zotero-beta-bin

maintainer dhruvasambrani · 17 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads prebuilt binaries from the official project domain download.zotero.org, which is a legitimate source for Zotero; the static analyzer flagged it due to a non-whitelisted host, but this is a standard and trusted release infrastructure for the software.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt binaries from the official project domain download.zotero.org, which is a legitimate source for Zotero; the static analyzer flagged it due to a non-whitelisted host, but this is a standard and trusted release infrastructure for the software.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:23 source_x86_64=("Zotero-${_pkgver}_linux-x86_64.tar.xz::https://download.zotero.org/client/beta/${_pkgver//+/%2B}/Zotero-${_pkgver//+/%2B}_linux-x86_64.tar.xz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Dhruva Sambrani <dhruvasambrani19 at gmail dot com>
    
      2# Ex-Maintainer: Bao <qubidt at gmail dot com>
    
      3# Ex-Contributor: Malacology <guoyizhang at malacology dot com>
    
      4
    
      5pkgname=zotero-beta-bin
    
      6_pkgver=10.0-beta.12+ccbeab61e
    
      7pkgver="${_pkgver//[-+]/_}"
    
      8pkgrel=1
    
      9pkgdesc="Zotero is a free, easy-to-use tool to help you collect, organize, cite, and share research."
    
      10arch=('x86_64' 'i686' 'aarch64')
    
      11url="https://www.zotero.org/support/dev_builds"
    
      12conflicts=('zotero')
    
      13provides=('zotero')
    
      14license=('AGPL3')
    
      15depends=(
    
      16	'dbus-glib'
    
      17	'desktop-file-utils'
    
      18	'gtk3'
    
      19	'libxt'
    
      20	'nss'
    
      21)
    
      22source=('zotero-absolute-path-fix.patch')
    
      23source_x86_64=("Zotero-${_pkgver}_linux-x86_64.tar.xz::https://download.zotero.org/client/beta/${_pkgver//+/%2B}/Zotero-${_pkgver//+/%2B}_linux-x86_64.tar.xz")
    
      24source_i686=("Zotero-${_pkgver}_linux-i686.tar.xz::https://download.zotero.org/client/beta/${_pkgver//+/%2B}/Zotero-${_pkgver//+/%2B}_linux-i686.tar.xz")
    
      25source_aarch64=("Zotero-${_pkgver}_linux-aarch64.tar.xz::https://download.zotero.org/client/beta/${_pkgver//+/%2B}/Zotero-${_pkgver//+/%2B}_linux-arm64.tar.xz")
    
      26sha256sums=('2ef0a68483c4beaa18922cc88f13ad1a7239f7d4c460d8a5d4838a02ca419c28')
    
      27sha256sums_x86_64=('ef9cb9282f842058da50ab1756dda8f3a0b941edb4e848adffa55578ad0c6a63')
    
      28sha256sums_i686=('7e4a2914e062c21c6f4efe8ea26ba09bf41f63ca65aefea1c52707108d4ef3b9')
    
      29sha256sums_aarch64=('0ef93e98a4e06be8f1b109b667abf3dcadd4bef0e3f6ca52a7edb982f4b59ae5')
    
      30
    
      31prepare() {
    
      32    if [[ "$CARCH" == "aarch64" ]]; then
    
      33        mv ${srcdir}/Zotero_linux-arm64 ${srcdir}/Zotero_linux-aarch64
    
      34    fi
    
      35	patch --directory="Zotero_linux-${CARCH}" --forward --strip=1 --input="${srcdir}/zotero-absolute-path-fix.patch"
    
      36}
    
      37
    
      38package() {
    
      39	install -dDm755 "${pkgdir}"/usr/{bin,lib,share/applications}
    
      40	mv -nT "${srcdir}/Zotero_linux-${CARCH}" "${pkgdir}"/usr/lib/zotero
    
      41	ln -s /usr/lib/zotero/zotero "${pkgdir}"/usr/bin/zotero
    
      42	ln -s /usr/lib/zotero/zotero.desktop "${pkgdir}"/usr/share/applications/zotero.desktop
    
      43
    
      44	# Copy zotero icons to a standard location
    
      45	install -Dm644 "${pkgdir}"/usr/lib/zotero/icons/icon32.png "${pkgdir}"/usr/share/icons/hicolor/32x32/apps/zotero.png
    
      46	install -Dm644 "${pkgdir}"/usr/lib/zotero/icons/icon64.png "${pkgdir}"/usr/share/icons/hicolor/64x64/apps/zotero.png
    
      47	install -Dm644 "${pkgdir}"/usr/lib/zotero/icons/icon128.png "${pkgdir}"/usr/share/icons/hicolor/128x128/apps/zotero.png
    
      48	install -Dm644 "${pkgdir}"/usr/lib/zotero/icons/symbolic.svg "${pkgdir}"/usr/share/icons/hicolor/symbolic/apps/zotero-symbolic.svg
    
      49}
    
      50

Changes since previous scan

--- PKGBUILD @ 2026-07-18 00:14
+++ PKGBUILD @ 2026-08-03 00:08
@@ -3,7 +3,7 @@
 # Ex-Contributor: Malacology <guoyizhang at malacology dot com>
 
 pkgname=zotero-beta-bin
-_pkgver=10.0-beta.10+228799774
+_pkgver=10.0-beta.12+ccbeab61e
 pkgver="${_pkgver//[-+]/_}"
 pkgrel=1
 pkgdesc="Zotero is a free, easy-to-use tool to help you collect, organize, cite, and share research."
@@ -24,9 +24,9 @@
 source_i686=("Zotero-${_pkgver}_linux-i686.tar.xz::https://download.zotero.org/client/beta/${_pkgver//+/%2B}/Zotero-${_pkgver//+/%2B}_linux-i686.tar.xz")
 source_aarch64=("Zotero-${_pkgver}_linux-aarch64.tar.xz::https://download.zotero.org/client/beta/${_pkgver//+/%2B}/Zotero-${_pkgver//+/%2B}_linux-arm64.tar.xz")
 sha256sums=('2ef0a68483c4beaa18922cc88f13ad1a7239f7d4c460d8a5d4838a02ca419c28')
-sha256sums_x86_64=('3b53dd5715468e5ac906351680c6cc2287832ebfe10b3a3577002e04c1145f65')
-sha256sums_i686=('408d043a8121e97bf010f33a778fff669600e2b5ddddc26626ff659e0483259b')
-sha256sums_aarch64=('4da5a9a42c9b295643a42bac07cd8989cd355c69e0a426e7456e1a4953014dd9')
+sha256sums_x86_64=('ef9cb9282f842058da50ab1756dda8f3a0b941edb4e848adffa55578ad0c6a63')
+sha256sums_i686=('7e4a2914e062c21c6f4efe8ea26ba09bf41f63ca65aefea1c52707108d4ef3b9')
+sha256sums_aarch64=('0ef93e98a4e06be8f1b109b667abf3dcadd4bef0e3f6ca52a7edb982f4b59ae5')
 
 prepare() {
     if [[ "$CARCH" == "aarch64" ]]; then

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 21:59:23	MEDIUM	1
2026-07-18 00:14:48	LOW	2
2026-07-17 19:55:55	MEDIUM	1
2026-07-17 00:06:16	LOW	2