cdesktopenv-git

maintainer rubin55 · 2 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The source is a git clone from SourceForge, which is a non-whitelisted but project-owned and standard hosting platform; building from the project's own source code is normal for AUR packages and poses no inherent supply-chain risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a git clone from SourceForge, which is a non-whitelisted but project-owned and standard hosting platform; building from the project's own source code is normal for AUR packages and poses no inherent supply-chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:48 source=('git+https://git.code.sf.net/p/cdesktopenv/code'

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Rubin Simons <me@rubin55.org>
    
      2# Contributor: Sidney Kuyateh <autinerd-arch at kuyateh dot eu>
    
      3# Contributor: Brian Cole <arch at brianEcole dot com>
    
      4# Contributor: Ecmel Ercan <ecmel dot ercan at gmail dot com>
    
      5# Contributor: Vain <aurmaint1 on host: uninformativ dot de>
    
      6# Contributor: BlindPenguin <ferdinand holzner at gmail dot com>
    
      7
    
      8_gitname=cdesktopenv
    
      9pkgname="${_gitname}"-git
    
      10pkgver=2.5.3.116.g11d82e28b
    
      11pkgrel=1
    
      12pkgdesc="Common Desktop Environment"
    
      13url="http://sourceforge.net/projects/cdesktopenv/"
    
      14arch=('x86_64')
    
      15license=('LGPL2')
    
      16install="cdesktopenv.install"
    
      17depends=(
    
      18    libutempter
    
      19    libxaw 
    
      20    libxinerama
    
      21    libxpm
    
      22    libxss
    
      23    mksh
    
      24    ncurses
    
      25    openmotif
    
      26    opensp
    
      27    rpcbind
    
      28    rpcsvc-proto
    
      29    tcl
    
      30    xbitmaps
    
      31    xorg-bdftopcf
    
      32    xorg-fonts-misc
    
      33    xorg-mkfontdir
    
      34    xorg-sessreg
    
      35    xorg-xrdb
    
      36)
    
      37makedepends=(
    
      38    ncompress
    
      39    bison
    
      40)
    
      41optdepends=(
    
      42    'xorg-fonts-100dpi: additional fonts'
    
      43    'cups: for printing support'
    
      44    'xinetd: for rpc services'
    
      45)
    
      46conflicts=('cdesktopenv')
    
      47backup=('etc/dt/config/xfonts/C/fonts.alias')
    
      48source=('git+https://git.code.sf.net/p/cdesktopenv/code'
    
      49    'cdesktopenv.install'
    
      50    'dtlogin.service'
    
      51    'fonts.alias'
    
      52    'fonts.dir'
    
      53    'startcdesession.sh'
    
      54    'cde.desktop')
    
      55
    
      56sha256sums=('SKIP'
    
      57            'c7b9114eba1a89991a4abeb0b87cd7420f7301c341e29593901125214ea86e4d'
    
      58            'b6ca01a4ea42849e11dba973c02b6d26608c2abb48a13dca0af3b95efec6de7f'
    
      59            '5de87d008bc6a8b7d6c2dc0637a127fb1ceea819fdc28a5d466973d302337e90'
    
      60            '9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa'
    
      61            '8a7ba3b3856d4ef05c5703abd8e779df577c6b91931d3d0cc5f04d15dc665d57'
    
      62            '1db4036888515de17a4b49d7f5ca3d34a5d601cc8696f603b390e98283197125')
    
      63
    
      64pkgver() {
    
      65    cd "$srcdir/code/cde"
    
      66    git describe --long --tags | sed 's/-/./g'
    
      67}
    
      68
    
      69build() {
    
      70    cd "$srcdir/code/cde"
    
      71    ./autogen.sh
    
      72    ./configure --with-gnu-ld --prefix="/usr/dt"
    
      73    make CFLAGS="$CFLAGS -std=c99 -I /usr/include/tirpc" LDFLAGS="$LDFLAGS -lm"
    
      74}
    
      75
    
      76package() {
    
      77    install -d -m 755 -o bin -g bin "$pkgdir/var/dt"
    
      78    install -d -m 755 -o bin -g bin "$pkgdir/var/dt/appconfig"
    
      79    install -d -m 755 -o bin -g bin "$pkgdir/var/dt/appconfig/appmanager"
    
      80    install -d -m 755 -o bin -g bin "$pkgdir/var/dt/tmp"
    
      81
    
      82    mkdir -p "$pkgdir/etc/dt"
    
      83    mkdir -p "$pkgdir/etc/dt/appconfig/appmanager/C"
    
      84    mkdir -p "$pkgdir/etc/dt/appconfig/help/C"
    
      85    mkdir -p "$pkgdir/etc/dt/appconfig/icons/C"
    
      86    mkdir -p "$pkgdir/etc/dt/appconfig/types/C"
    
      87    mkdir -p "$pkgdir/etc/dt/config/Xsession.d"
    
      88    mkdir -p "$pkgdir/etc/dt/config/xfonts/C"
    
      89
    
      90    install -m644 "$srcdir"/fonts.{alias,dir} "$pkgdir/etc/dt/config/xfonts/C/"
    
      91    install -Dm644 "$srcdir/cde.desktop" "$pkgdir/usr/share/xsessions/cde.desktop"
    
      92    install -Dm644 "$srcdir/dtlogin.service" "$pkgdir/usr/lib/systemd/system/dtlogin.service" 
    
      93
    
      94    install -dm755 "$pkgdir/var/spool/calendar"
    
      95    install -Dm644 "$srcdir/code/cde/contrib/xinetd/cmsd" "$pkgdir/etc/xinetd.d/cmsd"
    
      96    install -Dm644 "$srcdir/code/cde/contrib/xinetd/ttdbserver" "$pkgdir/etc/xinetd.d/ttdbserver"
    
      97    install -Dm755 "$srcdir/startcdesession.sh" "$pkgdir/usr/bin/startcdesession.sh"
    
      98
    
      99    export LANG=C
    
      100    export LC_ALL=C 
    
      101    cd "$srcdir/code/cde"
    
      102    make install DESTDIR="$pkgdir"
    
      103}
    
      104

Changes since previous scan

--- PKGBUILD @ 2026-08-15 00:26
+++ PKGBUILD @ 2026-08-18 00:03
@@ -7,7 +7,7 @@
 
 _gitname=cdesktopenv
 pkgname="${_gitname}"-git
-pkgver=2.5.3.108.ga128ceafc
+pkgver=2.5.3.116.g11d82e28b
 pkgrel=1
 pkgdesc="Common Desktop Environment"
 url="http://sourceforge.net/projects/cdesktopenv/"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 13:30:33	MEDIUM	1
2026-08-15 00:26:13	LOW	2
2026-08-14 00:03:41	LOW	2
2026-08-13 19:26:43	MEDIUM	1
2026-07-20 00:19:49	CLEAN	2
2026-07-19 21:12:02	MEDIUM	1
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2
2026-07-14 00:09:48	LOW	2
2026-07-13 00:19:36	LOW	2
2026-07-12 00:27:26	LOW	2
2026-07-11 19:38:01	MEDIUM	1
2026-06-19 23:51:18	CLEAN	2
2026-06-19 19:07:35	MEDIUM	2