barnard-git

LOW
maintainer stormdragon2976 1 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The source is a Git repository from the maintainer's own plausible project domain, used to build the software from source; this is normal AUR packaging behavior despite the non-whitelisted host.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Git repository from the maintainer's own plausible project domain, used to build the software from source; this is normal AUR packaging behavior despite the non-whitelisted host.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:23 source=("barnard::git+https://git.stormux.org/storm/barnard")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Storm Dragon <storm_dragon@stormux.org>
2# Maintainer: Michael Taboada <michael@2mb.solutions>
3
4pkgname="barnard-git"
5pkgver=r297.c1722c2
6pkgrel=1
7epoch=2
8pkgdesc="A command line mumble client."
9arch=('aarch64' 'armv7h' 'x86_64')
10url="https://git.stormux.org/storm/barnard"
11license=('GPL-2.0-only' 'GPL-3.0-or-later')
12depends=('openal' 'opus' 'opusfile' 'rnnoise')
13optdepends=(
14 'openssl: certificate management from barnard-ui'
15 'magic-wormhole: send logs from barnard-ui'
16 'sox: sound effects from barnard-sound.sh'
17 'socat: Fenrir notifications from barnard-sound.sh'
18 'speech-dispatcher: fallback speech notifications from barnard-sound.sh'
19 'espeak-ng: alternate fallback speech notifications from barnard-sound.sh'
20 'libnotify: desktop notifications from barnard-sound.sh'
21)
22makedepends=('git' 'go')
23source=("barnard::git+https://git.stormux.org/storm/barnard")
24install="${pkgname}.install"
25sha512sums=('SKIP')
26
27prepare(){
28 cd "${pkgname%-git}"
29 mkdir -p build/
30}
31
32pkgver() {
33 cd "${srcdir}/barnard"
34 printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
35}
36
37build() {
38 cd "${pkgname%-git}"
39 export CGO_CPPFLAGS="${CPPFLAGS}"
40 export CGO_CFLAGS="${CFLAGS}"
41 export CGO_CXXFLAGS="${CXXFLAGS}"
42 export CGO_LDFLAGS="${LDFLAGS}"
43 export GOFLAGS="-buildmode=pie -trimpath -ldflags=-linkmode=external -mod=readonly -modcacherw"
44 go build -o build/ . ./cmd/barnard-ui
45}
46
47package() {
48 cd "${pkgname%-git}"
49 install -Dm755 build/barnard "$pkgdir"/usr/bin/barnard
50 install -Dm755 build/barnard-ui "$pkgdir"/usr/bin/barnard-ui
51 install -Dm755 "$srcdir/barnard/extras/barnard-sound.sh" "$pkgdir/usr/share/barnard/barnard-sound.sh"
52 install -Dm644 "$srcdir/barnard/README.md" "$pkgdir/usr/share/doc/$pkgname/README.md"
53}
54
55# vim:set ts=2 sw=2 et:
56

Changes since previous scan

--- PKGBUILD @ 2026-09-12 00:25
+++ PKGBUILD @ 2026-09-17 00:27
@@ -2,15 +2,23 @@
# Maintainer: Michael Taboada <michael@2mb.solutions>
pkgname="barnard-git"
-pkgver=r42.5ac6703
+pkgver=r297.c1722c2
pkgrel=1
epoch=2
pkgdesc="A command line mumble client."
arch=('aarch64' 'armv7h' 'x86_64')
url="https://git.stormux.org/storm/barnard"
-license=('GPL2')
+license=('GPL-2.0-only' 'GPL-3.0-or-later')
depends=('openal' 'opus' 'opusfile' 'rnnoise')
-optdepends=('dialog: for barnard-ui')
+optdepends=(
+ 'openssl: certificate management from barnard-ui'
+ 'magic-wormhole: send logs from barnard-ui'
+ 'sox: sound effects from barnard-sound.sh'
+ 'socat: Fenrir notifications from barnard-sound.sh'
+ 'speech-dispatcher: fallback speech notifications from barnard-sound.sh'
+ 'espeak-ng: alternate fallback speech notifications from barnard-sound.sh'
+ 'libnotify: desktop notifications from barnard-sound.sh'
+)
makedepends=('git' 'go')
source=("barnard::git+https://git.stormux.org/storm/barnard")
install="${pkgname}.install"
@@ -33,15 +41,15 @@
export CGO_CXXFLAGS="${CXXFLAGS}"
export CGO_LDFLAGS="${LDFLAGS}"
export GOFLAGS="-buildmode=pie -trimpath -ldflags=-linkmode=external -mod=readonly -modcacherw"
- go build -o build
+ go build -o build/ . ./cmd/barnard-ui
}
package() {
cd "${pkgname%-git}"
install -Dm755 build/barnard "$pkgdir"/usr/bin/barnard
- install -m755 "$srcdir/barnard/barnard-ui" "$pkgdir/usr/bin"
+ install -Dm755 build/barnard-ui "$pkgdir"/usr/bin/barnard-ui
install -Dm755 "$srcdir/barnard/extras/barnard-sound.sh" "$pkgdir/usr/share/barnard/barnard-sound.sh"
- install -Dm644 "$srcdir/barnard/README.md" "$pkgdir/usr/share/doc/barnard"
+ install -Dm644 "$srcdir/barnard/README.md" "$pkgdir/usr/share/doc/$pkgname/README.md"
}
# vim:set ts=2 sw=2 et:

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 21:12:39 Medium 1
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion