trid

LOW

maintainer Huulivoide 15 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package downloads a source zip from the project's official host (mark0.net), which is not on standard whitelists but is the legitimate and expected source for Trid; the file is PGP-verified, and no untrusted or obfuscated code execution occurs.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source zip from the project's official host (mark0.net), which is not on standard whitelists but is the legitimate and expected source for Trid; the file is PGP-verified, and no untrusted or obfuscated code execution occurs.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:21 trid-${pkgver}.zip::http://mark0.net/download/trid.zip

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer:	Jesse Jaara	<gmail.com: jesse.jaara>
    
      2# Contributor:	p2k		<uni-ulm.de: Patrick.Schneider>
    
      3
    
      4pkgname=trid
    
      5pkgver=2.48
    
      6pkgrel=2
    
      7pkgdesc="An utility designed to identify file types from their binary signatures"
    
      8arch=('any')
    
      9url="http://mark0.net/soft-trid-e.html"
    
      10license=('AGPL-3.0-only OR custom:trid-comercial')
    
      11depends=('python')
    
      12optdepends=('python-stringzilla: Use the StringZilla library for faster searches')
    
      13install=trid.install
    
      14
    
      15validpgpkeys=('B98E7F89E0EDCA59116CCDCC8DFA06F20DB12205')
    
      16
    
      17source=(trid.sh
    
      18        update-trid-defs.sh
    
      19        update-trid-defs.service
    
      20        update-trid-defs.timer
    
      21        trid-${pkgver}.zip::http://mark0.net/download/trid.zip
    
      22        trid-${pkgver}.zip.asc::http://mark0.net/download/trid.zip.asc)
    
      23b2sums=('1072675dcf8b5429c7cdc610042b70fa96d91dd6d6ff81f19326419a80df534e7520f077d4d3b0df455a72de7a4c81981f12d33f7bf7f407342052b20dcaa561'
    
      24        '80be244b955a1ee7cdb52231512453df2c97449f977fe9b84155463341aaa4416136f29a25e42bbe21916352214cd45b21e0a89980ee2fb488086d3ee3b5a618'
    
      25        '00787de3be0a3244669485022015bc1376683dceb80d18194aef9be90a8f77ee4faa4c897f1c60ec06b182bb46fd8e7ee1d27ca0f202a619cee01a4f1a1051be'
    
      26        'ad09bd81ba2855ee9a729320ebf0a1528124cc998e6af3f9bfff9524a736d05c77808c7b300f53c9632d5d420bbe9c85cb6e0bee1d32c08df1bedd336e4a98a7'
    
      27        '987e11ef15692ccbf064d6b3d309794a6ace2d587c80bb2fbfe0051ec85ec0dcad4c9f1a1a8a2bf8384e15ed4d9a19a2740fcbbf42456e16cecbf1811487ca3b'
    
      28        'SKIP')
    
      29
    
      30package() {
    
      31  cd "${srcdir}"
    
      32
    
      33  install -D -m755 trid.sh       "${pkgdir}/usr/bin/trid"
    
      34  install -D -m755 trid.py       "${pkgdir}/usr/share/trid/trid.py"
    
      35  install -D -m644 readme.txt    "${pkgdir}/usr/share/trid/README"
    
      36  
    
      37  install -d 755               "${pkgdir}/usr/share/licenses/trid"
    
      38  ln -s /usr/share/trid/README "${pkgdir}/usr/share/licenses/trid/trid-comercial"
    
      39
    
      40  install -D -m755 update-trid-defs.sh      "${pkgdir}/usr/bin/update-trid-defs"
    
      41  install -D -m644 update-trid-defs.service "${pkgdir}/usr/lib/systemd/system/update-trid-defs.service"
    
      42  install -D -m644 update-trid-defs.timer   "${pkgdir}/usr/lib/systemd/system/update-trid-defs.timer"
    
      43
    
      44  install -d -m755 "${pkgdir}/var/lib/trid"
    
      45}
    
      46
    
      47

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 00:11:52	Low	2
2026-10-09 00:05:33	Low	2
2026-10-08 00:28:03	Low	2
2026-10-07 00:21:34	Low	2
2026-10-06 00:13:36	Low	2
2026-10-05 00:08:03	Low	2
2026-10-04 00:18:08	Low	2
2026-10-03 00:23:04	Low	2
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2