sjk

MEDIUM

maintainer grossws 1 votes scanned 2026-09-02 15:51:02.635429

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:11 source=("${pkgname}-${pkgver}.jar::https://repo1.maven.org/maven2/org/gridkit/jvmtool/${pkgname}-plus/${pkgver}/${pkgname}-plus-${pkgver}.jar"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Konstantin Gribov <grossws at gmail dot com>
    
      2
    
      3pkgname=sjk
    
      4pkgver=0.23
    
      5pkgrel=1
    
      6pkgdesc="Swiss Java Knife is CLI tool for JVM diagnostic, troubleshooting and profiling"
    
      7arch=('any')
    
      8url='https://github.com/aragozin/jvm-tools'
    
      9license=('APACHE')
    
      10depends=('java-environment')
    
      11source=("${pkgname}-${pkgver}.jar::https://repo1.maven.org/maven2/org/gridkit/jvmtool/${pkgname}-plus/${pkgver}/${pkgname}-plus-${pkgver}.jar"
    
      12        "sjk")
    
      13sha256sums=('6aab07cdf0ecad394e225a1f47d7342cb23bfd8b7d5c65c945f81835363ec937'
    
      14            '62d6e80ec8d66bd2b68760599d5b2320910d961405d85560de09481bbfb0d7c0')
    
      15noextract=("${pkgname}-${pkgver}.jar")
    
      16
    
      17package() {
    
      18  install -m644 -D "${pkgname}-${pkgver}.jar" "${pkgdir}/usr/share/java/${pkgname}/${pkgname}.jar"
    
      19  install -m755 -D "${pkgname}" "${pkgdir}/usr/bin/${pkgname}"
    
      20}
    
      21
    
      22# vim:set ts=2 sw=2 et:
    
      23
    
      24

Changes since previous scan

--- PKGBUILD @ 2026-06-20 00:18
+++ PKGBUILD @ 2026-09-02 15:51
@@ -1,16 +1,16 @@
 # Maintainer: Konstantin Gribov <grossws at gmail dot com>
 
 pkgname=sjk
-pkgver=0.20
+pkgver=0.23
 pkgrel=1
 pkgdesc="Swiss Java Knife is CLI tool for JVM diagnostic, troubleshooting and profiling"
 arch=('any')
 url='https://github.com/aragozin/jvm-tools'
 license=('APACHE')
 depends=('java-environment')
-source=("https://repo1.maven.org/maven2/org/gridkit/jvmtool/${pkgname}/${pkgver}/${pkgname}-${pkgver}.jar"
+source=("${pkgname}-${pkgver}.jar::https://repo1.maven.org/maven2/org/gridkit/jvmtool/${pkgname}-plus/${pkgver}/${pkgname}-plus-${pkgver}.jar"
         "sjk")
-sha256sums=('ffccf855e80423797a42a48384286a13472ba5bbc9da6bc68ab949383a1e8ccf'
+sha256sums=('6aab07cdf0ecad394e225a1f47d7342cb23bfd8b7d5c65c945f81835363ec937'
             '62d6e80ec8d66bd2b68760599d5b2320910d961405d85560de09481bbfb0d7c0')
 noextract=("${pkgname}-${pkgver}.jar")
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-02 15:51:02	Medium	1
2026-06-20 00:18:46	Clean	2
2026-06-19 23:51:18	Clean	2
2026-06-19 19:07:35	Low	2
2026-06-18 16:11:54	Medium	1