android-x86-64-npth
The source is a standard upstream tarball from the official project's domain (gnupg.org), which is a trusted host for this software; building from official source is normal for AUR packages.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a standard upstream tarball from the official project's domain (gnupg.org), which is a trusted host for this software; building from official source is normal for AUR packages.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:18
source=("https://gnupg.org/ftp/gcrypt/npth/npth-${pkgver}.tar.bz2")
PKGBUILD
1 offending line(s) highlighted# Maintainer: Gonzalo Exequiel Pedone <hipersayan DOT x AT gmail DOT com>
# Contributor: David Runge <dvzrv@archlinux.org>
# Contributor: Gaetan Bisson <bisson@archlinux.org>
_android_arch=x86-64
pkgname=android-${_android_arch}-npth
pkgver=1.8
pkgrel=1
arch=('any')
pkgdesc="The new GNU portable threads library (Android ${_android_arch})"
url="https://www.gnupg.org/software/npth/index.html"
license=('LGPL-2.1-or-later')
groups=('android-npth')
depends=('android-ndk')
makedepends=('android-configure')
options=(!strip !buildflags staticlibs !emptydirs)
source=("https://gnupg.org/ftp/gcrypt/npth/npth-${pkgver}.tar.bz2")
md5sums=('cb4fc0402be5ba67544e499cb2c1a74d')
prepare() {
cd "${srcdir}/npth-${pkgver}"
source android-env ${_android_arch}
autoreconf -fiv
sed -i 's|have_ld_version_script=yes|have_ld_version_script=no|g' configure
sed -i '/config_libs \$LIB_CLOCK_GETTIME/d' configure
sed -i 's|@NPTH_CONFIG_LIBS@|-lnpth|g' npth.pc.in
sed -i 's|@INSERT_EXPOSE_RWLOCK_API@|1|g' src/npth.h.in
}
build() {
cd "${srcdir}/npth-${pkgver}"
source android-env ${_android_arch}
export ac_cv_search_pthread_cancel=yes
export ac_cv_type_pthread_rwlock_t=yes
export ac_cv_search_clock_gettime=yes
android-${_android_arch}-configure \
--disable-tests
make $MAKEFLAGS
}
package() {
cd "${srcdir}/npth-${pkgver}"
source android-env ${_android_arch}
make DESTDIR="${pkgdir}" install
rm -rf "${pkgdir}/${ANDROID_PREFIX_SHARE}"
${ANDROID_STRIP} -g --strip-unneeded "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.so
${ANDROID_STRIP} -g "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.a
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |