android-x86-64-gnutls

maintainer hipersayan_x · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The source is a standard upstream tarball from the official project's infrastructure (gnupg.org, which hosts GnuTLS), building from original source is normal for AUR packages, and no untrusted executables are executed.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a standard upstream tarball from the official project's infrastructure (gnupg.org, which hosts GnuTLS), building from original source is normal for AUR packages, and no untrusted executables are executed.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:24 source=("https://www.gnupg.org/ftp/gcrypt/gnutls/v${pkgver%.*}/gnutls-${pkgver}.tar.xz")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Gonzalo Exequiel Pedone <hipersayan DOT x AT gmail DOT com>
2# Contributor: Martchus <martchus@gmx.net>
3
4_android_arch=x86-64
5
6pkgname=android-${_android_arch}-gnutls
7pkgver=3.8.11
8pkgrel=4
9arch=('any')
10pkgdesc="A library which provides a secure layer over a reliable transport layer (Android ${_android_arch})"
11url="https://www.gnutls.org/"
12license=('GPL-3.0-or-later AND LGPL-2.1-or-later')
13groups=('android-gnutls')
14depends=("android-${_android_arch}-libidn2"
15 "android-${_android_arch}-libtasn1"
16 "android-${_android_arch}-libunistring"
17 "android-${_android_arch}-nettle"
18 "android-${_android_arch}-p11-kit"
19 "android-${_android_arch}-zlib")
20makedepends=('android-configure'
21 'autogen')
22optdepends=("android-${_android_arch}-openssl: libgnutls-openssl")
23options=(!strip !buildflags staticlibs !emptydirs)
24source=("https://www.gnupg.org/ftp/gcrypt/gnutls/v${pkgver%.*}/gnutls-${pkgver}.tar.xz")
25md5sums=('614a4f4131ee9d9c004830181bddccea')
26
27build() {
28 cd "${srcdir}/gnutls-${pkgver}"
29 source android-env ${_android_arch}
30
31 android-${_android_arch}-configure \
32 --with-idn \
33 --with-brotli \
34 --with-zstd \
35 --with-tpm2 \
36 --disable-doc \
37 --disable-tests \
38 --disable-valgrind-tests \
39 --disable-full-test-suite \
40 --enable-ktls \
41 --enable-openssl-compatibility \
42 --disable-srp-authentication \
43 --disable-rpath \
44 --disable-non-suiteb-curves \
45 --disable-gtk-doc \
46 --disable-full-test-suite \
47 --disable-rpath \
48 --disable-tools \
49 --with-libiconv-prefix="${ANDROID_PREFIX}" \
50 --enable-nls \
51 --enable-cxx \
52 --without-tpm \
53 --without-tpm2
54 make $MAKEFLAGS
55}
56
57package() {
58 cd "${srcdir}/gnutls-${pkgver}"
59 source android-env ${_android_arch}
60
61 make DESTDIR="${pkgdir}" install
62 rm -rf "${pkgdir}/${ANDROID_PREFIX_SHARE}"
63 ${ANDROID_STRIP} -g --strip-unneeded "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.so
64 ${ANDROID_STRIP} -g "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.a
65
66 install -vDm 644 COPYING -t "${pkgdir}/usr/share/licenses/${pkgname}/"
67}
68

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion