roomeqwizard-beta
LOW
maintainer TomHu
6 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a self-contained installer and data file from the official project domain (roomeqwizard.com); while the host is not a standard code forge, it is the project's own site, and the files are verified via sha512sums, with no evidence of remote code execution or supply-chain compromise.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a self-contained installer and data file from the official project domain (roomeqwizard.com); while the host is not a standard code forge, it is the project's own site, and the files are verified via sha512sums, with no evidence of remote code execution or supply-chain compromise.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:20
"https://www.roomeqwizard.com/installers/REW_linux_no_jre_${pkgver//./_}-api.sh"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: TomHu
2
# Contributor: edwloef
3
# Contributor: hannut
4
# Contributor: Leo_Verto
5
# Contributor: tsuflux
6
# Contributor: sekret
7
8
pkgname=roomeqwizard-beta
9
pkgver=5.40.beta.134
10
pkgrel=1
11
pkgdesc="A room acoustics analysis software for measuring and analysing room and loudspeaker responses"
12
arch=('x86_64' 'aarch64')
13
options=('!debug')
14
url="https://www.roomeqwizard.com"
15
license=('custom')
16
depends=('xdg-utils' 'bash' 'glibc' 'java-runtime=17' 'alsa-lib' 'xorg-xwayland')
17
makedepends=('fontconfig' 'freetype2')
18
#conflicts=('roomeqwizard')
19
source=(
20
"https://www.roomeqwizard.com/installers/REW_linux_no_jre_${pkgver//./_}-api.sh"
21
"https://www.roomeqwizard.com/Sampledata.mdat"
22
)
23
24
sha512sums=('cbb88601372f5df5982816ff908ece9132f4770911105550813f8803336efcbb7eed961ea414a7de2f411c3cd9de09a6a19468aebe6ca8e31f5bdd21d7d06643'
25
'79214c2c9e35dc2dfbc926b37c058ed8a67edc156823c25b353492379aa542534997b0ca94676921252d6152bfe4fb1196c7c6df16645f14ce9ffbd8e9859770')
26
27
package() {
28
export INSTALL4J_JAVA_HOME_OVERRIDE=/usr/lib/jvm/default
29
sh REW_linux_no_jre_${pkgver//./_}-api.sh -q -dir "$srcdir/usr/share/java/$pkgname" -J-Djava.util.prefs.userRoot=$srcdir/java.uprefs -J-Djava.util.prefs.systemRoot=$srcdir/java.sprefs -J-Duser.home=${HOME}
30
31
#delete unfitting arch libs
32
case "$CARCH" in
33
x86_64)
34
rm "$srcdir/usr/share/java/$pkgname/bin/libcsjsound_aarch64.so"
35
;;
36
aarch64)
37
rm "$srcdir/usr/share/java/$pkgname/bin/libcsjsound_amd64.so"
38
;;
39
*)
40
# Commands for other architectures
41
;;
42
esac
43
44
# modify application name to contain "-beta"
45
sed 's/REW/Room EQ Wizard beta/' -i "$srcdir/usr/share/java/$pkgname/REW.desktop"
46
sed '/Exec/c\Exec=roomeqwizard-beta %U' -i "$srcdir/usr/share/java/$pkgname/REW.desktop"
47
sed "/Icon/c\Icon=\/usr\/share\/icons\/$pkgname.png" -i "$srcdir/usr/share/java/$pkgname/REW.desktop"
48
49
# fix waterfall crash
50
# https://www.avnirvana.com/threads/rew-for-linux-waterfall-drawing-problem.2956/
51
sed '/-Dsun.java2d.opengl/c\-Dsun.java2d.opengl=True' -i "$srcdir/usr/share/java/$pkgname/${pkgname%-beta}.vmoptions"
52
53
# repair
54
sed "s%$srcdir%%g" -i "$srcdir/usr/share/java/$pkgname/.install4j/response.varfile"
55
sed "s%$srcdir%%g" -i "$srcdir/usr/share/java/$pkgname/.install4j/install.prop"
56
sed "s%$srcdir%%g" -i "$srcdir/usr/share/java/$pkgname/REW.desktop"
57
58
# basic cleanup
59
rm -f "$srcdir/usr/share/java/$pkgname/.install4j/install4j_rg7rr1-roomeqwizard.desktop" \
60
"$srcdir/usr/share/java/$pkgname/.install4j/files.log" \
61
"$srcdir/usr/share/java/$pkgname/.install4j/installation.log" \
62
"$srcdir/usr/share/java/$pkgname/.install4j/install4j_rg7rr1-application.x-rew.xml" \
63
"$srcdir/usr/share/java/$pkgname/.install4j/uninstall.png"
64
rm -rf "$srcdir/usr/share/java/$pkgname/uninstall"
65
66
install -m 755 -d \
67
"$pkgdir/usr/bin" \
68
"$pkgdir/usr/share/icons" \
69
"$pkgdir/usr/share/doc/$pkgname" \
70
"$pkgdir/usr/share/licenses/$pkgname" \
71
"$pkgdir/usr/share/java/$pkgname/bin" \
72
"$pkgdir/usr/share/java/$pkgname/lib" \
73
"$pkgdir/usr/share/java/$pkgname/bundles" \
74
"$pkgdir/usr/share/java/$pkgname/.install4j" \
75
"$pkgdir/usr/share/applications/"
76
77
# copy all files into the target
78
cp -Lr "$srcdir/usr/share/java/$pkgname/bin" "$pkgdir/usr/share/java/$pkgname"
79
cp -Lr "$srcdir/usr/share/java/$pkgname/lib" "$pkgdir/usr/share/java/$pkgname"
80
cp -Lr "$srcdir/usr/share/java/$pkgname/bundles" "$pkgdir/usr/share/java/$pkgname"
81
cp -Lr "$srcdir/usr/share/java/$pkgname/.install4j" "$pkgdir/usr/share/java/$pkgname"
82
install -m 644 -t "$pkgdir/usr/share/java/$pkgname" \
83
"$srcdir/usr/share/java/$pkgname/keystore.jks" \
84
"$srcdir/usr/share/java/$pkgname/RoomEQ_Wizard_obf.jar" \
85
"$srcdir/usr/share/java/$pkgname/roomeqwizard.vmoptions" \
86
"$srcdir/usr/share/java/$pkgname/spark-swagger.conf"
87
88
install -T -m 755 "$srcdir/usr/share/java/$pkgname/${pkgname%-beta}" "$pkgdir/usr/share/java/$pkgname/$pkgname"
89
ln -s "/usr/share/java/$pkgname/$pkgname" "$pkgdir/usr/bin/$pkgname"
90
install -T -m 644 "$srcdir/usr/share/java/$pkgname/EULA.html" "$pkgdir/usr/share/licenses/$pkgname/EULA.html"
91
install -T -m 644 "$srcdir/usr/share/java/$pkgname/REW.desktop" "$pkgdir/usr/share/applications/$pkgname.desktop"
92
93
install -T -m 644 "$srcdir/usr/share/java/$pkgname/.install4j/roomeqwizard.png" "$pkgdir/usr/share/icons/$pkgname.png"
94
install -m 644 "$srcdir/Sampledata.mdat" "$pkgdir/usr/share/doc/$pkgname/"
95
}
96
Changes since previous scan
--- PKGBUILD @ 2026-08-31 00:19+++ PKGBUILD @ 2026-09-17 00:27@@ -6,7 +6,7 @@ # Contributor: sekret pkgname=roomeqwizard-beta-pkgver=5.40.beta.133+pkgver=5.40.beta.134 pkgrel=1 pkgdesc="A room acoustics analysis software for measuring and analysing room and loudspeaker responses" arch=('x86_64' 'aarch64')@@ -21,8 +21,9 @@ "https://www.roomeqwizard.com/Sampledata.mdat" ) -sha512sums=('e804315cc6f18f2c2f201a0c71d5234a280669f17761d39ca9e4103624fcd4eb0c3c04ef87f88d1532d38bcac3af2bea2944bf8a63486e4b3f067bd87ced762f'+sha512sums=('cbb88601372f5df5982816ff908ece9132f4770911105550813f8803336efcbb7eed961ea414a7de2f411c3cd9de09a6a19468aebe6ca8e31f5bdd21d7d06643' '79214c2c9e35dc2dfbc926b37c058ed8a67edc156823c25b353492379aa542534997b0ca94676921252d6152bfe4fb1196c7c6df16645f14ce9ffbd8e9859770')+ package() { export INSTALL4J_JAVA_HOME_OVERRIDE=/usr/lib/jvm/default sh REW_linux_no_jre_${pkgver//./_}-api.sh -q -dir "$srcdir/usr/share/java/$pkgname" -J-Djava.util.prefs.userRoot=$srcdir/java.uprefs -J-Djava.util.prefs.systemRoot=$srcdir/java.sprefs -J-Duser.home=${HOME}Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 17:23:26 | Medium | 1 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 11:45:21 | Medium | 1 |
| 2026-08-31 00:19:57 | Low | 2 |