textroom

maintainer hrauch · 30 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from Google Code's archive, which is a legitimate but discontinued hosting service; the download is from a non-whitelisted host but contains only the project's own source code, which is then patched and built locally, representing normal AUR packaging behavior with no evidence of malicious intent.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from Google Code's archive, which is a legitimate but discontinued hosting service; the download is from a non-whitelisted host but contains only the project's own source code, which is then patched and built locally, representing normal AUR packaging behavior with no evidence of malicious intent.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:14 source=("https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/$pkgname/$pkgname-${pkgver}.tar.gz" spell-check_patch soundpath.patch getusername.patch libstd.patch)

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Stefan Husmann <stefan-husmann@t-online.de> 
    
      2# Contributors: SpepS, Guillem Rieu, Dan Serban
    
      3# Maintainer: Holger Rauch
    
      4
    
      5pkgname=textroom
    
      6pkgver=0.8.2
    
      7pkgrel=11
    
      8pkgdesc="Full Screen text editor heavily inspired by Q10 and JDarkRoom"
    
      9arch=('i686' 'x86_64')
    
      10url=http://code.google.com/p/textroom/
    
      11license=('GPL3')
    
      12depends=('curl' 'libxml++2.6' 'hunspell' 'qt4' 'sdl_mixer')
    
      13makedepends=('mesa')
    
      14source=("https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/$pkgname/$pkgname-${pkgver}.tar.gz" spell-check_patch soundpath.patch getusername.patch libstd.patch)
    
      15md5sums=('e20bd19784644968bbffdb90d8ef0659'
    
      16         '3cd7541b37a0589e95d59581dfea2bdd'
    
      17         '9cac5e18525ab54a7ef826916b4bc744'
    
      18         '2ea587d6ff2c3323e01075baa656aecc'
    
      19         '6dabbba77624576739454ebdd1252472')
    
      20options=('!makeflags')
    
      21
    
      22prepare() {
    
      23  cd "$pkgname-${pkgver}"
    
      24  patch -p1 < "$srcdir"/spell-check_patch
    
      25  patch -p1 < "$srcdir"/soundpath.patch
    
      26  patch -p1 < "$srcdir"/getusername.patch
    
      27  patch -p1 < "$srcdir"/libstd.patch
    
      28}
    
      29
    
      30build() {
    
      31  cd "$pkgname-${pkgver}"
    
      32  qmake-qt4
    
      33  make
    
      34}
    
      35
    
      36package() {
    
      37  cd "$pkgname-${pkgver}"
    
      38  make INSTALL_ROOT="${pkgdir}" install
    
      39  rm "${pkgdir}"/usr/bin/textroom-uninstall
    
      40  install -Dm644 "${pkgdir}"/usr/share/sounds/keyenter.wav \
    
      41    "${pkgdir}"/usr/share/sounds/$pkgname/keyenter.wav
    
      42  install -Dm644 "${pkgdir}"/usr/share/sounds/keyany.wav \
    
      43    "${pkgdir}"/usr/share/sounds/$pkgname/keyany.wav
    
      44  rm "${pkgdir}"/usr/share/sounds/*.wav
    
      45  rm -rf "${pkgdir}"/usr/share/hunspell
    
      46}
    
      47

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2