zotero-beta-bin
LOW
maintainer dhruvasambrani
17 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads prebuilt binaries from the official project domain download.zotero.org, which is a legitimate source for Zotero; the static analyzer flagged it due to a non-whitelisted host, but this is a standard and trusted release infrastructure for the software.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt binaries from the official project domain download.zotero.org, which is a legitimate source for Zotero; the static analyzer flagged it due to a non-whitelisted host, but this is a standard and trusted release infrastructure for the software.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:23
source_x86_64=("Zotero-${_pkgver}_linux-x86_64.tar.xz::https://download.zotero.org/client/beta/${_pkgver//+/%2B}/Zotero-${_pkgver//+/%2B}_linux-x86_64.tar.xz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Dhruva Sambrani <dhruvasambrani19 at gmail dot com>
2
# Ex-Maintainer: Bao <qubidt at gmail dot com>
3
# Ex-Contributor: Malacology <guoyizhang at malacology dot com>
4
5
pkgname=zotero-beta-bin
6
_pkgver=10.0-beta.12+ccbeab61e
7
pkgver="${_pkgver//[-+]/_}"
8
pkgrel=1
9
pkgdesc="Zotero is a free, easy-to-use tool to help you collect, organize, cite, and share research."
10
arch=('x86_64' 'i686' 'aarch64')
11
url="https://www.zotero.org/support/dev_builds"
12
conflicts=('zotero')
13
provides=('zotero')
14
license=('AGPL3')
15
depends=(
16
'dbus-glib'
17
'desktop-file-utils'
18
'gtk3'
19
'libxt'
20
'nss'
21
)
22
source=('zotero-absolute-path-fix.patch')
23
source_x86_64=("Zotero-${_pkgver}_linux-x86_64.tar.xz::https://download.zotero.org/client/beta/${_pkgver//+/%2B}/Zotero-${_pkgver//+/%2B}_linux-x86_64.tar.xz")
24
source_i686=("Zotero-${_pkgver}_linux-i686.tar.xz::https://download.zotero.org/client/beta/${_pkgver//+/%2B}/Zotero-${_pkgver//+/%2B}_linux-i686.tar.xz")
25
source_aarch64=("Zotero-${_pkgver}_linux-aarch64.tar.xz::https://download.zotero.org/client/beta/${_pkgver//+/%2B}/Zotero-${_pkgver//+/%2B}_linux-arm64.tar.xz")
26
sha256sums=('2ef0a68483c4beaa18922cc88f13ad1a7239f7d4c460d8a5d4838a02ca419c28')
27
sha256sums_x86_64=('ef9cb9282f842058da50ab1756dda8f3a0b941edb4e848adffa55578ad0c6a63')
28
sha256sums_i686=('7e4a2914e062c21c6f4efe8ea26ba09bf41f63ca65aefea1c52707108d4ef3b9')
29
sha256sums_aarch64=('0ef93e98a4e06be8f1b109b667abf3dcadd4bef0e3f6ca52a7edb982f4b59ae5')
30
31
prepare() {
32
if [[ "$CARCH" == "aarch64" ]]; then
33
mv ${srcdir}/Zotero_linux-arm64 ${srcdir}/Zotero_linux-aarch64
34
fi
35
patch --directory="Zotero_linux-${CARCH}" --forward --strip=1 --input="${srcdir}/zotero-absolute-path-fix.patch"
36
}
37
38
package() {
39
install -dDm755 "${pkgdir}"/usr/{bin,lib,share/applications}
40
mv -nT "${srcdir}/Zotero_linux-${CARCH}" "${pkgdir}"/usr/lib/zotero
41
ln -s /usr/lib/zotero/zotero "${pkgdir}"/usr/bin/zotero
42
ln -s /usr/lib/zotero/zotero.desktop "${pkgdir}"/usr/share/applications/zotero.desktop
43
44
# Copy zotero icons to a standard location
45
install -Dm644 "${pkgdir}"/usr/lib/zotero/icons/icon32.png "${pkgdir}"/usr/share/icons/hicolor/32x32/apps/zotero.png
46
install -Dm644 "${pkgdir}"/usr/lib/zotero/icons/icon64.png "${pkgdir}"/usr/share/icons/hicolor/64x64/apps/zotero.png
47
install -Dm644 "${pkgdir}"/usr/lib/zotero/icons/icon128.png "${pkgdir}"/usr/share/icons/hicolor/128x128/apps/zotero.png
48
install -Dm644 "${pkgdir}"/usr/lib/zotero/icons/symbolic.svg "${pkgdir}"/usr/share/icons/hicolor/symbolic/apps/zotero-symbolic.svg
49
}
50
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |