treecomp
maintainer mhaquila
· 1 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads source and icon files from the author's personal website, which is not on a standard host whitelist, but the content consists of a prebuilt Windows executable meant to be run under Wine and a GIF icon; the worst case of a swapped source would be code execution via the unverifiable binary, but this is the project's official distribution point and the package otherwise follows standard AUR practices for a freeware tool.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads source and icon files from the author's personal website, which is not on a standard host whitelist, but the content consists of a prebuilt Windows executable meant to be run under Wine and a GIF icon; the worst case of a swapped source would be code execution via the unverifiable binary, but this is the project's official distribution point and the package otherwise follows standard AUR practices for a freeware tool.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:11
source=("https://lploeger.home.xs4all.nl/TreeComp${pkgver}_noinstall.zip"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: mhaquila <mhaquila ad pharosmaris dot com>
2
pkgname=treecomp
3
pkgver=20191106
4
pkgrel=2
5
pkgdesc='Interactive utility to keep 2 directory trees and the files within the directories in sync'
6
arch=('any')
7
url='https://lploeger.home.xs4all.nl/TreeComp.htm'
8
license=('custom: Free to use and share (see: https://lploeger.home.xs4all.nl/TreeComp3.htm#freeware)')
9
depends=('wine'
10
'hicolor-icon-theme')
11
source=("https://lploeger.home.xs4all.nl/TreeComp${pkgver}_noinstall.zip"
12
"https://lploeger.home.xs4all.nl/TreeCompIcon.gif")
13
noextract=("TreeComp${pkgver}_noinstall.zip")
14
sha256sums=('367f5c28a8c86381c07fead7e295e73db426fb33c874e8eabf3bde326c11d55b'
15
'734918bc25db284cb788b81f2eab3cceee90cae2581d1941ad924cb5d8b16584')
16
17
prepare() {
18
cd "$srcdir/"
19
cat << 'EOF' > "$pkgname.desktop"
20
[Desktop Entry]
21
Version=$pkgver
22
Type=Application
23
Name=TreeComp
24
Name[en]=TreeComp
25
Name[fr]=TreeComp
26
Name[it]=TreeComp
27
GenericName=Directories trees comparator
28
GenericName[en]=Directories trees comparator
29
GenericName[fr]=Comparateur d'arborescences de répertoires
30
GenericName[it]=Comparatore di alberi di directory
31
Comment=$pkgdesc
32
Comment[en]=Interactive utility to keep 2 directory trees and the files within the directories in sync
33
Comment[fr]=Utilitaire interactif pour synchroniser 2 arborescences de répertoires et leurs fichiers
34
Comment[it]=Utilità interattiva per sincronizzare 2 alberi di directory e i loro file
35
Path=/opt/$pkgname
36
Exec=bash -c 'WINEARCH=win32 WINEPREFIX=$HOME/.config/$pkgname wine TreeComp.exe'
37
Icon=$pkgname
38
Keywords=folders;comparator;
39
Terminal=false
40
Categories=Utility;FileTools;
41
MimeType=inode/directory;
42
StartupNotify=false
43
Actions=help;
44
45
[Desktop Action help]
46
Name=TreeComp Help Topics
47
Name[en]=TreeComp Use Manual
48
Name[fr]=Guide d'utilisation de TreeComp
49
Name[it]=Manuale d'uso di TreeComp
50
Exec=bash -c 'WINEARCH=win32 WINEPREFIX=$HOME/.config/$pkgname wine TreeComp.chm'
51
EOF
52
53
unzip -o "TreeComp${pkgver}_noinstall.zip" -d "$pkgname"
54
}
55
56
package() {
57
mkdir -p "$pkgdir/usr/share/licenses/treecomp"
58
cat << 'EOF' > "$pkgdir/usr/share/licenses/treecomp/LICENSE.md"
59
# Use license
60
61
This licence is mentionned on the author site.
62
See https://lploeger.home.xs4all.nl/TreeComp3.htm#freeware
63
64
## Freeware note
65
66
If you like the program, pass it on to others! TreeComp is a closed source
67
(with the exception of "Part of the source" below) freeware program written
68
in Delphi.
69
70
## Part of the source
71
72
[Launch.pas](https://lploeger.home.xs4all.nl/Launch.htm) contains the part
73
of the source code of TreeComp that handles launching an application from
74
Delphi.
75
EOF
76
77
mkdir -p "$pkgdir/opt/$pkgname" \
78
"$pkgdir/usr/share/icons/hicolor/32x32/apps/" \
79
"$pkgdir/usr/share/applications/"
80
cp -afH "$srcdir/$pkgname/" \
81
"$pkgdir/opt/"
82
cp -afH "$srcdir/TreeCompIcon.gif" \
83
"$pkgdir/usr/share/icons/hicolor/32x32/apps/$pkgname.png"
84
cp -afH "$srcdir/$pkgname.desktop" \
85
"$pkgdir/usr/share/applications/$pkgname.desktop"
86
}
87
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |