quilt-server
LOW
maintainer ImperatorStorm
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a JAR from quiltmc.org's Maven repository and a source tarball from GitHub; both are plausibly official project sources, and the JAR is used to install the server, which is a normal part of Quilt's setup, making the risk low despite the non-whitelisted host.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a JAR from quiltmc.org's Maven repository and a source tarball from GitHub; both are plausibly official project sources, and the JAR is used to install the server, which is a normal part of Quilt's setup, making the risk low despite the non-whitelisted host.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:49
"quilt-installer-${_quilt_ver}.jar"::"https://maven.quiltmc.org/repository/release/org/quiltmc/quilt-installer/${_quilt_ver}/quilt-installer-${_quilt_ver}.jar")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Imperator Storm <ImperatorStorm11@protonmail.com>
2
3
# Based on the `fabric-server` AUR package by:
4
# Maintainer: lgm <lgm dot aur at outlook dot com>
5
# Contributor: Ndoskrnl <lollipop.studio.cn@gmail.com>
6
# Contributor: flying <flyinghat42@gmail.com>
7
8
# Based on the `forge-server` AUR package by:
9
# Contributor: Nitroretro <nitroretro@protonmail.com>
10
11
# Based on the `minecraft-server` AUR package by:
12
## Maintainer: Gordian Edenhofer <gordian.edenhofer@gmail.com>
13
## Contributor: Philip Abernethy <chais.z3r0@gmail.com>
14
## Contributor: sowieso <sowieso@dukun.de>
15
16
pkgver=26.2+0.15.1+0.30.1+1.0.4
17
pkgrel=1
18
_ver=${pkgver//\+/_}
19
20
IFS="-" read -ra _ver_temp <<< "$_ver"
21
IFS="_" read -ra _pkgver_temp <<< "${_ver_temp[0]}"
22
23
# the minecraft version
24
_minecraft_ver=${_pkgver_temp[0]}
25
26
# the version of the installer
27
_quilt_ver=${_pkgver_temp[1]}
28
29
# the version of the loader to install
30
_quilt_loader_ver=${_pkgver_temp[2]}
31
32
_mng_ver=${_pkgver_temp[3]}
33
34
_pkgver=${_ver_temp[0]//_/-}
35
36
pkgname="quilt-server"
37
_quilt_name="quilt"
38
epoch=1
39
pkgdesc="Minecraft Quilt server unit files, script, and jar"
40
arch=("any")
41
url="https://quiltmc.org"
42
license=("Apache-2.0")
43
depends=("java-runtime-headless>=26" "tmux" "sudo" "bash" "awk" "sed" "tar")
44
optdepends=("netcat: required in order to suspend an idle server")
45
backup=("etc/conf.d/${_quilt_name}")
46
install="quilt-server.install"
47
options=(emptydirs)
48
source=("minecraft-server-${_mng_ver}.tar.gz"::"https://github.com/Edenhofer/minecraft-server/archive/refs/tags/v${_mng_ver}.tar.gz"
49
"quilt-installer-${_quilt_ver}.jar"::"https://maven.quiltmc.org/repository/release/org/quiltmc/quilt-installer/${_quilt_ver}/quilt-installer-${_quilt_ver}.jar")
50
noextract=("quilt-${_pkgver}.jar")
51
sha256sums=('55a9063d77e6fbb79b6e120c4a3faf78a129cc36b8874a895cc2261c3735130c'
52
'0a229138caa1b87fd8f5622038410696f98bb85871a279640e7002404c4d0dc2')
53
54
prepare() {
55
java -Duser.home="${srcdir}" -jar "quilt-installer-${_quilt_ver}.jar" install server ${_minecraft_ver} ${_quilt_loader_ver} --download-server
56
}
57
58
_game="quilt"
59
_server_root="${pkgdir}/srv/${_quilt_name}"
60
build() {
61
make -C "${srcdir}/minecraft-server-${_mng_ver}" \
62
GAME=${_game} \
63
INAME=${_game}d \
64
SERVER_ROOT=${_server_root} \
65
BACKUP_PATHS="world world_nether world_the_end" \
66
GAME_USER=${_game} \
67
MAIN_EXECUTABLE=quilt-server-launch.jar \
68
SERVER_START_CMD="java -Xms512M -Xmx1024M -jar './\$\${MAIN_EXECUTABLE}' --nogui" \
69
clean
70
make -C "${srcdir}/minecraft-server-${_mng_ver}" \
71
GAME=${_game} \
72
INAME=${_game}d \
73
SERVER_ROOT=${_server_root} \
74
BACKUP_PATHS="world world_nether world_the_end" \
75
GAME_USER=${_game} \
76
MAIN_EXECUTABLE=quilt-server-launch.jar \
77
SERVER_START_CMD="java -Xms512M -Xmx1024M -jar './\$\${MAIN_EXECUTABLE}' --nogui" \
78
all
79
}
80
81
package() {
82
_server_root="${pkgdir}/srv/${_quilt_name}"
83
84
make -C "${srcdir}/minecraft-server-${_mng_ver}" \
85
DESTDIR="${pkgdir}" \
86
GAME=${_game} \
87
INAME=${_game}d \
88
install
89
90
# Install Quilt
91
install -Dm644 "server/quilt-server-launch.jar" "${_server_root}/quilt-server-launch.jar"
92
93
# Install Minecraft Server
94
install -Dm644 "server/server.jar" "${_server_root}/server.jar"
95
96
# install the libraries subfolder
97
# 1 create the emptyfolder structure
98
install -dm755 "libraries" "${_server_root}/libraries"
99
100
cp -r "server/libraries/" "./"
101
for dir in $(find "libraries" -type d); do
102
echo "${_server_root}/${dir}"
103
install -d --mode 755 "$dir" "${_server_root}/${dir}"
104
done
105
# 2 install all files
106
for file in $(find "libraries" -type f); do
107
echo "${_server_root}/${file}"
108
install -D --mode 755 "$file" "${_server_root}/${file}"
109
done
110
111
# Link log files
112
mkdir -p "${pkgdir}/var/log/"
113
install -dm2755 "${_server_root}/logs"
114
ln -s "/srv/${_quilt_name}/logs" "${pkgdir}/var/log/${_quilt_name}"
115
116
# Give the group write permissions and set user or group ID on execution
117
chmod g+ws "${_server_root}"
118
}
119
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 15:40:17 | Medium | 1 |