uyap-editor

maintainer ismet · 1 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package downloads a versioned zip from a government domain, extracts a Debian package, and installs its contents; while the host is not a common forge, it is an official Turkish judicial system domain, and the final payload consists of Java JARs and resources installed locally, with no evidence of remote code execution or obfuscation.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a versioned zip from a government domain, extracts a Debian package, and installs its contents; while the host is not a common forge, it is an official Turkish judicial system domain, and the final payload consists of Java JARs and resources installed locally, with no evidence of remote code execution or obfuscation.

PKGBUILD

      1# Maintainer: Ismet Togay <ismet.togay at gmail dot com>
    
      2
    
      3pkgname=uyap-editor
    
      4pkgver=5.4.19
    
      5pkgrel=1
    
      6pkgdesc='UYAP Document and Template Editor (Turkish judicial system)'
    
      7arch=('x86_64')
    
      8url='https://uyap.gov.tr/UYAP-Editor'
    
      9license=('LicenseRef-UYAP')
    
      10depends=(
    
      11    'java-runtime<=11'
    
      12    'pcsclite'
    
      13    'bash'
    
      14    'hicolor-icon-theme'
    
      15    'shared-mime-info'
    
      16    'desktop-file-utils'
    
      17)
    
      18optdepends=(
    
      19    'akia: smart-card / e-imza login for judicial authentication (AKIS middleware; provided by akia or akia-bin)'
    
      20    'cups: printing documents from the editor'
    
      21)
    
      22conflicts=('uyap-editor-bin' 'uyapeditor' 'uyap')
    
      23provides=('uyap-editor-bin')
    
      24replaces=('uyap-editor-bin' 'uyap')
    
      25options=('!strip')
    
      26install="${pkgname}.install"
    
      27
    
      28_zipurl='https://rayp.adalet.gov.tr/resimler/2/dosya/uyapeditor_5.4.19_amd64.zip'
    
      29
    
      30source=(
    
      31    "${pkgname}-${pkgver}.zip::${_zipurl}"
    
      32    'uyap-dokuman'
    
      33    'uyap-sablon'
    
      34    'uyap-editor-dokuman.desktop'
    
      35    'uyap-editor-sablon.desktop'
    
      36    'uyap-editor.xml'
    
      37    'LICENSE'
    
      38    "${pkgname}.install"
    
      39)
    
      40sha256sums=('e58d667a7f0e3ba9448afb16de23220b23caf3debf4b5faeab1429d481acd572'
    
      41            'd9a8cdea5b14235c252ad21abd7ecdef5ce9347d85d624d4ce0d0da615d9d8cd'
    
      42            '6311a3cd1a68c7312d6633fdd8e00dd47988907722ac609d00d68762b430c1eb'
    
      43            '0cc1749ba298862da0a26172af44dbcc1396ad9f36ca160d6c6b0cbad6eae929'
    
      44            '8b4572bd43a1a5dc824fa1cc90369d77973455d5c4f76a1daaa43e258f2ccd8f'
    
      45            '57258cbf56e59f1adb3d036ebf5dfa14c12cb3d3cf9e52995bca1907d08ac135'
    
      46            'c6d648e283f12a1d834489c0a5b5386f6e9570ca1057aa8ff6b51d0b39d54993'
    
      47            '2279f85020d5b82acc391799f310f8cef6e694c874d767b341c6145838d9d6a7')
    
      48
    
      49prepare() {
    
      50    cd "${srcdir}"
    
      51
    
      52    bsdtar -xf "${pkgname}-${pkgver}.zip"
    
      53
    
      54    local _deb
    
      55    _deb=$(find . -maxdepth 3 -type f -name "uyapeditor_${pkgver}_amd64.deb" -print -quit)
    
      56    if [[ -z ${_deb} ]]; then
    
      57        echo "error: uyapeditor_${pkgver}_amd64.deb not found inside upstream zip" >&2
    
      58        return 1
    
      59    fi
    
      60
    
      61    mkdir -p deb-payload
    
      62    bsdtar -xf "${_deb}" -C deb-payload
    
      63    bsdtar -xf deb-payload/data.tar.xz -C deb-payload
    
      64}
    
      65
    
      66package() {
    
      67    local _payload="${srcdir}/deb-payload"
    
      68
    
      69    install -dm755 "${pkgdir}/usr/share/java/uyap-editor"
    
      70    install -m644 "${_payload}/usr/share/UYAPEditor/"*.jar \
    
      71        "${pkgdir}/usr/share/java/uyap-editor/"
    
      72
    
      73    install -Dm755 "${srcdir}/uyap-dokuman" "${pkgdir}/usr/bin/uyap-dokuman"
    
      74    install -Dm755 "${srcdir}/uyap-sablon"  "${pkgdir}/usr/bin/uyap-sablon"
    
      75
    
      76    install -Dm644 "${srcdir}/uyap-editor-dokuman.desktop" \
    
      77        "${pkgdir}/usr/share/applications/uyap-editor-dokuman.desktop"
    
      78    install -Dm644 "${srcdir}/uyap-editor-sablon.desktop" \
    
      79        "${pkgdir}/usr/share/applications/uyap-editor-sablon.desktop"
    
      80
    
      81    install -Dm644 "${srcdir}/uyap-editor.xml" \
    
      82        "${pkgdir}/usr/share/mime/packages/uyap-editor.xml"
    
      83
    
      84    install -Dm644 "${srcdir}/LICENSE" \
    
      85        "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      86
    
      87    local _size
    
      88    for _size in 16x16 32x32 48x48 128x128 256x256; do
    
      89        install -Dm644 \
    
      90            "${_payload}/usr/share/icons/hicolor/${_size}/apps/uyap-editor.png" \
    
      91            "${pkgdir}/usr/share/icons/hicolor/${_size}/apps/uyap-editor.png"
    
      92    done
    
      93}
    
      94

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 17:37:06	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 21:33:47	LOW	2