yourkit-2013

maintainer orphaned · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a source archive from the official project domain yourkit.com, which is the expected and legitimate source for this software; the download host is not on the analyzer's whitelist but is plausibly official, and the archive has a matching checksum, so the risk is low.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source archive from the official project domain yourkit.com, which is the expected and legitimate source for this software; the download host is not on the analyzer's whitelist but is plausibly official, and the archive has a matching checksum, so the risk is low.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:18 source=(http://www.yourkit.com/download/yjp-${_version}-build-${_build}.zip)

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer Alan Jenkins <alan.james.jenkins@gmail.com>
    
      2# Contributor zml <zml@aoeu.xyz>
    
      3# Contributor: Julien Nicoulaud <julien.nicoulaud@gmail.com>
    
      4pkgname=yourkit-2013
    
      5_version=2013
    
      6_build=13088
    
      7pkgver=${_version}b${_build}
    
      8pkgrel=1
    
      9pkgdesc="Java CPU and memory profiler."
    
      10arch=(i686 x86_64)
    
      11url="http://www.yourkit.com"
    
      12license=(custom)
    
      13depends=(desktop-file-utils bash)
    
      14optdepends=('intellij-idea-community-edition: A Java IDE that integrates with Yourkit'
    
      15            'eclipse: A Java IDE that integrates with Yourkit'
    
      16            'netbeans: A Java IDE that integrates with Yourkit')
    
      17options=(!strip)
    
      18source=(http://www.yourkit.com/download/yjp-${_version}-build-${_build}.zip)
    
      19sha256sums=('e88461b0dd66508cd4beda3f58487776a8a3ee6638212a5c0744c745703582e9')
    
      20
    
      21build() {
    
      22  msg2 "Generate scripts for /usr/bin..."
    
      23  cat <<EOF > "${srcdir}"/${pkgname}.sh
    
      24#!/bin/sh
    
      25cd /opt/${pkgname}/bin && sh yjp.sh $@
    
      26EOF
    
      27
    
      28  msg2 "Generate desktop application entry for recorder..."
    
      29  cat > "${srcdir}"/${pkgname}.desktop << EOF
    
      30[Desktop Entry]
    
      31Name=Yourkit
    
      32Comment=${pkgdesc}
    
      33Exec=/usr/bin/${pkgname} %u
    
      34Icon=/opt/${pkgname}/bin/yjp.ico
    
      35Terminal=false
    
      36Type=Application
    
      37Categories=Application;Development;
    
      38EOF
    
      39}
    
      40
    
      41package() {
    
      42  msg2 "Install the assembly at /opt/${pkgname}..."
    
      43  install -dm755                                      "${pkgdir}/opt/${pkgname}"
    
      44  cp -a "${srcdir}"/yjp-${_version}-build-${_build}/* "${pkgdir}/opt/${pkgname}"
    
      45
    
      46  msg2 "Install an executable at /usr/bin/${pkgname}..."
    
      47  install -Dm755 "${srcdir}/${pkgname}.sh" "${pkgdir}/usr/bin/${pkgname}"
    
      48
    
      49  msg2 "Install links to the documentation resources at /usr/share/doc/${pkgname}..."
    
      50  install -dm755                "${pkgdir}/usr/share/doc/${pkgname}"
    
      51  ln -s /opt/${pkgname}/probes  "${pkgdir}/usr/share/doc/${pkgname}/probes"
    
      52  ln -s /opt/${pkgname}/samples "${pkgdir}/usr/share/doc/${pkgname}/samples"
    
      53
    
      54  msg2 "Install link to the config file in /etc..."
    
      55  install -dm755                    "${pkgdir}"/etc
    
      56  ln -s /opt/${pkgname}/bin/yjp.ini "${pkgdir}"/etc/${pkgname}.ini
    
      57
    
      58  msg2 "Install links to copyright resources at /usr/share/licenses/${pkgname}..."
    
      59  install -dm755                            "${pkgdir}/usr/share/licenses/${pkgname}"
    
      60  ln -s /opt/${pkgname}/license.html        "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      61  ln -s /opt/${pkgname}/license-redist.txt  "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      62
    
      63  msg2 "Install desktop application entry in /usr/share/applications..."
    
      64  install -Dm644 "${srcdir}"/${pkgname}.desktop "${pkgdir}"/usr/share/applications/${pkgname}.desktop
    
      65}
    
      66
    
      67# vim:set ts=2 sw=2 et:
    
      68

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2