septabee

MEDIUM

maintainer Syntaxxor 2 votes scanned 2026-10-20 00:10:31.152894

View on AUR

Why flagged

The package downloads a prebuilt 7z archive from a non-standard host (nekoweb.org, a free web hosting service) which is not associated with a trusted project infrastructure, posing a supply-chain risk if the source were tampered with or silently replaced.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source=("https://septabee.nekoweb.org/important_stuff/SEPTABEE_DOWNLOADS/version_B/septabee_linux_${pkgver}.7z" 'septabee.desktop')

Medium AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 85%): The package downloads a prebuilt 7z archive from a non-standard host (nekoweb.org, a free web hosting service) which is not associated with a trusted project infrastructure, posing a supply-chain risk if the source were tampered with or silently replaced.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Syntaxxor <syntaxxorhapsody@gmail.com>
    
      2
    
      3pkgname=septabee
    
      4pkgver=B_T22
    
      5pkgrel=1
    
      6pkgdesc='A DAW built around audio rate parameter modulation and a ridiculous amount of optimization.'
    
      7arch=('x86_64')
    
      8url='https://septabee.nekoweb.org'
    
      9license=('LicenseRef-septabee')
    
      10depends=('vulkan-driver' 'libx11' 'libstdc++')
    
      11optdepends=('libpipewire: Audio playback via pipewire')
    
      12install=${pkgname}.install
    
      13source=("https://septabee.nekoweb.org/important_stuff/SEPTABEE_DOWNLOADS/version_B/septabee_linux_${pkgver}.7z" 'septabee.desktop')
    
      14sha256sums=('c7524c3a1314ac79e0d5a7f1d5c4e7f3039ad851702e33d4661de07d71cd9fb0'
    
      15            'e3b414eb7a8fa5d0b565873cb4753b79dac456e7d0b4e9bc25f1305bcf036734')
    
      16options=(!debug)
    
      17
    
      18package() {
    
      19    mkdir -p "${pkgdir}/opt/septabee"
    
      20    mkdir -p "${pkgdir}/usr/bin"
    
      21    mkdir -p "${pkgdir}/usr/share/licenses/septabee"
    
      22    mkdir -p "${pkgdir}/usr/share/applications"
    
      23    cd "${srcdir}/linux"
    
      24    cp -R "." "${pkgdir}/opt/septabee"
    
      25    cd "${srcdir}"
    
      26    cp "septabee.desktop" "${pkgdir}/usr/share/applications"
    
      27    ln -s "/opt/septabee/septabee" "${pkgdir}/usr/bin/septabee"
    
      28    echo "Copyright 2026 Lost Robot\nFree for everyone to use forever\n" >> "${pkgdir}/usr/share/licenses/septabee/LICENSE"
    
      29}
    
      30

Changes since previous scan

--- PKGBUILD @ 2026-10-16 00:12
+++ PKGBUILD @ 2026-10-20 00:10
@@ -1,7 +1,7 @@
 # Maintainer: Syntaxxor <syntaxxorhapsody@gmail.com>
 
 pkgname=septabee
-pkgver=B_T21
+pkgver=B_T22
 pkgrel=1
 pkgdesc='A DAW built around audio rate parameter modulation and a ridiculous amount of optimization.'
 arch=('x86_64')
@@ -11,7 +11,7 @@
 optdepends=('libpipewire: Audio playback via pipewire')
 install=${pkgname}.install
 source=("https://septabee.nekoweb.org/important_stuff/SEPTABEE_DOWNLOADS/version_B/septabee_linux_${pkgver}.7z" 'septabee.desktop')
-sha256sums=('bd60aed3caa5e38c767dd35f31c1ae3d848a4bb029e9da733e290d94aa795da2'
+sha256sums=('c7524c3a1314ac79e0d5a7f1d5c4e7f3039ad851702e33d4661de07d71cd9fb0'
             'e3b414eb7a8fa5d0b565873cb4753b79dac456e7d0b4e9bc25f1305bcf036734')
 options=(!debug)
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-20 00:10:31	Medium	2
2026-10-19 00:03:55	Medium	2
2026-10-18 00:06:55	Medium	2
2026-10-17 00:21:55	Medium	2
2026-10-16 21:16:13	Medium	2
2026-10-16 00:12:47	Medium	2
2026-10-15 00:28:05	Medium	2
2026-10-14 19:20:25	Medium	2
2026-10-14 00:06:47	Medium	2
2026-10-13 00:23:45	Medium	2
2026-10-12 00:18:51	Medium	2
2026-10-11 00:26:05	Medium	2
2026-10-10 04:12:59	Medium	2
2026-10-10 00:11:52	Low	2
2026-10-09 00:05:33	Low	2
2026-10-08 20:09:40	Medium	1
2026-10-08 06:08:09	Medium	1
2026-10-08 00:28:03	Medium	2
2026-10-07 00:21:34	Medium	2
2026-10-06 00:13:36	Medium	2