angie-tongsuo
LOW
maintainer XianZongzi
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package builds from source hosted on the project's own domain and GitHub; the non-whitelisted host is the project's official download site, and the source is verified with checksums, posing low risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source hosted on the project's own domain and GitHub; the non-whitelisted host is the project's official download site, and the source is verified with checksums, posing low risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:28
source=(https://download.angie.software/files/$_pkgname-$pkgver.tar.gz
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: 咸粽子 <xianzongzi aliyun.com>
2
pkgname=angie-tongsuo
3
_pkgname=angie
4
pkgver=1.11.4
5
_tongsuo_version=8.4.0
6
pkgrel=1
7
pkgdesc="Angie is an efficient, powerful, and scalable web server that was forked from angie.With Tongsuo.带了铜锁密码库的 angie，支持国密 NTLS。"
8
arch=("x86_64")
9
url="https://angie.software"
10
license=(custom)
11
groups=()
12
depends=(gd geoip pcre2 zlib glibc libxcrypt)
13
makedepends=()
14
provides=()
15
conflicts=()
16
replaces=()
17
options=()
18
backup=(etc/angie/fastcgi.conf
19
etc/angie/fastcgi_params
20
etc/angie/koi-win
21
etc/angie/koi-utf
22
etc/angie/mime.types
23
etc/angie/angie.conf
24
etc/angie/scgi_params
25
etc/angie/uwsgi_params
26
etc/angie/win-utf
27
etc/logrotate.d/angie)
28
source=(https://download.angie.software/files/$_pkgname-$pkgver.tar.gz
29
Tongsuo-$_tongsuo_version.tar.gz::https://github.com/Tongsuo-Project/Tongsuo/archive/refs/tags/$_tongsuo_version.tar.gz
30
)
31
sha256sums=('b95009ceef7a1c40809aead95f71901ca1c5c9d2630eca0763853811b641983c'
32
'57c2741750a699bfbdaa1bbe44a5733e9c8fc65d086c210151cfbc2bbd6fc975')
33
34
35
_common_flags=(
36
--with-compat
37
--with-debug
38
--with-file-aio
39
--with-http_addition_module
40
--with-http_auth_request_module
41
--with-http_dav_module
42
--with-http_degradation_module
43
--with-http_flv_module
44
--with-http_geoip_module
45
--with-http_gunzip_module
46
--with-http_gzip_static_module
47
--with-http_image_filter_module
48
--with-http_mp4_module
49
--with-http_random_index_module
50
--with-http_realip_module
51
--with-http_secure_link_module
52
--with-http_slice_module
53
--with-http_ssl_module
54
--with-http_stub_status_module
55
--with-http_sub_module
56
--with-http_v2_module
57
--with-http_v3_module
58
--with-openssl=../Tongsuo-$_tongsuo_version
59
--with-openssl-opt=enable-ntls
60
--with-ntls
61
--with-mail
62
--with-mail_ssl_module
63
--with-pcre-jit
64
--with-stream
65
--with-stream_geoip_module
66
--with-stream_realip_module
67
--with-stream_ssl_module
68
--with-stream_ssl_preread_module
69
--with-threads
70
)
71
72
_stable_flags=(
73
)
74
75
build() {
76
cd "$_pkgname-$pkgver"
77
./configure \
78
--prefix=/etc/angie \
79
--conf-path=/etc/angie/angie.conf \
80
--sbin-path=/usr/bin/angie \
81
--pid-path=/run/angie.pid \
82
--lock-path=/run/lock/angie.lock \
83
--user=http \
84
--group=http \
85
--http-log-path=/var/log/angie/access.log \
86
--error-log-path=stderr \
87
--http-client-body-temp-path=/var/lib/angie/client-body \
88
--http-proxy-temp-path=/var/lib/angie/proxy \
89
--http-fastcgi-temp-path=/var/lib/angie/fastcgi \
90
--http-scgi-temp-path=/var/lib/angie/scgi \
91
--http-uwsgi-temp-path=/var/lib/angie/uwsgi \
92
--with-cc-opt="$CFLAGS $CPPFLAGS" \
93
--with-ld-opt="$LDFLAGS" \
94
${_common_flags[@]} \
95
${_stable_flags[@]}
96
97
make
98
}
99
100
package() {
101
cd "$_pkgname-$pkgver"
102
make DESTDIR="$pkgdir/" install
103
104
rm "$pkgdir"/etc/angie/*.default
105
# rm "$pkgdir"/etc/angie/mime.types # in mailcap ==> /etc/nginx/mime.types
106
107
install -d "$pkgdir"/var/lib/angie
108
install -dm700 "$pkgdir"/var/lib/angie/proxy
109
110
chmod 755 "$pkgdir"/var/log/angie
111
chown root:root "$pkgdir"/var/log/angie
112
113
install -Dm644 ../../logrotate "$pkgdir"/etc/logrotate.d/angie
114
install -Dm644 ../../service "$pkgdir"/usr/lib/systemd/system/angie.service
115
install -Dm644 LICENSE "$pkgdir"/usr/share/licenses/$pkgname/LICENSE_angie
116
install -Dm644 ../Tongsuo-$_tongsuo_version/LICENSE.txt "$pkgdir"/usr/share/licenses/$pkgname/LICENSE_Tongsuo
117
118
rmdir "$pkgdir"/run
119
120
install -d "$pkgdir"/usr/share/man/man8/
121
gzip -9c man/angie.8 > "$pkgdir"/usr/share/man/man8/angie.8.gz
122
123
}
124
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |