alise

MEDIUM

maintainer mipi 0 votes scanned 2026-09-24 09:42:26.093386

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 source=("${pkgname}-${pkgver}.tar.gz::https://${_pkgorg}/${pkgname}/archive/${pkgver}.tar.gz")

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

1 offending line(s) highlighted

      1# SPDX-FileCopyrightText: 2026 Michael Picht <mipi@fsfe.org>
    
      2#
    
      3# SPDX-License-Identifier: GPL-3.0-or-later
    
      4
    
      5# Maintainer: Michael Picht <mipi@fsfe.org>
    
      6
    
      7_pkgorg=codeberg.org/mipi
    
      8pkgname=alise
    
      9pkgver=0.2.0
    
      10pkgrel=1
    
      11pkgdesc="Declarative Arch Linux installer in Guile Scheme"
    
      12arch=(any)
    
      13url="https://${_pkgorg}/${pkgname}/"
    
      14license=(GPL-3.0-or-later)
    
      15source=("${pkgname}-${pkgver}.tar.gz::https://${_pkgorg}/${pkgname}/archive/${pkgver}.tar.gz")
    
      16sha256sums=('c2855b61ab5b9deee3bfeda832c6cdc477183caf3dd25a10ea539290fb73799b')
    
      17conflicts=(alise-git)
    
      18depends=(
    
      19  guile
    
      20  guile-ssh
    
      21)
    
      22makedepends=(
    
      23  make
    
      24)
    
      25
    
      26package() {
    
      27  cd "${pkgname}" || return
    
      28  make DESTDIR="$pkgdir" install
    
      29}
    
      30

Changes since previous scan

--- PKGBUILD @ 2026-09-22 07:39
+++ PKGBUILD @ 2026-09-24 09:42
@@ -6,14 +6,14 @@
 
 _pkgorg=codeberg.org/mipi
 pkgname=alise
-pkgver=0.1.0
+pkgver=0.2.0
 pkgrel=1
 pkgdesc="Declarative Arch Linux installer in Guile Scheme"
 arch=(any)
 url="https://${_pkgorg}/${pkgname}/"
 license=(GPL-3.0-or-later)
 source=("${pkgname}-${pkgver}.tar.gz::https://${_pkgorg}/${pkgname}/archive/${pkgver}.tar.gz")
-sha256sums=('5aeae85c5c454cea7b72cec95be99aafb287d131246eb5af9b03be27f74fa928')
+sha256sums=('c2855b61ab5b9deee3bfeda832c6cdc477183caf3dd25a10ea539290fb73799b')
 conflicts=(alise-git)
 depends=(
   guile

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-24 09:42:26	Medium	2
2026-09-22 07:39:05	Clean	3
2026-09-22 07:37:25	Medium	2