android-armv7a-eabi-gnutls
LOW
maintainer hipersayan_x
0 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The source is a standard upstream tarball from the official project's infrastructure (gnupg.org), which hosts gnutls releases; building from this source is normal and expected, despite the host not being a common whitelist entry.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a standard upstream tarball from the official project's infrastructure (gnupg.org), which hosts gnutls releases; building from this source is normal and expected, despite the host not being a common whitelist entry.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:24
source=("https://www.gnupg.org/ftp/gcrypt/gnutls/v${pkgver%.*}/gnutls-${pkgver}.tar.xz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Gonzalo Exequiel Pedone <hipersayan DOT x AT gmail DOT com>
2
# Contributor: Martchus <martchus@gmx.net>
3
4
_android_arch=armv7a-eabi
5
6
pkgname=android-${_android_arch}-gnutls
7
pkgver=3.8.13
8
pkgrel=1
9
arch=('any')
10
pkgdesc="A library which provides a secure layer over a reliable transport layer (Android ${_android_arch})"
11
url="https://www.gnutls.org/"
12
license=('GPL-3.0-or-later AND LGPL-2.1-or-later')
13
groups=('android-gnutls')
14
depends=("android-${_android_arch}-libidn2"
15
"android-${_android_arch}-libtasn1"
16
"android-${_android_arch}-libunistring"
17
"android-${_android_arch}-nettle"
18
"android-${_android_arch}-p11-kit"
19
"android-${_android_arch}-zlib")
20
makedepends=('android-configure'
21
'autogen')
22
optdepends=("android-${_android_arch}-openssl: libgnutls-openssl")
23
options=(!strip !buildflags staticlibs !emptydirs)
24
source=("https://www.gnupg.org/ftp/gcrypt/gnutls/v${pkgver%.*}/gnutls-${pkgver}.tar.xz")
25
md5sums=('a97671c1839340c6b43c23ccb3237180')
26
27
build() {
28
cd "${srcdir}/gnutls-${pkgver}"
29
source android-env ${_android_arch}
30
31
android-${_android_arch}-configure \
32
--with-idn \
33
--with-brotli \
34
--with-zstd \
35
--with-tpm2 \
36
--disable-doc \
37
--disable-tests \
38
--disable-valgrind-tests \
39
--disable-full-test-suite \
40
--enable-ktls \
41
--enable-openssl-compatibility \
42
--disable-srp-authentication \
43
--disable-rpath \
44
--disable-non-suiteb-curves \
45
--disable-gtk-doc \
46
--disable-full-test-suite \
47
--disable-rpath \
48
--disable-tools \
49
--with-libiconv-prefix="${ANDROID_PREFIX}" \
50
--enable-nls \
51
--enable-cxx \
52
--without-tpm \
53
--without-tpm2
54
make $MAKEFLAGS
55
}
56
57
package() {
58
cd "${srcdir}/gnutls-${pkgver}"
59
source android-env ${_android_arch}
60
61
make DESTDIR="${pkgdir}" install
62
rm -rf "${pkgdir}/${ANDROID_PREFIX_SHARE}"
63
${ANDROID_STRIP} -g --strip-unneeded "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.so
64
${ANDROID_STRIP} -g "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.a
65
66
install -vDm 644 COPYING -t "${pkgdir}/usr/share/licenses/${pkgname}/"
67
}
68
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |