roomeqwizard-beta
maintainer TomHu
· 6 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads a legitimate installer script and sample data from the official project domain roomeqwizard.com, which is not on the standard whitelist but is the project's own host; the script is part of the normal build process to extract and install the application, and no untrusted or executable remote code is run outside of the project's official release.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a legitimate installer script and sample data from the official project domain roomeqwizard.com, which is not on the standard whitelist but is the project's own host; the script is part of the normal build process to extract and install the application, and no untrusted or executable remote code is run outside of the project's official release.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:20
"https://www.roomeqwizard.com/installers/REW_linux_no_jre_${pkgver//./_}-api.sh"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: TomHu
2
# Contributor: edwloef
3
# Contributor: hannut
4
# Contributor: Leo_Verto
5
# Contributor: tsuflux
6
# Contributor: sekret
7
8
pkgname=roomeqwizard-beta
9
pkgver=5.40.beta.131
10
pkgrel=1
11
pkgdesc="A room acoustics analysis software for measuring and analysing room and loudspeaker responses"
12
arch=('x86_64' 'aarch64')
13
options=('!debug')
14
url="https://www.roomeqwizard.com"
15
license=('custom')
16
depends=('xdg-utils' 'bash' 'glibc' 'java-runtime=17' 'alsa-lib' 'xorg-xwayland')
17
makedepends=('fontconfig' 'freetype2')
18
#conflicts=('roomeqwizard')
19
source=(
20
"https://www.roomeqwizard.com/installers/REW_linux_no_jre_${pkgver//./_}-api.sh"
21
"https://www.roomeqwizard.com/Sampledata.mdat"
22
)
23
sha512sums=('4bf98c465d0bab294a963a7fefccb4a3247f13cda3d413087433295240ebd5652309ab67f061ebd2bf9323b5b9972a293a1b11bd096e30122bdafd7dad1dd468'
24
'79214c2c9e35dc2dfbc926b37c058ed8a67edc156823c25b353492379aa542534997b0ca94676921252d6152bfe4fb1196c7c6df16645f14ce9ffbd8e9859770')
25
26
27
package() {
28
export INSTALL4J_JAVA_HOME_OVERRIDE=/usr/lib/jvm/default
29
sh REW_linux_no_jre_${pkgver//./_}-api.sh -q -dir "$srcdir/usr/share/java/$pkgname" -J-Djava.util.prefs.userRoot=$srcdir/java.uprefs -J-Djava.util.prefs.systemRoot=$srcdir/java.sprefs -J-Duser.home=${HOME}
30
31
#delete unfitting arch libs
32
case "$CARCH" in
33
x86_64)
34
rm "$srcdir/usr/share/java/$pkgname/bin/libcsjsound_aarch64.so"
35
;;
36
aarch64)
37
rm "$srcdir/usr/share/java/$pkgname/bin/libcsjsound_amd64.so"
38
;;
39
*)
40
# Commands for other architectures
41
;;
42
esac
43
44
# modify application name to contain "-beta"
45
sed 's/REW/Room EQ Wizard beta/' -i "$srcdir/usr/share/java/$pkgname/REW.desktop"
46
sed '/Exec/c\Exec=roomeqwizard-beta %U' -i "$srcdir/usr/share/java/$pkgname/REW.desktop"
47
sed "/Icon/c\Icon=\/usr\/share\/icons\/$pkgname.png" -i "$srcdir/usr/share/java/$pkgname/REW.desktop"
48
49
# fix waterfall crash
50
# https://www.avnirvana.com/threads/rew-for-linux-waterfall-drawing-problem.2956/
51
sed '/-Dsun.java2d.opengl/c\-Dsun.java2d.opengl=True' -i "$srcdir/usr/share/java/$pkgname/${pkgname%-beta}.vmoptions"
52
53
# repair
54
sed "s%$srcdir%%g" -i "$srcdir/usr/share/java/$pkgname/.install4j/response.varfile"
55
sed "s%$srcdir%%g" -i "$srcdir/usr/share/java/$pkgname/.install4j/install.prop"
56
sed "s%$srcdir%%g" -i "$srcdir/usr/share/java/$pkgname/REW.desktop"
57
58
# basic cleanup
59
rm -f "$srcdir/usr/share/java/$pkgname/.install4j/install4j_rg7rr1-roomeqwizard.desktop" \
60
"$srcdir/usr/share/java/$pkgname/.install4j/files.log" \
61
"$srcdir/usr/share/java/$pkgname/.install4j/installation.log" \
62
"$srcdir/usr/share/java/$pkgname/.install4j/install4j_rg7rr1-application.x-rew.xml" \
63
"$srcdir/usr/share/java/$pkgname/.install4j/uninstall.png"
64
rm -rf "$srcdir/usr/share/java/$pkgname/uninstall"
65
66
install -m 755 -d \
67
"$pkgdir/usr/bin" \
68
"$pkgdir/usr/share/icons" \
69
"$pkgdir/usr/share/doc/$pkgname" \
70
"$pkgdir/usr/share/licenses/$pkgname" \
71
"$pkgdir/usr/share/java/$pkgname/bin" \
72
"$pkgdir/usr/share/java/$pkgname/lib" \
73
"$pkgdir/usr/share/java/$pkgname/bundles" \
74
"$pkgdir/usr/share/java/$pkgname/.install4j" \
75
"$pkgdir/usr/share/applications/"
76
77
# copy all files into the target
78
cp -Lr "$srcdir/usr/share/java/$pkgname/bin" "$pkgdir/usr/share/java/$pkgname"
79
cp -Lr "$srcdir/usr/share/java/$pkgname/lib" "$pkgdir/usr/share/java/$pkgname"
80
cp -Lr "$srcdir/usr/share/java/$pkgname/bundles" "$pkgdir/usr/share/java/$pkgname"
81
cp -Lr "$srcdir/usr/share/java/$pkgname/.install4j" "$pkgdir/usr/share/java/$pkgname"
82
install -m 644 -t "$pkgdir/usr/share/java/$pkgname" \
83
"$srcdir/usr/share/java/$pkgname/keystore.jks" \
84
"$srcdir/usr/share/java/$pkgname/RoomEQ_Wizard_obf.jar" \
85
"$srcdir/usr/share/java/$pkgname/roomeqwizard.vmoptions" \
86
"$srcdir/usr/share/java/$pkgname/spark-swagger.conf"
87
88
install -T -m 755 "$srcdir/usr/share/java/$pkgname/${pkgname%-beta}" "$pkgdir/usr/share/java/$pkgname/$pkgname"
89
ln -s "/usr/share/java/$pkgname/$pkgname" "$pkgdir/usr/bin/$pkgname"
90
install -T -m 644 "$srcdir/usr/share/java/$pkgname/EULA.html" "$pkgdir/usr/share/licenses/$pkgname/EULA.html"
91
install -T -m 644 "$srcdir/usr/share/java/$pkgname/REW.desktop" "$pkgdir/usr/share/applications/$pkgname.desktop"
92
93
install -T -m 644 "$srcdir/usr/share/java/$pkgname/.install4j/roomeqwizard.png" "$pkgdir/usr/share/icons/$pkgname.png"
94
install -m 644 "$srcdir/Sampledata.mdat" "$pkgdir/usr/share/doc/$pkgname/"
95
}
96
Changes since previous scan
--- PKGBUILD @ 2026-07-28 00:07+++ PKGBUILD @ 2026-08-03 00:08@@ -6,24 +6,22 @@ # Contributor: sekret pkgname=roomeqwizard-beta-pkgver=5.40.beta.130+pkgver=5.40.beta.131 pkgrel=1 pkgdesc="A room acoustics analysis software for measuring and analysing room and loudspeaker responses" arch=('x86_64' 'aarch64') options=('!debug') url="https://www.roomeqwizard.com" license=('custom')-depends=('xdg-utils' 'bash' 'glibc' 'java-runtime=11' 'alsa-lib' 'xorg-xwayland')+depends=('xdg-utils' 'bash' 'glibc' 'java-runtime=17' 'alsa-lib' 'xorg-xwayland') makedepends=('fontconfig' 'freetype2') #conflicts=('roomeqwizard') source=( "https://www.roomeqwizard.com/installers/REW_linux_no_jre_${pkgver//./_}-api.sh" "https://www.roomeqwizard.com/Sampledata.mdat" )-sha512sums=(- '00384eed0db35a84725122798b069494eb93f06e8c29a8ea6fbaf9cf3eb19a9fe12557bc8eca695094409de3d086549adc68849c21e6bf003964a41d35c59a53'- '79214c2c9e35dc2dfbc926b37c058ed8a67edc156823c25b353492379aa542534997b0ca94676921252d6152bfe4fb1196c7c6df16645f14ce9ffbd8e9859770'-)+sha512sums=('4bf98c465d0bab294a963a7fefccb4a3247f13cda3d413087433295240ebd5652309ab67f061ebd2bf9323b5b9972a293a1b11bd096e30122bdafd7dad1dd468'+ '79214c2c9e35dc2dfbc926b37c058ed8a67edc156823c25b353492379aa542534997b0ca94676921252d6152bfe4fb1196c7c6df16645f14ce9ffbd8e9859770') package() {Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 15:39:03 | MEDIUM | 1 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |