agedu

maintainer ohlano · 18 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The source is a tarball from the project's official host (chiark.greenend.org.uk), which is not on the whitelist but is the legitimate domain of the author; building from official project source is normal AUR packaging behavior.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official host (chiark.greenend.org.uk), which is not on the whitelist but is the legitimate domain of the author; building from official project source is normal AUR packaging behavior.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:24 source=("https://www.chiark.greenend.org.uk/~sgtatham/agedu/agedu-${pkgver}${_commit}.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Contributor: Qontinuum <qontinuum.dev@protonmail.ch>
    
      2# Contributor: Ricardo Madriz <richin13@gmail.com>
    
      3# Contributor: Aoibhinn di Tori <email@aoibh.in>
    
      4# Contributor: Lara Maia <lara@craft.net.br>
    
      5# Contributor: estranho <estranho@diogoleal.com>
    
      6# Contributor: tsester <spyridon.papanastasiou@gmail.com>
    
      7# Contributor: dserban <dserban01@yahoo.com>
    
      8# Contributor: LeCrayonVert <sunrider@laposte.net>
    
      9# Contributor: jelly <jelle@vdwaa.nl>
    
      10# Contributor: evr <evanroman at gmail>
    
      11# Contributor: Stefan Husmann <stefan-husmann@t-online.de>
    
      12# Maintainer: Jonas Ohland <jonas.ohland@gmail.com>
    
      13
    
      14pkgname=agedu
    
      15pkgver=20241013
    
      16_commit=.3622eda
    
      17pkgrel=1
    
      18pkgdesc="A UNIX utility for tracking down wasted disk space"
    
      19arch=('i686' 'x86_64')
    
      20url="http://www.chiark.greenend.org.uk/~sgtatham/agedu/"
    
      21license=('custom:MIT')
    
      22depends=('glibc')
    
      23makedepends=('cmake')
    
      24source=("https://www.chiark.greenend.org.uk/~sgtatham/agedu/agedu-${pkgver}${_commit}.tar.gz")
    
      25sha256sums=('3f77cb2e4dd64c100f7a7b0789a6c06cc16f23e7fe78c1451f5020dd823cf2f8')
    
      26
    
      27build() {
    
      28  cd $pkgname-$pkgver${_commit}
    
      29  [[ -d build ]] || mkdir build
    
      30  cd build
    
      31  cmake -DCMAKE_INSTALL_PREFIX:PATH=/usr ..
    
      32  make
    
      33}
    
      34
    
      35package() {
    
      36  cd $pkgname-$pkgver${_commit}/build
    
      37  make DESTDIR="$pkgdir" install
    
      38  install -Dm644 ../LICENCE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      39}
    
      40

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 15:29:17	MEDIUM	1
2026-06-19 19:07:35	CLEAN	2
2026-06-18 16:11:54	MEDIUM	1