studio-3t
The source is downloaded from the official vendor's domain (studio3t.com), which is plausibly the project's own release infrastructure, making this a normal AUR package build despite the non-whitelisted host.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is downloaded from the official vendor's domain (studio3t.com), which is plausibly the project's own release infrastructure, making this a normal AUR package build despite the non-whitelisted host.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:20
source=("$pkgname-$pkgver.tar.gz::https://download.studio3t.com/studio-3t/linux/${pkgver}/${pkgname}-linux-x64.tar.gz")
PKGBUILD
1 offending line(s) highlighted# Contributor: Monika Schrenk <moni@random-access.org>
# Contributor: Alexandre Teles (afterSt0rm) <ateles.1@gmail.com>
# Contributor: Emanuel Fernandes <efernandes@tektorque.com>
# Maintainer: Erik Bender <erik.bender@develerik.dev>
# Maintainer: Dmitry Chusovitin <dchusovitin@gmail.com>
# Maintainer: Andy Brennan <andy@hund.io>
pkgname=studio-3t
pkgver=2026.13.1
pkgrel=1
pkgdesc="The Professional Client, IDE and GUI for MongoDB"
arch=('x86_64')
url="https://studio3t.com"
license=("custom")
depends=('gtk2')
makedepends=('gendesk')
provides=('studio-3t')
replaces=('mongochef')
source=("$pkgname-$pkgver.tar.gz::https://download.studio3t.com/studio-3t/linux/${pkgver}/${pkgname}-linux-x64.tar.gz")
sha256sums=('d3352c8f555b6f60c424edbfade6b29077ec83af791cc16f7d84df743b600da8')
prepare() {
# Extract, rename and add execution permision
tar xzvf ${pkgname}-${pkgver}.tar.gz && for file in *.sh; do mv "$file" ${pkgname}.sh; done && chmod +x ${pkgname}.sh
# unattended mode
sh ./${pkgname}.sh -q -dir ${srcdir}/${pkgname} -overwrite
# Generate Desktop File
cd ${srcdir}
gendesk -f -n \
--name "Studio 3T" \
--pkgname "$pkgname" \
--pkgdesc "$pkgdesc" \
--categories="Science;Education;Development;Application"
}
package() {
cd ${srcdir}
mkdir -p $pkgdir/opt/$pkgname
install -Dm644 ${pkgname}/.install4j/Studio-3T.png ${pkgdir}/usr/share/pixmaps/${pkgname}.png
cp -R ${pkgname}/. ${pkgdir}/opt/${pkgname}
mkdir -p "$pkgdir/usr/bin/"
mkdir -p "$pkgdir/usr/share/applications/"
mkdir -p "$pkgdir/usr/share/licenses/$pkgname"
ln -s "/opt/$pkgname/Studio-3T" "$pkgdir/usr/bin/$pkgname"
install -Dm644 "$pkgname.desktop" "$pkgdir/usr/share/applications/$pkgname.desktop"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |