posprint-bin

LOW

maintainer Timfa 0 votes scanned 2026-11-04 00:25:23.536954

View on AUR

Why flagged

The source is a prebuilt binary from the project's official GitLab instance, which is a trusted release location; the non-standard host is the project's own domain, not a generic file host, and the checksum is verified.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a prebuilt binary from the project's official GitLab instance, which is a trusted release location; the non-standard host is the project's own domain, not a generic file host, and the checksum is verified.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:24 source=("posprint-${pkgver}-x86_64.tar.gz::https://git.timfalken.com/timfa/posprint/-/releases/${pkgver}/assets/posprint-${pkgver}-x86_64.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: posprint contributors
    
      2pkgname=posprint-bin
    
      3pkgver=0.5.9
    
      4pkgrel=1
    
      5pkgdesc="Designer for POS-print documents with live preview and USB ESC/POS printing (prebuilt binary)"
    
      6arch=('x86_64')
    
      7url="https://git.timfalken.com/timfa/posprint"
    
      8license=('MIT')
    
      9depends=(
    
      10  'gcc-libs'
    
      11  'libxkbcommon'
    
      12  'libxcb'
    
      13  'openssl'
    
      14  'dbus'
    
      15  'wayland'
    
      16  'libx11'
    
      17  'fontconfig'
    
      18  'freetype2'
    
      19  'libglvnd'
    
      20)
    
      21provides=("posprint=${pkgver}")
    
      22conflicts=('posprint')
    
      23options=('!strip' '!debug')
    
      24source=("posprint-${pkgver}-x86_64.tar.gz::https://git.timfalken.com/timfa/posprint/-/releases/${pkgver}/assets/posprint-${pkgver}-x86_64.tar.gz")
    
      25sha256sums=('112ccb90e72d378b637041341195c872a086f8bf4df789c843ed9e681174fe4f')
    
      26
    
      27package() {
    
      28  cp -a "$srcdir/usr" "$pkgdir/"
    
      29}
    
      30

Changes since previous scan

--- PKGBUILD @ 2026-10-04 00:18
+++ PKGBUILD @ 2026-11-04 00:25
@@ -1,10 +1,10 @@
 # Maintainer: posprint contributors
 pkgname=posprint-bin
-pkgver=0.5.8
+pkgver=0.5.9
 pkgrel=1
 pkgdesc="Designer for POS-print documents with live preview and USB ESC/POS printing (prebuilt binary)"
 arch=('x86_64')
-url="https://gitlab.com/Timfa/posprint"
+url="https://git.timfalken.com/timfa/posprint"
 license=('MIT')
 depends=(
   'gcc-libs'
@@ -21,8 +21,8 @@
 provides=("posprint=${pkgver}")
 conflicts=('posprint')
 options=('!strip' '!debug')
-source=("posprint-${pkgver}-x86_64.tar.gz::https://gitlab.com/api/v4/projects/Timfa%2Fposprint/packages/generic/posprint/${pkgver}/posprint-${pkgver}-x86_64.tar.gz")
-sha256sums=('2146c5385af1fbcaad242e896566743c312843842d457f6ad8c0add96644bff5')
+source=("posprint-${pkgver}-x86_64.tar.gz::https://git.timfalken.com/timfa/posprint/-/releases/${pkgver}/assets/posprint-${pkgver}-x86_64.tar.gz")
+sha256sums=('112ccb90e72d378b637041341195c872a086f8bf4df789c843ed9e681174fe4f')
 
 package() {
   cp -a "$srcdir/usr" "$pkgdir/"

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-04 00:25:23	Low	2
2026-11-03 00:01:00	Low	2
2026-11-02 00:26:00	Low	2
2026-11-01 00:21:48	Low	2
2026-10-31 00:07:41	Low	2
2026-10-30 00:29:30	Low	2
2026-10-29 00:13:55	Low	2
2026-10-28 00:06:54	Low	2
2026-10-27 11:47:37	Medium	1
2026-10-04 00:18:08	Clean	0
2026-10-03 00:23:04	Low	2
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2
2026-09-27 00:07:07	Low	2
2026-09-26 00:12:15	Low	2
2026-09-25 00:03:36	Low	2
2026-09-24 00:24:14	Low	2