simple-scan-linuxmint
LOW
maintainer Santi-Burgos
4 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The source is a tarball from Linux Mint's official package pool, which is a plausible and project-related host despite not being on a standard whitelist; it is a build of the project's own source, not an unverifiable prebuilt binary.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from Linux Mint's official package pool, which is a plausible and project-related host despite not being on a standard whitelist; it is a build of the project's own source, not an unverifiable prebuilt binary.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:42
source=("http://packages.linuxmint.com/pool/upstream/s/${_pkgname}/${_pkgname}_${pkgver}-0ubuntu2.1mint1+${_pkgver}.tar.xz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Santiago Burgos <santiago.burgos1089@gmail.com>
2
# Contributor: Fabian Bornschein <fabiscafe@archlinux.org>
3
# Contributor: Jan Alexander Steffens (heftig) <heftig@archlinux.org>
4
# Contributor: Jan de Groot <jgc@archlinux.org>
5
6
pkgname=simple-scan-linuxmint
7
_pkgname=simple-scan
8
pkgver=46.0
9
_pkgver=zena
10
pkgrel=1
11
pkgdesc="Simple scanning utility. Linux Mint version"
12
url="https://gitlab.gnome.org/GNOME/simple-scan"
13
arch=(x86_64)
14
license=(GPL-3.0-or-later)
15
depends=(
16
'cairo'
17
'colord-sane'
18
'dconf'
19
'gdk-pixbuf2'
20
'glib2'
21
'glibc'
22
'gtk4'
23
'hicolor-icon-theme'
24
'libadwaita'
25
'libcolord'
26
'libgusb'
27
'libwebp'
28
'sane'
29
'zlib'
30
)
31
makedepends=(
32
'meson'
33
'vala'
34
'yelp-tools'
35
)
36
provides=(
37
${_pkgname}
38
)
39
conflicts=(
40
${_pkgname}
41
)
42
source=("http://packages.linuxmint.com/pool/upstream/s/${_pkgname}/${_pkgname}_${pkgver}-0ubuntu2.1mint1+${_pkgver}.tar.xz")
43
sha256sums=('11e97568177b7bdf25b1e6669ef9c1937891582ad4d9b2280428a84aae41b5a1')
44
45
prepare() {
46
cd $_pkgname
47
}
48
49
build() {
50
arch-meson $_pkgname build
51
meson compile -C build
52
}
53
54
check() {
55
meson test -C build --print-errorlogs
56
}
57
58
package() {
59
meson install -C build --destdir "$pkgdir"
60
}
61
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |