zotero-bin

LOW

maintainer juanmah 462 votes scanned 2026-10-05 23:40:58.404909

View on AUR

Triggered rules

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:21 source_x86_64=("Zotero-${pkgver}_linux_x86_64.tar.bz2::https://www.zotero.org/download/client/dl?channel=release&platform=linux-x86_64&version=${pkgver}")

PKGBUILD

1 offending line(s) highlighted

      1
    
      2# Maintainer: Juanma Hernandez <juanmah@gmail.com>
    
      3# Contributor: Matthias Kurz <m.kurz@irregular.at>
    
      4
    
      5pkgname=zotero-bin
    
      6pkgver=10.0.5
    
      7pkgrel=1
    
      8pkgdesc="Zotero Standalone. Is a free, easy-to-use tool to help you collect, organize, cite, and share your research sources."
    
      9arch=('x86_64' 'i686' 'aarch64')
    
      10url="https://www.zotero.org/download"
    
      11license=('AGPL-3.0-or-later')
    
      12depends=('alsa-lib' 'gtk3' 'nss')
    
      13provides=('zotero')
    
      14conflicts=('zotero')
    
      15
    
      16sha256sums=('f727308716741cf9746b92047b890c3f76c4b8b010bc5ed21b5cdb1be85e21e9')
    
      17sha256sums_x86_64=('bfc414d8cd03aa2cc3b710ec84b78e02cfc119efc14d28112af74599d309ec0f')
    
      18sha256sums_i686=('c7a102eb1c1928ea6766a1e22898ae506ca7baa39d050e4401464563deac0da6')
    
      19sha256sums_aarch64=('0b0f1104207e54b20b5f2614bfefeb8acc695483d73a74c55c9d8314d8600fb2')
    
      20source=("zotero.desktop")
    
      21source_x86_64=("Zotero-${pkgver}_linux_x86_64.tar.bz2::https://www.zotero.org/download/client/dl?channel=release&platform=linux-x86_64&version=${pkgver}")
    
      22source_i686=("Zotero-${pkgver}_linux_i686.tar.bz2::https://www.zotero.org/download/client/dl?channel=release&platform=linux-i686&version=${pkgver}")
    
      23source_aarch64=("Zotero-${pkgver}_linux_arm64.tar.bz2::https://www.zotero.org/download/client/dl?channel=release&platform=linux-arm64&version=${pkgver}")
    
      24
    
      25prepare() {
    
      26  if [[ "$CARCH" == "aarch64" ]]; then
    
      27    mv ${srcdir}/Zotero_linux-arm64 ${srcdir}/Zotero_linux-aarch64
    
      28  fi
    
      29}
    
      30
    
      31package() {
    
      32  install -dDm755 "$pkgdir"/usr/{bin,lib/zotero}
    
      33  mv "$srcdir"/Zotero_linux-$CARCH/* "$pkgdir"/usr/lib/zotero
    
      34  ln -s /usr/lib/zotero/zotero "$pkgdir"/usr/bin/zotero
    
      35  install -Dm644 "$srcdir"/zotero.desktop "$pkgdir"/usr/share/applications/zotero.desktop
    
      36  # Copy zotero icons to a standard location
    
      37  install -Dm644 "$pkgdir"/usr/lib/zotero/icons/icon32.png "$pkgdir"/usr/share/icons/hicolor/32x32/apps/zotero.png
    
      38  install -Dm644 "$pkgdir"/usr/lib/zotero/icons/icon64.png "$pkgdir"/usr/share/icons/hicolor/64x64/apps/zotero.png
    
      39  install -Dm644 "$pkgdir"/usr/lib/zotero/icons/icon128.png "$pkgdir"/usr/share/icons/hicolor/128x128/apps/zotero.png
    
      40  install -Dm644 "$pkgdir"/usr/lib/zotero/icons/symbolic.svg "$pkgdir"/usr/share/icons/hicolor/symbolic/apps/zotero-symbolic.svg
    
      41  # No need to keep a shell around when launching Zotero
    
      42  sed -i -r 's/^("\$CALLDIR\/zotero-bin" -app "\$CALLDIR\/application.ini" "\$@")/exec \1/' "$pkgdir"/usr/lib/zotero/zotero
    
      43}
    
      44

Changes since previous scan

--- PKGBUILD @ 2026-09-19 00:25
+++ PKGBUILD @ 2026-10-05 23:40
@@ -3,7 +3,7 @@
 # Contributor: Matthias Kurz <m.kurz@irregular.at>
 
 pkgname=zotero-bin
-pkgver=10.0.2
+pkgver=10.0.5
 pkgrel=1
 pkgdesc="Zotero Standalone. Is a free, easy-to-use tool to help you collect, organize, cite, and share your research sources."
 arch=('x86_64' 'i686' 'aarch64')
@@ -14,9 +14,9 @@
 conflicts=('zotero')
 
 sha256sums=('f727308716741cf9746b92047b890c3f76c4b8b010bc5ed21b5cdb1be85e21e9')
-sha256sums_x86_64=('5f7ed486bf2daac703b905500dd8236b5b6982f7759f0699610ac926764b2a90')
-sha256sums_i686=('e3c1bb2e40eefaedcebacfbe96f37539fc9389a6b9c3e6d700da5957a1b92922')
-sha256sums_aarch64=('e8ab3673b53cb9efe25d19e2b0f16f0584357159eae951e52cf7ece341badcee')
+sha256sums_x86_64=('bfc414d8cd03aa2cc3b710ec84b78e02cfc119efc14d28112af74599d309ec0f')
+sha256sums_i686=('c7a102eb1c1928ea6766a1e22898ae506ca7baa39d050e4401464563deac0da6')
+sha256sums_aarch64=('0b0f1104207e54b20b5f2614bfefeb8acc695483d73a74c55c9d8314d8600fb2')
 source=("zotero.desktop")
 source_x86_64=("Zotero-${pkgver}_linux_x86_64.tar.bz2::https://www.zotero.org/download/client/dl?channel=release&platform=linux-x86_64&version=${pkgver}")
 source_i686=("Zotero-${pkgver}_linux_i686.tar.bz2::https://www.zotero.org/download/client/dl?channel=release&platform=linux-i686&version=${pkgver}")

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-05 23:40:58	Low	1
2026-09-19 00:25:36	Clean	2
2026-09-18 09:28:06	Low	1
2026-09-11 00:19:22	Clean	2
2026-09-10 13:20:36	Low	1
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2
2026-08-28 00:07:31	Low	2
2026-08-27 00:08:17	Low	2