angie

LOW
maintainer VVL 4 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The package builds from source hosted on the project's own domain (angie.software), which is a normal and legitimate practice for AUR packages; the non-whitelisted host is plausibly project-owned, and the source is verified via checksums, posing no real supply-chain risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source hosted on the project's own domain (angie.software), which is a normal and legitimate practice for AUR packages; the non-whitelisted host is plausibly project-owned, and the source is verified via checksums, posing no real supply-chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:12 source=(https://download.angie.software/files/$pkgbase-$pkgver.tar.gz
  • PKGBUILD:15 https://angie.software/keys/angie-signing.gpg)

PKGBUILD

2 offending line(s) highlighted
1# Maintainer: Vladislav Minakov <v@minakov.pro>
2
3pkgbase=angie
4pkgname=(angie angie-src)
5pkgver=1.12.1
6pkgrel=1
7arch=('x86_64')
8url="https://github.com/webserver-llc/angie"
9license=('BSD')
10makedepends=(pcre2 zlib openssl geoip mailcap libxcrypt)
11#checkdepends=(perl perl-gd perl-io-socket-ssl perl-fcgi perl-cache-memcached memcached ffmpeg)
12source=(https://download.angie.software/files/$pkgbase-$pkgver.tar.gz
13 angie.service
14 logrotate
15 https://angie.software/keys/angie-signing.gpg)
16sha512sums=('1066f52cbd5318dc909a30d77bc2bcf07a1e7c402915e7f546bfc55b9576da1a410bf930a2478b676bca14beead7bc5bbc798839b617d290fec3dad7498305d8'
17 '65e3ba379411c638db6ac506b08efc118c975b00f65ed43c8af9d45d564711d55520bf56524e787df31a9b7dc65af4c7454b3b9baf2f8f013a44d9087be53a51'
18 '2f4dfcfa711b8bcbc5918ba635f5e430ef7132e66276261ade62bb1cba016967432c8dce7f84352cb8b07dc7c6b18f09177aa3eb92c8e358b2a106c8ca142fe9'
19 'f3e2b68cfae760fd04ad4829834bf562bb65a9204e2c83798550b4e53a12f532c878148b2c675370f9fef069b58b68e5b99b3b6fe6fe4f4e046ad61bab538c74')
20b2sums=('23d395a139fc8909e61916dda885c81d6121fc83a2f678f3bc63f1b7e2b61caee42267a0d99a0691c96357f58ebc5d1abf04de44ed3a4fd99c5cdc6c93e1d9ed'
21 '27619a4a3ca0c1b977c54c8ba99fa19abebef37e8eff7c211567e47a98b80ce038f7ec20b7ec936aa0f8945a16fe064cf1fe58d68db3d493f4f63d057d5bf007'
22 'e1755f61b4eaece83c6c22e48f9e5e316851d1dc35f8d770f837c7d3c8bdc894af1b697c25f1788ac50cd597085c22fb9bf8096a55ecf7659d63185f68ba2d8a'
23 '7957894d9973ddc8ca44a3ac1844eefbf71f2681ae57d51fcdd0ca570c0cafbb027d05fa2b288d695e7069eb26600d0099cc354fcc4b9061971243b384edd01a')
24
25_common_flags=(
26 --with-compat
27 --with-debug
28 --with-file-aio
29 --with-http_addition_module
30 --with-http_auth_request_module
31 --with-http_dav_module
32 --with-http_degradation_module
33 --with-http_flv_module
34 --with-http_geoip_module
35 --with-http_gunzip_module
36 --with-http_gzip_static_module
37 --with-http_mp4_module
38 --with-http_random_index_module
39 --with-http_realip_module
40 --with-http_secure_link_module
41 --with-http_slice_module
42 --with-http_ssl_module
43 --with-http_stub_status_module
44 --with-http_sub_module
45 --with-http_v2_module
46 --with-http_v3_module
47 --with-http_acme_module
48 --with-mail
49 --with-mail_ssl_module
50 --with-pcre-jit
51 --with-stream
52 --with-stream_geoip_module
53 --with-stream_realip_module
54 --with-stream_ssl_module
55 --with-stream_ssl_preread_module
56 --with-stream_acme_module
57 --with-stream_mqtt_preread_module
58 --with-stream_rdp_preread_module
59 --with-threads
60)
61
62prepare() {
63 cp -r $pkgbase-$pkgver{,-src}
64}
65
66build() {
67 cd $pkgbase-$pkgver
68 ./configure \
69 --prefix=/etc/nginx \
70 --conf-path=/etc/nginx/nginx.conf \
71 --sbin-path=/usr/bin/nginx \
72 --pid-path=/run/nginx.pid \
73 --lock-path=/run/lock/nginx.lock \
74 --user=http \
75 --group=http \
76 --http-log-path=/var/log/nginx/access.log \
77 --error-log-path=stderr \
78 --http-client-body-temp-path=/var/lib/nginx/client-body \
79 --http-proxy-temp-path=/var/lib/nginx/proxy \
80 --http-fastcgi-temp-path=/var/lib/nginx/fastcgi \
81 --http-scgi-temp-path=/var/lib/nginx/scgi \
82 --http-uwsgi-temp-path=/var/lib/nginx/uwsgi \
83 --with-cc-opt="$CFLAGS $CPPFLAGS" \
84 --with-ld-opt="$LDFLAGS" \
85 "${_common_flags[@]}"
86 make
87}
88
89#check() {
90# cd $pkgbase-$pkgver/tests
91# TEST_NGINX_BINARY="$srcdir/$pkgbase-$pkgver/objs/nginx" prove .
92#}
93
94package_angie() {
95 pkgdesc='Lightweight HTTP server and IMAP/POP3 proxy server, drop-in replacement for nginx'
96 depends=('pcre2' 'zlib' 'openssl' 'geoip' 'mailcap' 'libxcrypt')
97 provides=(nginx)
98 conflicts=(nginx)
99 backup=('etc/nginx/fastcgi.conf'
100 'etc/nginx/fastcgi_params'
101 'etc/nginx/koi-win'
102 'etc/nginx/koi-utf'
103 'etc/nginx/nginx.conf'
104 'etc/nginx/scgi_params'
105 'etc/nginx/uwsgi_params'
106 'etc/nginx/win-utf'
107 'etc/logrotate.d/nginx')
108
109 cd $pkgbase-$pkgver
110 make DESTDIR="$pkgdir" install
111
112 sed -e 's|\<user\s\+\w\+;|user http;|g' \
113 -e '44s|html|/usr/share/nginx/html|' \
114 -e '54s|html|/usr/share/nginx/html|' \
115 -i "$pkgdir"/etc/nginx/nginx.conf
116
117 rm "$pkgdir"/etc/nginx/*.default
118 rm "$pkgdir"/etc/nginx/mime.types # in mailcap
119
120 install -d "$pkgdir"/var/lib/nginx
121 install -dm700 "$pkgdir"/var/lib/nginx/proxy
122
123 chmod 755 "$pkgdir"/var/log/nginx
124 chown root:root "$pkgdir"/var/log/nginx
125
126 install -d "$pkgdir"/usr/share/nginx
127 mv "$pkgdir"/etc/nginx/html/ "$pkgdir"/usr/share/nginx
128
129 install -Dm644 ../logrotate "$pkgdir"/etc/logrotate.d/nginx
130 install -Dm644 ../angie.service "$pkgdir"/usr/lib/systemd/system/angie.service
131 ln -sf /usr/lib/systemd/system/angie.service "$pkgdir"/usr/lib/systemd/system/nginx.service
132 install -Dm644 LICENSE "$pkgdir"/usr/share/licenses/$pkgbase/LICENSE
133
134 rmdir "$pkgdir"/run
135
136 install -Dm0644 objs/angie.8 "$pkgdir"/usr/share/man/man8/angie.8
137
138 ln -sf /usr/bin/nginx "$pkgdir"/usr/bin/angie
139
140 for i in ftdetect ftplugin indent syntax; do
141 install -Dm644 contrib/vim/$i/angie.vim \
142 "$pkgdir/usr/share/vim/vimfiles/$i/angie.vim"
143 done
144}
145
146package_angie-src() {
147 pkgdesc="Source code of angie $pkgver, useful for building modules"
148 conflicts=(nginx-src)
149
150 install -d "$pkgdir/usr/src"
151 cp -r $pkgbase-$pkgver-src "$pkgdir/usr/src/angie"
152}
153
154

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion