zulu-jdk-fx-bin

MEDIUM
maintainer AzureZeng 1 votes scanned 2026-10-27 15:48:05.092314
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:33 source=("https://cdn.azul.com/zulu/bin/${_tarballname}.tar.gz")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Azure Zeng <weedycn@outlook.com>
2# Maintainer: ThiccFurLizzy <lizbeth.gatica.meow+arch at gmail dot com>
3# Contributor: Sam Guymer <sam at guymer dot me>
4# Contributor: so1ar <so1ar114514@gmail.com>
5# Contributor: Macnolo0x7D4 <yosoymacnolo@gmail.com>
6
7_java_ver=27
8_jdkname="zulu-jdk-fx"
9_zulu_build="${_java_ver}.28.103-ca"
10pkgname="zulu-jdk-fx-bin"
11pkgver="${_java_ver}.0.0"
12pkgrel=1
13pkgdesc='Azul Zulu builds of OpenJDK are open source, TCK-tested and certified builds of OpenJDK.'
14arch=('x86_64')
15url='https://www.azul.com/downloads/'
16license=('custom')
17depends=(
18 'java-runtime-common>=3'
19 'ca-certificates-utils'
20)
21provides=(
22 "java-environment=$_java_ver"
23 "java-environment-openjdk=$_java_ver"
24 "java-runtime-headless=$_java_ver"
25 "java-runtime-headless-openjdk=$_java_ver"
26 "java-runtime=$_java_ver"
27 "java-runtime-openjdk=$_java_ver"
28 "java-openjfx=$_java_ver"
29)
30options=(!strip)
31install="$pkgname.install"
32_tarballname="zulu${_zulu_build}-fx-jdk${pkgver}-linux_x64"
33source=("https://cdn.azul.com/zulu/bin/${_tarballname}.tar.gz")
34sha256sums=('52dfdc6e733c401a8ba94e4ec5840e566b96802feb11c61f9a527c7637d58fa7')
35
36_jvmdir="/usr/lib/jvm/${_jdkname}"
37
38package() {
39 cd "$srcdir/${_tarballname}"
40
41 install -dm 755 "${pkgdir}/${_jvmdir}"
42 cp -a . "${pkgdir}/${_jvmdir}/"
43
44 # based on java-openjdk package_jdk-openjdk
45 # https://github.com/archlinux/svntogit-packages/blob/3f6aa8ddd98f728a9b0701288a933d16f0e8bbaf/trunk/PKGBUILD
46
47 # Conf
48 install -dm 755 "${pkgdir}/etc"
49 cp -r conf "${pkgdir}/etc/${_jdkname}"
50 rm -r "${pkgdir}/${_jvmdir}/conf"
51 ln -s "/etc/${_jdkname}" "${pkgdir}/${_jvmdir}/conf"
52
53 # Legal
54 install -dm 755 "${pkgdir}/usr/share/licenses"
55 cp -r legal "${pkgdir}/usr/share/licenses/${_jdkname}"
56 rm -r "${pkgdir}/${_jvmdir}/legal"
57 ln -s "/usr/share/licenses/${_jdkname}" "${pkgdir}/${_jvmdir}/legal"
58
59 # Man pages
60 for f in bin/*; do
61 f=$(basename "${f}")
62 _man=man/man1/"${f}.1"
63 test -f "${_man}" && install -Dm 644 "${_man}" "${pkgdir}/usr/share/man/man1/${f}-${_jdkname}.1"
64 done
65 rm -r "${pkgdir}/${_jvmdir}/man"
66 ln -s /usr/share/man "${pkgdir}/${_jvmdir}/man"
67
68 # Link JKS keystore from ca-certificates-utils
69 rm -f "${pkgdir}/${_jvmdir}/lib/security/cacerts"
70 ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}/${_jvmdir}/lib/security/cacerts"
71}
72

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-27 15:48
@@ -4,11 +4,11 @@
# Contributor: so1ar <so1ar114514@gmail.com>
# Contributor: Macnolo0x7D4 <yosoymacnolo@gmail.com>
-_java_ver=25
+_java_ver=27
_jdkname="zulu-jdk-fx"
-_zulu_build="${_java_ver}.34.17-ca"
+_zulu_build="${_java_ver}.28.103-ca"
pkgname="zulu-jdk-fx-bin"
-pkgver="${_java_ver}.0.3"
+pkgver="${_java_ver}.0.0"
pkgrel=1
pkgdesc='Azul Zulu builds of OpenJDK are open source, TCK-tested and certified builds of OpenJDK.'
arch=('x86_64')
@@ -31,7 +31,7 @@
install="$pkgname.install"
_tarballname="zulu${_zulu_build}-fx-jdk${pkgver}-linux_x64"
source=("https://cdn.azul.com/zulu/bin/${_tarballname}.tar.gz")
-sha256sums=('80bed68091627d5cb7c1862a2c5135ddcec667a60c8b70555a12fed7ec9314df')
+sha256sums=('52dfdc6e733c401a8ba94e4ec5840e566b96802feb11c61f9a527c7637d58fa7')
_jvmdir="/usr/lib/jvm/${_jdkname}"

Scan history

Scanned at (UTC)SeverityRules
2026-10-27 15:48:05 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-19 18:54:17 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion