www.megatron.fr/imprimantes/pdf/manuels/thermal/#pentax/doc_pocketjet_II-200_user_guide_e.pdf" -
PKGBUILD:47
"Pentax_PocketJet_3_and_PocketJet_3plus_users_guide.pdf::https://archive.org/download/manualsbase-id-384912/384912.pdf"
PKGBUILD
3 offending line(s) highlighted
1
# Maintainer: dreieck
2
3
# PKGBUILD last time manually edited: At least on 2024-12-18.
4
5
_pkgname=pentaxpj-cups
6
pkgname="${_pkgname}"
7
epoch=0
8
pkgver=2.0.0
9
pkgrel=1
10
pkgdesc="PPD files and printer filter for Pentax PocketJet 200, PocketJet II, PocketJet 3 and PocketJet 3plus printers."
11
arch=('i686' 'x86_64')
12
url="https://www.openprinting.org/download/printing/pentaxpj/pocketjet_cups/"
13
license=(
14
'GPL-2.0-only'
15
'LicenseRef-custom:proprietary'
16
)
17
18
# groups=(
19
# "pentaxpj"
20
# )
21
22
depends=(
23
"glibc"
24
"libcups"
25
)
26
27
makedepends=(
28
"libcups" # For 'cups-config'
29
)
30
31
provides=(
32
# "${_pkgname}=${pkgver}"
33
"pentax-pocketjet-2-manual=2004"
34
"pentax-pocketjet-200-manual=2004"
35
"pentax-pocketjet-ii-manual=2004"
36
"pentax-pocketjet-3-manual=2004"
37
"pentax-pocketjet-3plus-manual=2004"
38
)
39
40
_target="${_pkgname}-${pkgver}.tar.gz"
41
_gccfixuppatch="${_pkgname}-${pkgver}-gcc-fixup.patch"
42
43
source=(
44
"${_target}::https://www.openprinting.org/download/printing/pentaxpj/pocketjet_cups/pocketjet_CUPS.tar.gz"
45
"${_gccfixuppatch}::https://www.openprinting.org/download/printing/pentaxpj/pocketjet_cups/pocketjet-fix.patch"
46
"Pentax_PocketJet_II_and_PocketJet_200_users_guide.pdf::http://web.archive.org/web/20071017093018/http://www.megatron.fr/imprimantes/pdf/manuels/thermal/#pentax/doc_pocketjet_II-200_user_guide_e.pdf"
47
"Pentax_PocketJet_3_and_PocketJet_3plus_users_guide.pdf::https://archive.org/download/manualsbase-id-384912/384912.pdf"
48
"license_users-guide_info.txt"
49
)
50
51
sha256sums=(
52
"3c395dfebbdcd0c93b6cf6c714e16940b80ba2580728400238beb9a3486fc9f5"
53
"fe981425bda813d4e659a384efe0584446cc9dc89af1d1f7905ac87e92a402d9"
54
"ab714ff7dac4cf61261b63836cc238873936c0816b5978d265acf49ffcb3cfcc"
55
"18fbf3edaea8ee10e9dd12741b5fb4122b3bb207c1dc63c173b958293691b4db"
56
"385590851fdc8464f0cb844f0d93e2b625ee46772ce8fad9d287d640db7e9fc2"
57
)
58
59
options+=('emptydirs')
60
61
prepare() {
62
cd "${srcdir}/pocketjet_CUPS"
63
64
patch -Np0 -i "${srcdir}/${_gccfixuppatch}"
65
66
# './configure' is needed for 'pkgver()'.
67
./configure \
68
--prefix=/usr \
69
--bindir=/usr/bin \
70
--sbindir=/usr/bin
71
}
72
73
pkgver() {
74
cd "${srcdir}/pocketjet_CUPS"
75
76
grep -E '^[[:space:]]*#define[[:space:]]+VERSION' config.h | awk '{print $3}' | tr -d \"\'
77
}
78
79
build() {
80
cd "${srcdir}/pocketjet_CUPS"
81
82
make
83
}
84
85
package() {
86
cd "${srcdir}/pocketjet_CUPS"
87
88
install -Dvm755 -t "${pkgdir}/$(cups-config --serverbin)/filter"/ rastertopocketjet
89
install -Dvm644 -t "${pkgdir}/$(cups-config --datadir)/model"/pentaxpj/ *.ppd
90
91
install -Dvm644 -t "${pkgdir}/usr/share/doc/${_pkgname}"/ AUTHORS INSTALL NEWS README "${srcdir}"/{Pentax_PocketJet_II_and_PocketJet_200_users_guide.pdf,Pentax_PocketJet_3_and_PocketJet_3plus_users_guide.pdf}
92
install -Dvm644 -t "${pkgdir}/usr/share/licenses/${pkgname}" COPYING "${srcdir}/license_users-guide_info.txt"
93
}
94
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |