angie-tongsuo

maintainer XianZongzi · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package builds from source hosted on the project's own domain and GitHub; the non-whitelisted host is the project's official download site, and the source is verified with checksums, posing low risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source hosted on the project's own domain and GitHub; the non-whitelisted host is the project's official download site, and the source is verified with checksums, posing low risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:28 source=(https://download.angie.software/files/$_pkgname-$pkgver.tar.gz

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: 咸粽子 <xianzongzi aliyun.com>
2pkgname=angie-tongsuo
3_pkgname=angie
4pkgver=1.11.4
5_tongsuo_version=8.4.0
6pkgrel=1
7pkgdesc="Angie is an efficient, powerful, and scalable web server that was forked from angie.With Tongsuo.带了铜锁密码库的 angie,支持国密 NTLS。"
8arch=("x86_64")
9url="https://angie.software"
10license=(custom)
11groups=()
12depends=(gd geoip pcre2 zlib glibc libxcrypt)
13makedepends=()
14provides=()
15conflicts=()
16replaces=()
17options=()
18backup=(etc/angie/fastcgi.conf
19 etc/angie/fastcgi_params
20 etc/angie/koi-win
21 etc/angie/koi-utf
22 etc/angie/mime.types
23 etc/angie/angie.conf
24 etc/angie/scgi_params
25 etc/angie/uwsgi_params
26 etc/angie/win-utf
27 etc/logrotate.d/angie)
28source=(https://download.angie.software/files/$_pkgname-$pkgver.tar.gz
29 Tongsuo-$_tongsuo_version.tar.gz::https://github.com/Tongsuo-Project/Tongsuo/archive/refs/tags/$_tongsuo_version.tar.gz
30)
31sha256sums=('b95009ceef7a1c40809aead95f71901ca1c5c9d2630eca0763853811b641983c'
32 '57c2741750a699bfbdaa1bbe44a5733e9c8fc65d086c210151cfbc2bbd6fc975')
33
34
35_common_flags=(
36 --with-compat
37 --with-debug
38 --with-file-aio
39 --with-http_addition_module
40 --with-http_auth_request_module
41 --with-http_dav_module
42 --with-http_degradation_module
43 --with-http_flv_module
44 --with-http_geoip_module
45 --with-http_gunzip_module
46 --with-http_gzip_static_module
47 --with-http_image_filter_module
48 --with-http_mp4_module
49 --with-http_random_index_module
50 --with-http_realip_module
51 --with-http_secure_link_module
52 --with-http_slice_module
53 --with-http_ssl_module
54 --with-http_stub_status_module
55 --with-http_sub_module
56 --with-http_v2_module
57 --with-http_v3_module
58 --with-openssl=../Tongsuo-$_tongsuo_version
59 --with-openssl-opt=enable-ntls
60 --with-ntls
61 --with-mail
62 --with-mail_ssl_module
63 --with-pcre-jit
64 --with-stream
65 --with-stream_geoip_module
66 --with-stream_realip_module
67 --with-stream_ssl_module
68 --with-stream_ssl_preread_module
69 --with-threads
70)
71
72_stable_flags=(
73)
74
75build() {
76 cd "$_pkgname-$pkgver"
77 ./configure \
78 --prefix=/etc/angie \
79 --conf-path=/etc/angie/angie.conf \
80 --sbin-path=/usr/bin/angie \
81 --pid-path=/run/angie.pid \
82 --lock-path=/run/lock/angie.lock \
83 --user=http \
84 --group=http \
85 --http-log-path=/var/log/angie/access.log \
86 --error-log-path=stderr \
87 --http-client-body-temp-path=/var/lib/angie/client-body \
88 --http-proxy-temp-path=/var/lib/angie/proxy \
89 --http-fastcgi-temp-path=/var/lib/angie/fastcgi \
90 --http-scgi-temp-path=/var/lib/angie/scgi \
91 --http-uwsgi-temp-path=/var/lib/angie/uwsgi \
92 --with-cc-opt="$CFLAGS $CPPFLAGS" \
93 --with-ld-opt="$LDFLAGS" \
94 ${_common_flags[@]} \
95 ${_stable_flags[@]}
96
97 make
98}
99
100package() {
101 cd "$_pkgname-$pkgver"
102 make DESTDIR="$pkgdir/" install
103
104 rm "$pkgdir"/etc/angie/*.default
105 # rm "$pkgdir"/etc/angie/mime.types # in mailcap ==> /etc/nginx/mime.types
106
107 install -d "$pkgdir"/var/lib/angie
108 install -dm700 "$pkgdir"/var/lib/angie/proxy
109
110 chmod 755 "$pkgdir"/var/log/angie
111 chown root:root "$pkgdir"/var/log/angie
112
113 install -Dm644 ../../logrotate "$pkgdir"/etc/logrotate.d/angie
114 install -Dm644 ../../service "$pkgdir"/usr/lib/systemd/system/angie.service
115 install -Dm644 LICENSE "$pkgdir"/usr/share/licenses/$pkgname/LICENSE_angie
116 install -Dm644 ../Tongsuo-$_tongsuo_version/LICENSE.txt "$pkgdir"/usr/share/licenses/$pkgname/LICENSE_Tongsuo
117
118 rmdir "$pkgdir"/run
119
120 install -d "$pkgdir"/usr/share/man/man8/
121 gzip -9c man/angie.8 > "$pkgdir"/usr/share/man/man8/angie.8.gz
122
123}
124

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion