android-x86-64-gnutls
maintainer hipersayan_x
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The source is a standard upstream tarball from the official project's infrastructure (gnupg.org, which hosts GnuTLS), building from original source is normal for AUR packages, and no untrusted executables are executed.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a standard upstream tarball from the official project's infrastructure (gnupg.org, which hosts GnuTLS), building from original source is normal for AUR packages, and no untrusted executables are executed.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:24
source=("https://www.gnupg.org/ftp/gcrypt/gnutls/v${pkgver%.*}/gnutls-${pkgver}.tar.xz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Gonzalo Exequiel Pedone <hipersayan DOT x AT gmail DOT com>
2
# Contributor: Martchus <martchus@gmx.net>
3
4
_android_arch=x86-64
5
6
pkgname=android-${_android_arch}-gnutls
7
pkgver=3.8.11
8
pkgrel=4
9
arch=('any')
10
pkgdesc="A library which provides a secure layer over a reliable transport layer (Android ${_android_arch})"
11
url="https://www.gnutls.org/"
12
license=('GPL-3.0-or-later AND LGPL-2.1-or-later')
13
groups=('android-gnutls')
14
depends=("android-${_android_arch}-libidn2"
15
"android-${_android_arch}-libtasn1"
16
"android-${_android_arch}-libunistring"
17
"android-${_android_arch}-nettle"
18
"android-${_android_arch}-p11-kit"
19
"android-${_android_arch}-zlib")
20
makedepends=('android-configure'
21
'autogen')
22
optdepends=("android-${_android_arch}-openssl: libgnutls-openssl")
23
options=(!strip !buildflags staticlibs !emptydirs)
24
source=("https://www.gnupg.org/ftp/gcrypt/gnutls/v${pkgver%.*}/gnutls-${pkgver}.tar.xz")
25
md5sums=('614a4f4131ee9d9c004830181bddccea')
26
27
build() {
28
cd "${srcdir}/gnutls-${pkgver}"
29
source android-env ${_android_arch}
30
31
android-${_android_arch}-configure \
32
--with-idn \
33
--with-brotli \
34
--with-zstd \
35
--with-tpm2 \
36
--disable-doc \
37
--disable-tests \
38
--disable-valgrind-tests \
39
--disable-full-test-suite \
40
--enable-ktls \
41
--enable-openssl-compatibility \
42
--disable-srp-authentication \
43
--disable-rpath \
44
--disable-non-suiteb-curves \
45
--disable-gtk-doc \
46
--disable-full-test-suite \
47
--disable-rpath \
48
--disable-tools \
49
--with-libiconv-prefix="${ANDROID_PREFIX}" \
50
--enable-nls \
51
--enable-cxx \
52
--without-tpm \
53
--without-tpm2
54
make $MAKEFLAGS
55
}
56
57
package() {
58
cd "${srcdir}/gnutls-${pkgver}"
59
source android-env ${_android_arch}
60
61
make DESTDIR="${pkgdir}" install
62
rm -rf "${pkgdir}/${ANDROID_PREFIX_SHARE}"
63
${ANDROID_STRIP} -g --strip-unneeded "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.so
64
${ANDROID_STRIP} -g "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.a
65
66
install -vDm 644 COPYING -t "${pkgdir}/usr/share/licenses/${pkgname}/"
67
}
68
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |