agedu

LOW

maintainer ohlano 18 votes scanned 2026-10-02 00:00:32.890515

View on AUR

Why flagged

The source is a tarball from the project's official host (chiark.greenend.org.uk), which is not on the whitelist but is the legitimate domain of the author; building from official project source is normal AUR packaging behavior.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official host (chiark.greenend.org.uk), which is not on the whitelist but is the legitimate domain of the author; building from official project source is normal AUR packaging behavior.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:24 source=("https://www.chiark.greenend.org.uk/~sgtatham/agedu/agedu-${pkgver}${_commit}.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Contributor: Qontinuum <qontinuum.dev@protonmail.ch>
    
      2# Contributor: Ricardo Madriz <richin13@gmail.com>
    
      3# Contributor: Aoibhinn di Tori <email@aoibh.in>
    
      4# Contributor: Lara Maia <lara@craft.net.br>
    
      5# Contributor: estranho <estranho@diogoleal.com>
    
      6# Contributor: tsester <spyridon.papanastasiou@gmail.com>
    
      7# Contributor: dserban <dserban01@yahoo.com>
    
      8# Contributor: LeCrayonVert <sunrider@laposte.net>
    
      9# Contributor: jelly <jelle@vdwaa.nl>
    
      10# Contributor: evr <evanroman at gmail>
    
      11# Contributor: Stefan Husmann <stefan-husmann@t-online.de>
    
      12# Maintainer: Jonas Ohland <jonas.ohland@gmail.com>
    
      13
    
      14pkgname=agedu
    
      15pkgver=20241013
    
      16_commit=.3622eda
    
      17pkgrel=1
    
      18pkgdesc="A UNIX utility for tracking down wasted disk space"
    
      19arch=('i686' 'x86_64')
    
      20url="http://www.chiark.greenend.org.uk/~sgtatham/agedu/"
    
      21license=('custom:MIT')
    
      22depends=('glibc')
    
      23makedepends=('cmake')
    
      24source=("https://www.chiark.greenend.org.uk/~sgtatham/agedu/agedu-${pkgver}${_commit}.tar.gz")
    
      25sha256sums=('3f77cb2e4dd64c100f7a7b0789a6c06cc16f23e7fe78c1451f5020dd823cf2f8')
    
      26
    
      27build() {
    
      28  cd $pkgname-$pkgver${_commit}
    
      29  [[ -d build ]] || mkdir build
    
      30  cd build
    
      31  cmake -DCMAKE_INSTALL_PREFIX:PATH=/usr ..
    
      32  make
    
      33}
    
      34
    
      35package() {
    
      36  cd $pkgname-$pkgver${_commit}/build
    
      37  make DESTDIR="$pkgdir" install
    
      38  install -Dm644 ../LICENCE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      39}
    
      40

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2
2026-09-27 00:07:07	Low	2
2026-09-26 00:12:15	Low	2
2026-09-25 00:03:36	Low	2
2026-09-24 00:24:14	Low	2
2026-09-23 00:28:13	Low	2
2026-09-22 00:15:14	Low	2
2026-09-21 00:26:32	Low	2
2026-09-20 00:25:31	Low	2
2026-09-19 00:25:36	Low	2
2026-09-18 00:17:11	Low	2
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2