angie-src

maintainer VVL · 4 votes · base angie · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from source hosted on the project's own domain (angie.software), which is a normal and legitimate practice for AUR packages; the non-whitelisted host is plausibly project-owned, and the source is verified via checksums, posing no real supply-chain risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source hosted on the project's own domain (angie.software), which is a normal and legitimate practice for AUR packages; the non-whitelisted host is plausibly project-owned, and the source is verified via checksums, posing no real supply-chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 source=(https://download.angie.software/files/$pkgbase-$pkgver.tar.gz
PKGBUILD:15 https://angie.software/keys/angie-signing.gpg)

PKGBUILD

2 offending line(s) highlighted

      1# Maintainer: Vladislav Minakov <v@minakov.pro>
    
      2
    
      3pkgbase=angie
    
      4pkgname=(angie angie-src)
    
      5pkgver=1.12.1
    
      6pkgrel=1
    
      7arch=('x86_64')
    
      8url="https://github.com/webserver-llc/angie"
    
      9license=('BSD')
    
      10makedepends=(pcre2 zlib openssl geoip mailcap libxcrypt)
    
      11#checkdepends=(perl perl-gd perl-io-socket-ssl perl-fcgi perl-cache-memcached memcached ffmpeg)
    
      12source=(https://download.angie.software/files/$pkgbase-$pkgver.tar.gz
    
      13        angie.service
    
      14        logrotate
    
      15        https://angie.software/keys/angie-signing.gpg)
    
      16sha512sums=('1066f52cbd5318dc909a30d77bc2bcf07a1e7c402915e7f546bfc55b9576da1a410bf930a2478b676bca14beead7bc5bbc798839b617d290fec3dad7498305d8'
    
      17            '65e3ba379411c638db6ac506b08efc118c975b00f65ed43c8af9d45d564711d55520bf56524e787df31a9b7dc65af4c7454b3b9baf2f8f013a44d9087be53a51'
    
      18            '2f4dfcfa711b8bcbc5918ba635f5e430ef7132e66276261ade62bb1cba016967432c8dce7f84352cb8b07dc7c6b18f09177aa3eb92c8e358b2a106c8ca142fe9'
    
      19            'f3e2b68cfae760fd04ad4829834bf562bb65a9204e2c83798550b4e53a12f532c878148b2c675370f9fef069b58b68e5b99b3b6fe6fe4f4e046ad61bab538c74')
    
      20b2sums=('23d395a139fc8909e61916dda885c81d6121fc83a2f678f3bc63f1b7e2b61caee42267a0d99a0691c96357f58ebc5d1abf04de44ed3a4fd99c5cdc6c93e1d9ed'
    
      21        '27619a4a3ca0c1b977c54c8ba99fa19abebef37e8eff7c211567e47a98b80ce038f7ec20b7ec936aa0f8945a16fe064cf1fe58d68db3d493f4f63d057d5bf007'
    
      22        'e1755f61b4eaece83c6c22e48f9e5e316851d1dc35f8d770f837c7d3c8bdc894af1b697c25f1788ac50cd597085c22fb9bf8096a55ecf7659d63185f68ba2d8a'
    
      23        '7957894d9973ddc8ca44a3ac1844eefbf71f2681ae57d51fcdd0ca570c0cafbb027d05fa2b288d695e7069eb26600d0099cc354fcc4b9061971243b384edd01a')
    
      24
    
      25_common_flags=(
    
      26  --with-compat
    
      27  --with-debug
    
      28  --with-file-aio
    
      29  --with-http_addition_module
    
      30  --with-http_auth_request_module
    
      31  --with-http_dav_module
    
      32  --with-http_degradation_module
    
      33  --with-http_flv_module
    
      34  --with-http_geoip_module
    
      35  --with-http_gunzip_module
    
      36  --with-http_gzip_static_module
    
      37  --with-http_mp4_module
    
      38  --with-http_random_index_module
    
      39  --with-http_realip_module
    
      40  --with-http_secure_link_module
    
      41  --with-http_slice_module
    
      42  --with-http_ssl_module
    
      43  --with-http_stub_status_module
    
      44  --with-http_sub_module
    
      45  --with-http_v2_module
    
      46  --with-http_v3_module
    
      47  --with-http_acme_module
    
      48  --with-mail
    
      49  --with-mail_ssl_module
    
      50  --with-pcre-jit
    
      51  --with-stream
    
      52  --with-stream_geoip_module
    
      53  --with-stream_realip_module
    
      54  --with-stream_ssl_module
    
      55  --with-stream_ssl_preread_module
    
      56  --with-stream_acme_module
    
      57  --with-stream_mqtt_preread_module
    
      58  --with-stream_rdp_preread_module
    
      59  --with-threads
    
      60)
    
      61
    
      62prepare() {
    
      63  cp -r $pkgbase-$pkgver{,-src}
    
      64}
    
      65
    
      66build() {
    
      67  cd $pkgbase-$pkgver
    
      68  ./configure \
    
      69    --prefix=/etc/nginx \
    
      70    --conf-path=/etc/nginx/nginx.conf \
    
      71    --sbin-path=/usr/bin/nginx \
    
      72    --pid-path=/run/nginx.pid \
    
      73    --lock-path=/run/lock/nginx.lock \
    
      74    --user=http \
    
      75    --group=http \
    
      76    --http-log-path=/var/log/nginx/access.log \
    
      77    --error-log-path=stderr \
    
      78    --http-client-body-temp-path=/var/lib/nginx/client-body \
    
      79    --http-proxy-temp-path=/var/lib/nginx/proxy \
    
      80    --http-fastcgi-temp-path=/var/lib/nginx/fastcgi \
    
      81    --http-scgi-temp-path=/var/lib/nginx/scgi \
    
      82    --http-uwsgi-temp-path=/var/lib/nginx/uwsgi \
    
      83    --with-cc-opt="$CFLAGS $CPPFLAGS" \
    
      84    --with-ld-opt="$LDFLAGS" \
    
      85    "${_common_flags[@]}"
    
      86  make
    
      87}
    
      88
    
      89#check() {
    
      90#  cd $pkgbase-$pkgver/tests
    
      91#  TEST_NGINX_BINARY="$srcdir/$pkgbase-$pkgver/objs/nginx" prove .
    
      92#}
    
      93
    
      94package_angie() {
    
      95  pkgdesc='Lightweight HTTP server and IMAP/POP3 proxy server, drop-in replacement for nginx'
    
      96  depends=('pcre2' 'zlib' 'openssl' 'geoip' 'mailcap' 'libxcrypt')
    
      97  provides=(nginx)
    
      98  conflicts=(nginx)
    
      99  backup=('etc/nginx/fastcgi.conf'
    
      100          'etc/nginx/fastcgi_params'
    
      101          'etc/nginx/koi-win'
    
      102          'etc/nginx/koi-utf'
    
      103          'etc/nginx/nginx.conf'
    
      104          'etc/nginx/scgi_params'
    
      105          'etc/nginx/uwsgi_params'
    
      106          'etc/nginx/win-utf'
    
      107          'etc/logrotate.d/nginx')
    
      108
    
      109  cd $pkgbase-$pkgver
    
      110  make DESTDIR="$pkgdir" install
    
      111
    
      112  sed -e 's|\<user\s\+\w\+;|user http;|g' \
    
      113    -e '44s|html|/usr/share/nginx/html|' \
    
      114    -e '54s|html|/usr/share/nginx/html|' \
    
      115    -i "$pkgdir"/etc/nginx/nginx.conf
    
      116
    
      117  rm "$pkgdir"/etc/nginx/*.default
    
      118  rm "$pkgdir"/etc/nginx/mime.types  # in mailcap
    
      119
    
      120  install -d "$pkgdir"/var/lib/nginx
    
      121  install -dm700 "$pkgdir"/var/lib/nginx/proxy
    
      122
    
      123  chmod 755 "$pkgdir"/var/log/nginx
    
      124  chown root:root "$pkgdir"/var/log/nginx
    
      125
    
      126  install -d "$pkgdir"/usr/share/nginx
    
      127  mv "$pkgdir"/etc/nginx/html/ "$pkgdir"/usr/share/nginx
    
      128
    
      129  install -Dm644 ../logrotate "$pkgdir"/etc/logrotate.d/nginx
    
      130  install -Dm644 ../angie.service "$pkgdir"/usr/lib/systemd/system/angie.service
    
      131  ln -sf /usr/lib/systemd/system/angie.service "$pkgdir"/usr/lib/systemd/system/nginx.service
    
      132  install -Dm644 LICENSE "$pkgdir"/usr/share/licenses/$pkgbase/LICENSE
    
      133
    
      134  rmdir "$pkgdir"/run
    
      135
    
      136  install -Dm0644 objs/angie.8 "$pkgdir"/usr/share/man/man8/angie.8
    
      137
    
      138  ln -sf /usr/bin/nginx "$pkgdir"/usr/bin/angie
    
      139
    
      140  for i in ftdetect ftplugin indent syntax; do
    
      141    install -Dm644 contrib/vim/$i/angie.vim \
    
      142      "$pkgdir/usr/share/vim/vimfiles/$i/angie.vim"
    
      143  done
    
      144}
    
      145
    
      146package_angie-src() {
    
      147  pkgdesc="Source code of angie $pkgver, useful for building modules"
    
      148  conflicts=(nginx-src)
    
      149
    
      150  install -d "$pkgdir/usr/src"
    
      151  cp -r $pkgbase-$pkgver-src "$pkgdir/usr/src/angie"
    
      152}
    
      153
    
      154

Changes since previous scan

--- PKGBUILD @ 2026-07-18 00:14
+++ PKGBUILD @ 2026-08-03 00:08
@@ -2,7 +2,7 @@
 
 pkgbase=angie
 pkgname=(angie angie-src)
-pkgver=1.12.0
+pkgver=1.12.1
 pkgrel=1
 arch=('x86_64')
 url="https://github.com/webserver-llc/angie"
@@ -13,11 +13,11 @@
         angie.service
         logrotate
         https://angie.software/keys/angie-signing.gpg)
-sha512sums=('3e46894177ff52580298d571104dc0bda48c96031636dca973672d4a457168be34be75f22d7ebc4128007fc8fc67fe6b1826f5511d7f38774027cb902ee421b1'
+sha512sums=('1066f52cbd5318dc909a30d77bc2bcf07a1e7c402915e7f546bfc55b9576da1a410bf930a2478b676bca14beead7bc5bbc798839b617d290fec3dad7498305d8'
             '65e3ba379411c638db6ac506b08efc118c975b00f65ed43c8af9d45d564711d55520bf56524e787df31a9b7dc65af4c7454b3b9baf2f8f013a44d9087be53a51'
             '2f4dfcfa711b8bcbc5918ba635f5e430ef7132e66276261ade62bb1cba016967432c8dce7f84352cb8b07dc7c6b18f09177aa3eb92c8e358b2a106c8ca142fe9'
             'f3e2b68cfae760fd04ad4829834bf562bb65a9204e2c83798550b4e53a12f532c878148b2c675370f9fef069b58b68e5b99b3b6fe6fe4f4e046ad61bab538c74')
-b2sums=('bc472ed9d766fb5cabbdfa380dee7dfc2c01a0eda4bb650752423f43b9ca0a47a5f0fe94ac2cbb80ced89002bf01f8105fc36540646ff946d4e367b0468cb35c'
+b2sums=('23d395a139fc8909e61916dda885c81d6121fc83a2f678f3bc63f1b7e2b61caee42267a0d99a0691c96357f58ebc5d1abf04de44ed3a4fd99c5cdc6c93e1d9ed'
         '27619a4a3ca0c1b977c54c8ba99fa19abebef37e8eff7c211567e47a98b80ce038f7ec20b7ec936aa0f8945a16fe064cf1fe58d68db3d493f4f63d057d5bf007'
         'e1755f61b4eaece83c6c22e48f9e5e316851d1dc35f8d770f837c7d3c8bdc894af1b697c25f1788ac50cd597085c22fb9bf8096a55ecf7659d63185f68ba2d8a'
         '7957894d9973ddc8ca44a3ac1844eefbf71f2681ae57d51fcdd0ca570c0cafbb027d05fa2b288d695e7069eb26600d0099cc354fcc4b9061971243b384edd01a')

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 07:57:03	MEDIUM	1
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2