dash-static

MEDIUM
maintainer Joshix 0 votes scanned 2026-09-10 21:21:21.441781
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:15 source=("http://gondor.apana.org.au/~herbert/dash/files/dash-${pkgver}.tar.gz")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Joshix
2# Contributor: Immae <ismael.bouya@normalesup.org>
3
4pkgname=dash-static
5_pkgbase=dash
6pkgver=0.5.13.5
7pkgrel=1
8pkgdesc="POSIX compliant shell that aims to be as small as possible. Statically compiled"
9arch=('x86_64' 'aarch64')
10url="http://gondor.apana.org.au/~herbert/dash/"
11license=('BSD')
12provides=("${_pkgbase}")
13conflicts=("${_pkgbase}")
14makedepends=('gcc' 'make' 'gzip')
15source=("http://gondor.apana.org.au/~herbert/dash/files/dash-${pkgver}.tar.gz")
16# http://gondor.apana.org.au/~herbert/dash/files/dash-${pkgver}.tar.gz.sha512sum
17sha512sums=('ae326c110713a9da6b7afb977ca6fd931793b03011f0a7aa2c42e873f116ed09448deea9ef5ca4515fe3afe24e210e0aaa580f7de89934edda9cf31ee44c94dd')
18
19
20build () {
21 cd "dash-${pkgver}"
22 ./configure --enable-static
23# --with-libedit # disabled libedit for now
24 make
25 gzip -f -k9 src/dash.1
26}
27
28package() {
29 cd "dash-$pkgver"
30 install -Dm755 src/dash "${pkgdir}/usr/bin/dash"
31 install -Dm644 COPYING "${pkgdir}/usr/share/licenses/${_pkgbase}/COPYING"
32 install -Dm644 src/dash.1.gz "${pkgdir}/usr/share/man/man1/dash.1.gz"
33}
34

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-09-10 21:21
@@ -3,7 +3,7 @@
pkgname=dash-static
_pkgbase=dash
-pkgver=0.5.13.4
+pkgver=0.5.13.5
pkgrel=1
pkgdesc="POSIX compliant shell that aims to be as small as possible. Statically compiled"
arch=('x86_64' 'aarch64')
@@ -14,7 +14,7 @@
makedepends=('gcc' 'make' 'gzip')
source=("http://gondor.apana.org.au/~herbert/dash/files/dash-${pkgver}.tar.gz")
# http://gondor.apana.org.au/~herbert/dash/files/dash-${pkgver}.tar.gz.sha512sum
-sha512sums=('383d0ea8316fea3ce523dc535173a94a22e58bfaec2dec3309d3496a864e5e67711965563db82e7e181f8d7b67a25033107b4c9453c3d6b3820c6586d1f99675')
+sha512sums=('ae326c110713a9da6b7afb977ca6fd931793b03011f0a7aa2c42e873f116ed09448deea9ef5ca4515fe3afe24e210e0aaa580f7de89934edda9cf31ee44c94dd')
build () {

Scan history

Scanned at (UTC)SeverityRules
2026-09-10 21:21:21 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion