backwild

maintainer emiliejulliard · 5 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The source is a tarball from the project's official website, building from source is normal for AUR packages, and the host, while not whitelisted, is plausibly the project's own.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official website, building from source is normal for AUR packages, and the host, while not whitelisted, is plausibly the project's own.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:11 source=("http://www.kornelix.net/downloads/downloads/$pkgname-$pkgver-source.tar.gz")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Stefan Husmann <stefan-husmann@t-online.de>
2
3pkgname=backwild
4pkgver=2.4
5pkgrel=6
6pkgdesc="A backup program for USB devices"
7url="http://www.kornelix.net/backwild/backwild.html"
8arch=('i686' 'x86_64')
9license=('GPL3')
10depends=('clutter-gtk')
11source=("http://www.kornelix.net/downloads/downloads/$pkgname-$pkgver-source.tar.gz")
12sha256sums=('47775e21e62a0ecc731abc8cb62940de618b67a6e37961bb9800de37b9be06bb')
13options=('!emptydirs')
14
15build() {
16 cd $pkgname
17 export PREFIX=/usr
18 make
19}
20
21package() {
22 cd $pkgname
23 make DESTDIR="$pkgdir" ICONDIR=/usr/share/pixmaps install
24}
25

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion