tinymediamanager-bin

MEDIUM

maintainer evine 3 votes scanned 2026-09-27 09:17:18.025965

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source_x86_64=("${_pkgname}-${pkgver}-x86_64.tar.xz::https://release.${_pkgname}.org/v${pkgver%%.*}/dist/${_dlname}-${pkgver}-linux-amd64.tar.xz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: devome <evinedeng@hotmail.com>
    
      2
    
      3_dlname="tinyMediaManager"
    
      4_pkgname="${_dlname,,}"
    
      5pkgname="${_pkgname}-bin"
    
      6pkgver=5.3.3
    
      7pkgrel=1
    
      8pkgdesc="A media management tool written in Java/Swing."
    
      9provides=("${_pkgname}")
    
      10conflicts=("${_pkgname}")
    
      11arch=("x86_64" "aarch64")
    
      12url="https://www.${_pkgname}.org"
    
      13license=("Apache-2.0")
    
      14source=("${_pkgname}.desktop"
    
      15        "${_pkgname}.png")
    
      16source_x86_64=("${_pkgname}-${pkgver}-x86_64.tar.xz::https://release.${_pkgname}.org/v${pkgver%%.*}/dist/${_dlname}-${pkgver}-linux-amd64.tar.xz")
    
      17source_aarch64=("${_pkgname}-${pkgver}-aarch64.tar.xz::https://release.${_pkgname}.org/v${pkgver%%.*}/dist/${_dlname}-${pkgver}-linux-arm64.tar.xz")
    
      18sha256sums=('08499a10730b6af6113c4a56e4ed7bed068d7fed282080dfd550b66d6a8ac9f5'
    
      19            '79b50c260b1c1c1f695c0ea1d743742d11d9a1337a2bc73985e4428752492f0f')
    
      20sha256sums_x86_64=('178d10d617907d494c791c5e9aba574030618fa0674054752d2795b2911b1ff1')
    
      21sha256sums_aarch64=('5fc5e140be9e8eacf75c24cb2ee21b1c0c34ded08cb2bb9879b8ade7d074b1f3')
    
      22_mark1=$(if [[ $CARCH == x86_64 ]]; then echo "linux";      elif [[ $CARCH == aarch64 ]]; then echo "arm";            fi)
    
      23_mark2=$(if [[ $CARCH == x86_64 ]]; then echo "${_dlname}"; elif [[ $CARCH == aarch64 ]]; then echo "${_dlname}-arm"; fi)
    
      24
    
      25prepare() {
    
      26    cd "${_dlname}"
    
      27    mv LICENSE ..
    
      28    rm -rf jre "native/${_mark1}/addons/"*
    
      29}
    
      30
    
      31package() {
    
      32    depends=("ffmpeg" "java-runtime-headless>=8" "libmediainfo")
    
      33    
    
      34    install -Dm644 "LICENSE"             "${pkgdir}/usr/share/licenses/${_pkgname}/LICENSE"
    
      35    install -Dm644 "${_pkgname}.desktop" "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
    
      36    install -Dm644 "${_pkgname}.png"     "${pkgdir}/usr/share/icons/hicolor/256x256/apps/${_pkgname}.png"
    
      37    install -dm755 "${pkgdir}/"{opt,usr/bin}
    
      38
    
      39    cp --preserve=mode -r "${_dlname}"   "${pkgdir}/opt/${_pkgname}"
    
      40
    
      41    ln -s "/opt/${_pkgname}/${_mark2}"   "${pkgdir}/usr/bin/${_pkgname}"
    
      42    ln -s "/usr/lib/jvm/default"         "${pkgdir}/opt/${_pkgname}/jre"
    
      43}
    
      44

Changes since previous scan

--- PKGBUILD @ 2026-08-24 00:17
+++ PKGBUILD @ 2026-09-27 09:17
@@ -3,7 +3,7 @@
 _dlname="tinyMediaManager"
 _pkgname="${_dlname,,}"
 pkgname="${_pkgname}-bin"
-pkgver=5.3.2
+pkgver=5.3.3
 pkgrel=1
 pkgdesc="A media management tool written in Java/Swing."
 provides=("${_pkgname}")
@@ -17,8 +17,8 @@
 source_aarch64=("${_pkgname}-${pkgver}-aarch64.tar.xz::https://release.${_pkgname}.org/v${pkgver%%.*}/dist/${_dlname}-${pkgver}-linux-arm64.tar.xz")
 sha256sums=('08499a10730b6af6113c4a56e4ed7bed068d7fed282080dfd550b66d6a8ac9f5'
             '79b50c260b1c1c1f695c0ea1d743742d11d9a1337a2bc73985e4428752492f0f')
-sha256sums_x86_64=('3386cf290f08dbf3c7794e61c63a1b77937ff08c85961cb0ebe0a5650c9bff8a')
-sha256sums_aarch64=('e05c228d0a0ce1514b20d50fb81cb74b46d260297beac5953408579257d23569')
+sha256sums_x86_64=('178d10d617907d494c791c5e9aba574030618fa0674054752d2795b2911b1ff1')
+sha256sums_aarch64=('5fc5e140be9e8eacf75c24cb2ee21b1c0c34ded08cb2bb9879b8ade7d074b1f3')
 _mark1=$(if [[ $CARCH == x86_64 ]]; then echo "linux";      elif [[ $CARCH == aarch64 ]]; then echo "arm";            fi)
 _mark2=$(if [[ $CARCH == x86_64 ]]; then echo "${_dlname}"; elif [[ $CARCH == aarch64 ]]; then echo "${_dlname}-arm"; fi)
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-27 09:17:18	Medium	1
2026-08-24 00:17:16	Clean	2
2026-08-23 07:20:18	Medium	1
2026-08-12 00:27:08	Clean	2
2026-08-11 15:21:23	Medium	1
2026-08-11 00:07:57	Low	2
2026-08-10 00:09:14	Low	2
2026-08-09 00:07:45	Low	2
2026-08-08 00:18:14	Low	2
2026-08-07 00:19:04	Low	2
2026-08-06 00:26:13	Low	2
2026-08-05 00:12:14	Low	2
2026-08-04 00:01:00	Low	2
2026-08-03 00:08:14	Low	2
2026-08-02 00:16:08	Low	2
2026-08-01 00:11:18	Low	2
2026-07-31 00:14:10	Low	2
2026-07-30 00:17:23	Low	2
2026-07-29 00:25:53	Low	2
2026-07-28 00:07:28	Low	2