rutoken-plugin

MEDIUM
maintainer komex 5 votes scanned 2026-10-17 09:17:40.511065
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:14 source_x86_64=("${pkgname}-${pkgver}-x86_64.rpm::https://download.rutoken.ru/Rutoken_Plugin/${pkgver}.0/Linux/libnpRutokenPlugin-${pkgver}-1.x86_64.rpm")

PKGBUILD

1 offending line(s) highlighted
1# Contributor: Andrey Kolchenko <andrey@kolchenko.me>
2
3pkgname=rutoken-plugin
4pkgver=4.13.0
5pkgrel=1
6pkgdesc="The Rutoken plugin is necessary for connecting USB devices with the browser, it allows you to identify devices and work with them."
7arch=('i686' 'x86_64')
8url="https://www.rutoken.ru/support/download/rutoken-plugin/"
9license=('custom:rutoken-plugin')
10depends=('rutoken-connect')
11makedepends=('findutils' 'sed' 'grep' 'coreutils' 'bash')
12options=(!strip)
13
14source_x86_64=("${pkgname}-${pkgver}-x86_64.rpm::https://download.rutoken.ru/Rutoken_Plugin/${pkgver}.0/Linux/libnpRutokenPlugin-${pkgver}-1.x86_64.rpm")
15source_i686=("${pkgname}-${pkgver}-i686.rpm::https://download.rutoken.ru/Rutoken_Plugin/${pkgver}.0/Linux/libnpRutokenPlugin-${pkgver}-1.i686.rpm")
16
17sha256sums_i686=('f1b2e97d75c050b9e910778c3b4a7477be9b6e59f5526aca21b5b2154d544707')
18sha256sums_x86_64=('1172486b873cf9ab2d726799425021f0ca01ee3cd3011fbf98b234454d7f4463')
19
20package() {
21 cp -r "${srcdir}/usr/lib64/mozilla/native-messaging-hosts" "${srcdir}/usr/lib/mozilla/"
22 rm -rf "${srcdir}/usr/lib64"
23 rm -rf "${srcdir}/usr/lib/mozilla/plugins/pcache"
24 rm -f "${srcdir}/usr/lib/mozilla/plugins/librtpkcs11ecp.so"
25 ln -s /opt/aktivco/rutokenconnect/librtpkcs11ecp.so "${srcdir}/usr/lib/mozilla/plugins/librtpkcs11ecp.so"
26 rm -f "${srcdir}/opt/aktivco/rutokenplugin/librtpkcs11ecp.so"
27
28 install -Dm644 "${srcdir}/usr/share/doc/rutokenplugin/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
29 rm -rf "${srcdir}/usr/share/"
30
31 for dir in 'etc' 'usr' 'opt'
32 do
33 cp -a "${srcdir}/${dir}" "${pkgdir}"
34 done
35}
36

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-17 09:17
@@ -1,7 +1,7 @@
# Contributor: Andrey Kolchenko <andrey@kolchenko.me>
pkgname=rutoken-plugin
-pkgver=4.12.0
+pkgver=4.13.0
pkgrel=1
pkgdesc="The Rutoken plugin is necessary for connecting USB devices with the browser, it allows you to identify devices and work with them."
arch=('i686' 'x86_64')
@@ -14,8 +14,8 @@
source_x86_64=("${pkgname}-${pkgver}-x86_64.rpm::https://download.rutoken.ru/Rutoken_Plugin/${pkgver}.0/Linux/libnpRutokenPlugin-${pkgver}-1.x86_64.rpm")
source_i686=("${pkgname}-${pkgver}-i686.rpm::https://download.rutoken.ru/Rutoken_Plugin/${pkgver}.0/Linux/libnpRutokenPlugin-${pkgver}-1.i686.rpm")
-sha256sums_i686=('2d3d10355a3709f625654ad4a575a07fa54929c3573af3cdd9adb6722b24d432')
-sha256sums_x86_64=('a2a5b171934fa004461fe7812106930de52aded673700ae86467b5927de4b495')
+sha256sums_i686=('f1b2e97d75c050b9e910778c3b4a7477be9b6e59f5526aca21b5b2154d544707')
+sha256sums_x86_64=('1172486b873cf9ab2d726799425021f0ca01ee3cd3011fbf98b234454d7f4463')
package() {
cp -r "${srcdir}/usr/lib64/mozilla/native-messaging-hosts" "${srcdir}/usr/lib/mozilla/"

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 09:17:40 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion