citadel

LOW

maintainer orphaned 0 votes scanned 2026-11-02 00:26:00.633185

View on AUR

Why flagged

The source is cloned from git.citadel.org, the project's own official git server, at a specific release tag; this is normal AUR packaging of an upstream project's own source, not a suspicious third-party host.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 85%): The source is cloned from git.citadel.org, the project's own official git server, at a specific release tag; this is normal AUR packaging of an upstream project's own source, not a suspicious third-party host.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 source=("$_gitname::git://git.citadel.org/appl/gitroot/citadel.git#tag=$_gittag"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: nnnn20430 <nnnn20430@mindcraft.si.eu.org>
    
      2# Contributor: Jason PLum <jplum@archlinuxarm.org>
    
      3
    
      4pkgbase=citadel
    
      5pkgname=('citadel' 'libcitadel' 'webcit')
    
      6_gitname=citadel
    
      7pkgver=902
    
      8_gittag=Release_902
    
      9pkgrel=1
    
      10pkgdesc="Citadel/UX is a collaboration suite (messaging and groupware) that is descended from the Citadel family of programs which became popular in the 1980s and 1990s as a bulletin board system platform."
    
      11arch=('i686' 'x86_64')
    
      12url="http://www.citadel.org/"
    
      13makedepends=('git' 'libev' 'c-ares' 'curl' 'expat' 'libical' 'libsieve' 'perl-berkeleydb' 'glibc' 'zlib' 'libtool' 'autoconf' 'make' 'gcc')
    
      14license=('GPL')
    
      15conflicts=()
    
      16changelog=""
    
      17source=("$_gitname::git://git.citadel.org/appl/gitroot/citadel.git#tag=$_gittag"
    
      18        'citadel.service'
    
      19        'webcit.service'
    
      20        'webcits.service'
    
      21        '001-libical2_support_citadel.patch'
    
      22        '001-libical2_support_webcit.patch')
    
      23md5sums=('SKIP'
    
      24         '1dad4ebec773f08de372d794ed16d214'
    
      25         '3904b1795a552fd2f2bc8f9741f6dc58'
    
      26         'cae0cfa8f42e1f0e96fbf0e4aff0ba56'
    
      27         'ce32349cd9f646d41bb444c6cb47a033'
    
      28         '916e66109a16d94a712ab8372ac98719')
    
      29
    
      30prepare() {
    
      31  cd "$srcdir/$_gitname"
    
      32  git apply "$srcdir/001-libical2_support_citadel.patch"
    
      33  git apply "$srcdir/001-libical2_support_webcit.patch"
    
      34}
    
      35
    
      36build() {
    
      37  cd "$srcdir/$_gitname/libcitadel"
    
      38  ./bootstrap
    
      39  ./configure --prefix=/usr
    
      40  make
    
      41  
    
      42  (
    
      43    cd "$srcdir/$_gitname/citadel"
    
      44    export CFLAGS="${CFLAGS} -I ../libcitadel/lib"
    
      45    export LDFLAGS="${LDFLAGS} -L../libcitadel/.libs"
    
      46    ./bootstrap
    
      47    ./configure --prefix=/usr/citadel
    
      48    make
    
      49  )
    
      50  
    
      51  (
    
      52    cd "$srcdir/$_gitname/webcit"
    
      53    export CFLAGS="${CFLAGS} -I ../libcitadel/lib"
    
      54    export LDFLAGS="${LDFLAGS} -L../libcitadel/.libs"
    
      55    ./bootstrap
    
      56    ./configure --prefix=/usr/citadel/webcit
    
      57    make
    
      58  )
    
      59}
    
      60
    
      61package_citadel() {
    
      62  depends=('libcitadel' 'libev' 'c-ares' 'curl' 'expat' 'libical' 'libsieve' 'perl-berkeleydb')
    
      63  optdepends=('openssl: SSL support' 'shared-mime-info: filetype identification')
    
      64  install="citadel.install"
    
      65
    
      66  cd "$srcdir/$_gitname/citadel"
    
      67  make DESTDIR="$pkgdir" install
    
      68  install -Dm644 "$srcdir/citadel.service" "$pkgdir/usr/lib/systemd/system/citadel.service"	
    
      69}
    
      70
    
      71package_libcitadel() {
    
      72  depends=('glibc' 'zlib')
    
      73  optdepends=()
    
      74
    
      75  cd "$srcdir/$_gitname/libcitadel"
    
      76  make DESTDIR="$pkgdir" install
    
      77}
    
      78
    
      79package_webcit() {
    
      80  depends=('citadel')
    
      81  optdepends=('openssl: SSL support' 'shared-mime-info: filetype identification')
    
      82  install="webcit.install"
    
      83
    
      84  cd "$srcdir/$_gitname/webcit"
    
      85  make DESTDIR="$pkgdir" install
    
      86  install -Dm644 "$srcdir/webcit.service" "$pkgdir/usr/lib/systemd/system/webcit.service"
    
      87  install -Dm644 "$srcdir/webcits.service" "$pkgdir/usr/lib/systemd/system/webcits.service"
    
      88}
    
      89

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-02 00:26:00	Low	3
2026-11-01 22:05:28	Low	3
2026-11-01 22:01:45	Medium	2