alise-git
LOW
maintainer mipi
0 votes
scanned 2026-11-06 00:21:40.447623
Why flagged
The source is a git repository from a plausibly project-owned host (Codeberg), which is normal for AUR packages, even if not on a whitelist; building from source is expected and not inherently dangerous.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a git repository from a plausibly project-owned host (Codeberg), which is normal for AUR packages, even if not on a whitelist; building from source is expected and not inherently dangerous.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:16
source=("git+https://$_pkgorg/$_pkgname.git")
PKGBUILD
1 offending line(s) highlighted
1
# SPDX-FileCopyrightText: 2026 Michael Picht <mipi@fsfe.org>
2
#
3
# SPDX-License-Identifier: GPL-3.0-or-later
4
5
# Maintainer: Michael Picht <mipi@fsfe.org>
6
7
_pkgorg=codeberg.org/mipi
8
_pkgname=alise
9
pkgname=${_pkgname}-git
10
pkgver=0.7.0.r0.gca89810
11
pkgrel=1
12
pkgdesc="Declarative Arch Linux installer in Guile Scheme"
13
arch=(any)
14
url="https://${_pkgorg}/${_pkgname}/"
15
license=(GPL-3.0-or-later)
16
source=("git+https://$_pkgorg/$_pkgname.git")
17
md5sums=('SKIP')
18
provides=(alise)
19
conflicts=(alise)
20
depends=(
21
guile
22
guile-ssh
23
)
24
makedepends=(
25
git
26
make
27
)
28
options=(
29
!debug
30
)
31
32
pkgver() {
33
cd "$_pkgname" || return
34
(
35
set -o pipefail
36
git describe --tags --long 2>/dev/null |
37
sed 's/\([^-]*-g\)/r\1/;s/-/./g;s/^v//' |
38
tr -d '\n' ||
39
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
40
)
41
}
42
43
package() {
44
cd "$_pkgname" || return
45
make DESTDIR="$pkgdir" install
46
}
47
Changes since previous scan
--- PKGBUILD @ 2026-10-23 00:02+++ PKGBUILD @ 2026-11-06 00:21@@ -7,7 +7,7 @@ _pkgorg=codeberg.org/mipi _pkgname=alise pkgname=${_pkgname}-git-pkgver=0.6.0.r0.g818e599+pkgver=0.7.0.r0.gca89810 pkgrel=1 pkgdesc="Declarative Arch Linux installer in Guile Scheme" arch=(any)Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-06 00:21:40 | Low | 2 |
| 2026-11-05 00:01:40 | Low | 2 |
| 2026-11-04 00:25:23 | Low | 2 |
| 2026-11-03 00:01:00 | Low | 2 |
| 2026-11-02 00:26:00 | Low | 2 |
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 09:52:05 | Medium | 1 |
| 2026-10-23 00:02:19 | Clean | 2 |
| 2026-10-22 19:36:04 | Medium | 1 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 07:17:15 | Medium | 1 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |