unifi-no-ads
LOW
maintainer synthead
1 votes
scanned 2026-10-03 00:23:04.761738
Why flagged
The source is a prebuilt UniFi software package from Ubiquiti's official download domain (dl.ui.com), which is the project's legitimate release infrastructure; despite the static analyzer flag for a non-standard host, this is a normal and expected source for the software, and the package only removes ad-related JavaScript, posing no security risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a prebuilt UniFi software package from Ubiquiti's official download domain (dl.ui.com), which is the project's legitimate release infrastructure; despite the static analyzer flag for a non-standard host, this is a normal and expected source for the software, and the package only removes ad-related JavaScript, posing no security risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:22
source=("UniFi-${pkgver}.zip::https://dl.ui.com/unifi/${pkgver}/UniFi.unix.zip"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Maxwell Pray <synthead@gmail.com>
2
# Contributor: Frederik Schwan <freswa at archlinux dot org>
3
# Contributor: Sébastien "Seblu" Luttringer <seblu@archlinux.org>
4
5
_pkgname=unifi
6
pkgname=$_pkgname-no-ads
7
pkgver=10.6.101
8
pkgrel=1
9
pkgdesc='Centralized management system for Ubiquiti UniFi AP'
10
arch=('x86_64' 'armv7h' 'aarch64')
11
url='https://unifi-network.ui.com'
12
# We are allowed to ship the software in our repository
13
# https://mailman.archlinux.org/mailman/private/arch-dev/2014-August/015690.html
14
license=('custom')
15
depends=(
16
'fontconfig'
17
'java-runtime-headless=25'
18
'mongodb'
19
)
20
conflicts=('tomcat-native' 'unifi')
21
provides=('unifi')
22
source=("UniFi-${pkgver}.zip::https://dl.ui.com/unifi/${pkgver}/UniFi.unix.zip"
23
mongod
24
unifi.service
25
unifi.sysusers
26
unifi.tmpfiles
27
LICENSE)
28
b2sums=('ff3a281ad3c117a5e8226de2b56262b8753d8ec3730f12a945617275f7979514e23d527e701a99ebeac21d814c8898c850dc103636799224177656b0dc326b86'
29
'2c8d535aabe8e738a9ba375fc4ab7aaa1713c9aefffc3e652fd49bc6288d0b7d24cae64d04ded5d5052486a377edca190818874a80bafb33cf2ac94742540106'
30
'753d4f24793ca65c9f554bedfbc22d6507474d835986cdba435538ec6518bd14769a64485a5f4bab1fc879378ff4c4b64ec323fa362dac32f739ed119cb2647c'
31
'5474a726a8a222f463f47cdca44988889406e2bee7b3c7875d45b20dc283d1d9737772d8cb63cd35c75517f3606feaadcf02c00b73e5bbab40f459d78d066c3e'
32
'bd254ddbd4b52acca50b41dffe7ae1e2e5250f15574fc371d36dc133215f3a268623b0b5b12e73932c856bf90a69a178ba91530ffa8b08c0da51f51911b2ef92'
33
'84f2a201143b3e44ba09d1009818db507d8f261d495a86ce239bcbacee059aad5c63af1b43638b126be743ff7c660f0871eb2b4efe2031e2f64bc23f172052e0')
34
35
package() {
36
# lib
37
install -dm755 "${pkgdir}"/usr/lib/unifi
38
cp -r UniFi/{bin,dl,lib,webapps} "${pkgdir}"/usr/lib/unifi
39
case ${CARCH} in
40
x86_64)
41
rm -r "${pkgdir}"/usr/lib/unifi/lib/native/Linux/aarch64
42
;;
43
aarch64)
44
rm -r "${pkgdir}"/usr/lib/unifi/lib/native/Linux/x86_64
45
;;
46
*)
47
rm -r "${pkgdir}"/usr/lib/unifi/lib/native/Linux
48
;;
49
esac
50
51
# fix incompatibility with mongodb >= 3.6
52
rm "${pkgdir}"/usr/lib/unifi/bin/mongod
53
install -Dm755 "${srcdir}"/mongod "${pkgdir}"/usr/lib/unifi/bin/mongod
54
55
# data
56
install -dm750 "${pkgdir}"/var/lib/unifi
57
for _d in {data,run,work}; do
58
ln -s ../../../var/lib/unifi/${_d} "${pkgdir}"/usr/lib/unifi/${_d}
59
done
60
61
# log
62
ln -s ../../../var/log/unifi "${pkgdir}"/usr/lib/unifi/logs
63
64
# readme
65
install -Dm644 UniFi/readme.txt "${pkgdir}"/usr/share/doc/${_pkgname}/README
66
67
# license
68
install -Dm644 LICENSE "${pkgdir}"/usr/share/licenses/${_pkgname}/LICENSE
69
70
# systemd
71
install -Dm644 ${_pkgname}.service "${pkgdir}"/usr/lib/systemd/system/${_pkgname}.service
72
install -Dm644 ${_pkgname}.tmpfiles "${pkgdir}"/usr/lib/tmpfiles.d/${_pkgname}.conf
73
install -Dm644 ${_pkgname}.sysusers "${pkgdir}"/usr/lib/sysusers.d/${_pkgname}.conf
74
75
# Remove JS that presents ads to the user.
76
sed -Ei '/return n&&r\?.+\.aF\.Root/s/return n/return !1/' "$pkgdir/usr/lib/unifi/webapps/ROOT/app-unifi/react/js"/swai.*.js
77
}
78
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-03 00:23:04 | Low | 2 |
| 2026-10-02 00:00:32 | Low | 2 |
| 2026-10-01 00:02:06 | Low | 2 |
| 2026-09-30 00:20:07 | Low | 2 |
| 2026-09-29 00:07:46 | Low | 2 |
| 2026-09-28 00:28:32 | Low | 2 |
| 2026-09-27 00:07:07 | Low | 2 |
| 2026-09-26 00:12:15 | Low | 2 |
| 2026-09-25 00:03:36 | Low | 2 |
| 2026-09-24 00:24:14 | Low | 2 |
| 2026-09-23 00:28:13 | Low | 2 |
| 2026-09-22 00:15:14 | Low | 2 |
| 2026-09-21 00:26:32 | Low | 2 |
| 2026-09-20 00:25:31 | Low | 2 |
| 2026-09-19 00:25:36 | Low | 2 |
| 2026-09-18 00:17:11 | Low | 2 |
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |