angie-src
LOW
maintainer VVL
4 votes
base
angie
scanned 2026-11-01 00:21:48.120785
Why flagged
The package builds from source hosted on the project's official domain (angie.software), which is normal for AUR packages; the non-whitelisted host is the project's own release infrastructure, not a third-party or swappable file host.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source hosted on the project's official domain (angie.software), which is normal for AUR packages; the non-whitelisted host is the project's own release infrastructure, not a third-party or swappable file host.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:12
source=(https://download.angie.software/files/$pkgbase-$pkgver.tar.gz -
PKGBUILD:15
https://angie.software/keys/angie-signing.gpg)
PKGBUILD
2 offending line(s) highlighted
1
# Maintainer: Vladislav Minakov <v@minakov.pro>
2
3
pkgbase=angie
4
pkgname=(angie angie-src)
5
pkgver=1.12.3
6
pkgrel=1
7
arch=('x86_64')
8
url="https://github.com/webserver-llc/angie"
9
license=('BSD')
10
makedepends=(pcre2 zlib openssl geoip mailcap libxcrypt)
11
#checkdepends=(perl perl-gd perl-io-socket-ssl perl-fcgi perl-cache-memcached memcached ffmpeg)
12
source=(https://download.angie.software/files/$pkgbase-$pkgver.tar.gz
13
angie.service
14
logrotate
15
https://angie.software/keys/angie-signing.gpg)
16
sha512sums=('2083ba625f664c1babfbec4bfdf1f8b2ebdab9debef7ab7bb3c31ed98a1ab366d9752c77a14a5d8c568ae69c2cf4ffb0fb150fe117a8fcfb65a7e0f71d3ce2d7'
17
'65e3ba379411c638db6ac506b08efc118c975b00f65ed43c8af9d45d564711d55520bf56524e787df31a9b7dc65af4c7454b3b9baf2f8f013a44d9087be53a51'
18
'2f4dfcfa711b8bcbc5918ba635f5e430ef7132e66276261ade62bb1cba016967432c8dce7f84352cb8b07dc7c6b18f09177aa3eb92c8e358b2a106c8ca142fe9'
19
'f3e2b68cfae760fd04ad4829834bf562bb65a9204e2c83798550b4e53a12f532c878148b2c675370f9fef069b58b68e5b99b3b6fe6fe4f4e046ad61bab538c74')
20
b2sums=('935ce39c3c4f3495ef7e118a1b498e65dc84c15281ea0fb14f7b3fb92bb5961fe9afe316548d34d3041efea9dd67b5ad898f8465a1b112bf35e392347188d2dc'
21
'27619a4a3ca0c1b977c54c8ba99fa19abebef37e8eff7c211567e47a98b80ce038f7ec20b7ec936aa0f8945a16fe064cf1fe58d68db3d493f4f63d057d5bf007'
22
'e1755f61b4eaece83c6c22e48f9e5e316851d1dc35f8d770f837c7d3c8bdc894af1b697c25f1788ac50cd597085c22fb9bf8096a55ecf7659d63185f68ba2d8a'
23
'7957894d9973ddc8ca44a3ac1844eefbf71f2681ae57d51fcdd0ca570c0cafbb027d05fa2b288d695e7069eb26600d0099cc354fcc4b9061971243b384edd01a')
24
25
_common_flags=(
26
--with-compat
27
--with-debug
28
--with-file-aio
29
--with-http_addition_module
30
--with-http_auth_request_module
31
--with-http_dav_module
32
--with-http_degradation_module
33
--with-http_flv_module
34
--with-http_geoip_module
35
--with-http_gunzip_module
36
--with-http_gzip_static_module
37
--with-http_mp4_module
38
--with-http_random_index_module
39
--with-http_realip_module
40
--with-http_secure_link_module
41
--with-http_slice_module
42
--with-http_ssl_module
43
--with-http_stub_status_module
44
--with-http_sub_module
45
--with-http_v2_module
46
--with-http_v3_module
47
--with-http_acme_module
48
--with-mail
49
--with-mail_ssl_module
50
--with-pcre-jit
51
--with-stream
52
--with-stream_geoip_module
53
--with-stream_realip_module
54
--with-stream_ssl_module
55
--with-stream_ssl_preread_module
56
--with-stream_acme_module
57
--with-stream_mqtt_preread_module
58
--with-stream_rdp_preread_module
59
--with-threads
60
)
61
62
prepare() {
63
cp -r $pkgbase-$pkgver{,-src}
64
}
65
66
build() {
67
cd $pkgbase-$pkgver
68
./configure \
69
--prefix=/etc/nginx \
70
--conf-path=/etc/nginx/nginx.conf \
71
--sbin-path=/usr/bin/nginx \
72
--pid-path=/run/nginx.pid \
73
--lock-path=/run/lock/nginx.lock \
74
--user=http \
75
--group=http \
76
--http-log-path=/var/log/nginx/access.log \
77
--error-log-path=stderr \
78
--http-client-body-temp-path=/var/lib/nginx/client-body \
79
--http-proxy-temp-path=/var/lib/nginx/proxy \
80
--http-fastcgi-temp-path=/var/lib/nginx/fastcgi \
81
--http-scgi-temp-path=/var/lib/nginx/scgi \
82
--http-uwsgi-temp-path=/var/lib/nginx/uwsgi \
83
--with-cc-opt="$CFLAGS $CPPFLAGS" \
84
--with-ld-opt="$LDFLAGS" \
85
"${_common_flags[@]}"
86
make
87
}
88
89
#check() {
90
# cd $pkgbase-$pkgver/tests
91
# TEST_NGINX_BINARY="$srcdir/$pkgbase-$pkgver/objs/nginx" prove .
92
#}
93
94
package_angie() {
95
pkgdesc='Lightweight HTTP server and IMAP/POP3 proxy server, drop-in replacement for nginx'
96
depends=('pcre2' 'zlib' 'openssl' 'geoip' 'mailcap' 'libxcrypt')
97
provides=(nginx)
98
conflicts=(nginx)
99
backup=('etc/nginx/fastcgi.conf'
100
'etc/nginx/fastcgi_params'
101
'etc/nginx/koi-win'
102
'etc/nginx/koi-utf'
103
'etc/nginx/nginx.conf'
104
'etc/nginx/scgi_params'
105
'etc/nginx/uwsgi_params'
106
'etc/nginx/win-utf'
107
'etc/logrotate.d/nginx')
108
109
cd $pkgbase-$pkgver
110
make DESTDIR="$pkgdir" install
111
112
sed -e 's|\<user\s\+\w\+;|user http;|g' \
113
-e '44s|html|/usr/share/nginx/html|' \
114
-e '54s|html|/usr/share/nginx/html|' \
115
-i "$pkgdir"/etc/nginx/nginx.conf
116
117
rm "$pkgdir"/etc/nginx/*.default
118
rm "$pkgdir"/etc/nginx/mime.types # in mailcap
119
120
install -d "$pkgdir"/var/lib/nginx
121
install -dm700 "$pkgdir"/var/lib/nginx/proxy
122
123
chmod 755 "$pkgdir"/var/log/nginx
124
chown root:root "$pkgdir"/var/log/nginx
125
126
install -d "$pkgdir"/usr/share/nginx
127
mv "$pkgdir"/etc/nginx/html/ "$pkgdir"/usr/share/nginx
128
129
install -Dm644 ../logrotate "$pkgdir"/etc/logrotate.d/nginx
130
install -Dm644 ../angie.service "$pkgdir"/usr/lib/systemd/system/angie.service
131
ln -sf /usr/lib/systemd/system/angie.service "$pkgdir"/usr/lib/systemd/system/nginx.service
132
install -Dm644 LICENSE "$pkgdir"/usr/share/licenses/$pkgbase/LICENSE
133
134
rmdir "$pkgdir"/run
135
136
install -Dm0644 objs/angie.8 "$pkgdir"/usr/share/man/man8/angie.8
137
138
ln -sf /usr/bin/nginx "$pkgdir"/usr/bin/angie
139
140
for i in ftdetect ftplugin indent syntax; do
141
install -Dm644 contrib/vim/$i/angie.vim \
142
"$pkgdir/usr/share/vim/vimfiles/$i/angie.vim"
143
done
144
}
145
146
package_angie-src() {
147
pkgdesc="Source code of angie $pkgver, useful for building modules"
148
conflicts=(nginx-src)
149
150
install -d "$pkgdir/usr/src"
151
cp -r $pkgbase-$pkgver-src "$pkgdir/usr/src/angie"
152
}
153
154
Changes since previous scan
--- PKGBUILD @ 2026-10-14 00:06+++ PKGBUILD @ 2026-11-01 00:21@@ -2,7 +2,7 @@ pkgbase=angie pkgname=(angie angie-src)-pkgver=1.12.2+pkgver=1.12.3 pkgrel=1 arch=('x86_64') url="https://github.com/webserver-llc/angie"@@ -13,11 +13,11 @@ angie.service logrotate https://angie.software/keys/angie-signing.gpg)-sha512sums=('79a5ddb4721f6fde0b158e9cd55ccd3429bdee3c5faef34c4ce7ec39d019390bbb654fef843acb894480fc1aab49154d2fcd72c7114d83f5f04222ac81b15f7c'+sha512sums=('2083ba625f664c1babfbec4bfdf1f8b2ebdab9debef7ab7bb3c31ed98a1ab366d9752c77a14a5d8c568ae69c2cf4ffb0fb150fe117a8fcfb65a7e0f71d3ce2d7' '65e3ba379411c638db6ac506b08efc118c975b00f65ed43c8af9d45d564711d55520bf56524e787df31a9b7dc65af4c7454b3b9baf2f8f013a44d9087be53a51' '2f4dfcfa711b8bcbc5918ba635f5e430ef7132e66276261ade62bb1cba016967432c8dce7f84352cb8b07dc7c6b18f09177aa3eb92c8e358b2a106c8ca142fe9' 'f3e2b68cfae760fd04ad4829834bf562bb65a9204e2c83798550b4e53a12f532c878148b2c675370f9fef069b58b68e5b99b3b6fe6fe4f4e046ad61bab538c74')-b2sums=('6e37ec497be82c83167cba15de5313549bde8f3b5e1d96a49a2eae6661b9a43115b291c56f6ccfb425076bf8972e76fe2c32fd0d2a4ff494be5e6229393f18d3'+b2sums=('935ce39c3c4f3495ef7e118a1b498e65dc84c15281ea0fb14f7b3fb92bb5961fe9afe316548d34d3041efea9dd67b5ad898f8465a1b112bf35e392347188d2dc' '27619a4a3ca0c1b977c54c8ba99fa19abebef37e8eff7c211567e47a98b80ce038f7ec20b7ec936aa0f8945a16fe064cf1fe58d68db3d493f4f63d057d5bf007' 'e1755f61b4eaece83c6c22e48f9e5e316851d1dc35f8d770f837c7d3c8bdc894af1b697c25f1788ac50cd597085c22fb9bf8096a55ecf7659d63185f68ba2d8a' '7957894d9973ddc8ca44a3ac1844eefbf71f2681ae57d51fcdd0ca570c0cafbb027d05fa2b288d695e7069eb26600d0099cc354fcc4b9061971243b384edd01a')Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 15:20:15 | Medium | 1 |
| 2026-10-14 00:06:47 | Low | 2 |