simple-scan-linuxmint
LOW
maintainer Santi-Burgos
4 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a tarball from Linux Mint's official package pool, which is a plausible and project-related host despite not being on a standard whitelist; it is a build of the project's own source, not an unverifiable prebuilt binary.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from Linux Mint's official package pool, which is a plausible and project-related host despite not being on a standard whitelist; it is a build of the project's own source, not an unverifiable prebuilt binary.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:42
source=("http://packages.linuxmint.com/pool/upstream/s/${_pkgname}/${_pkgname}_${pkgver}-0ubuntu2.1mint1+${_pkgver}.tar.xz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Santiago Burgos <santiago.burgos1089@gmail.com>
2
# Contributor: Fabian Bornschein <fabiscafe@archlinux.org>
3
# Contributor: Jan Alexander Steffens (heftig) <heftig@archlinux.org>
4
# Contributor: Jan de Groot <jgc@archlinux.org>
5
6
pkgname=simple-scan-linuxmint
7
_pkgname=simple-scan
8
pkgver=46.0
9
_pkgver=zena
10
pkgrel=1
11
pkgdesc="Simple scanning utility. Linux Mint version"
12
url="https://gitlab.gnome.org/GNOME/simple-scan"
13
arch=(x86_64)
14
license=(GPL-3.0-or-later)
15
depends=(
16
'cairo'
17
'colord-sane'
18
'dconf'
19
'gdk-pixbuf2'
20
'glib2'
21
'glibc'
22
'gtk4'
23
'hicolor-icon-theme'
24
'libadwaita'
25
'libcolord'
26
'libgusb'
27
'libwebp'
28
'sane'
29
'zlib'
30
)
31
makedepends=(
32
'meson'
33
'vala'
34
'yelp-tools'
35
)
36
provides=(
37
${_pkgname}
38
)
39
conflicts=(
40
${_pkgname}
41
)
42
source=("http://packages.linuxmint.com/pool/upstream/s/${_pkgname}/${_pkgname}_${pkgver}-0ubuntu2.1mint1+${_pkgver}.tar.xz")
43
sha256sums=('11e97568177b7bdf25b1e6669ef9c1937891582ad4d9b2280428a84aae41b5a1')
44
45
prepare() {
46
cd $_pkgname
47
}
48
49
build() {
50
arch-meson $_pkgname build
51
meson compile -C build
52
}
53
54
check() {
55
meson test -C build --print-errorlogs
56
}
57
58
package() {
59
meson install -C build --destdir "$pkgdir"
60
}
61
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |