dehtml

LOW

maintainer aksr 1 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is a tarball from the project's official domain hosting the project's own code, building from source is normal for AUR, and the host, while not whitelisted, is plausibly the project's official site.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official domain hosting the project's own code, building from source is normal for AUR, and the host, while not whitelisted, is plausibly the project's official site.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 source=("http://www.moria.de/~michael/$pkgname/$pkgname-$pkgver.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Contributor: Frst21 <bud23@vp.pl>
    
      2# Contributor: Chris Down <cdown.uk@gmail.com>
    
      3# Maintainer: aksr <aksr at t-com dot me>
    
      4pkgname=dehtml
    
      5pkgver=1.8
    
      6pkgrel=3
    
      7pkgdesc="Removes HTML constructs."
    
      8arch=('i686' 'x86_64')
    
      9url="http://www.moria.de/~michael/dehtml/"
    
      10license=('GPL')
    
      11provides=('dehtml')
    
      12source=("http://www.moria.de/~michael/$pkgname/$pkgname-$pkgver.tar.gz")
    
      13md5sums=('b60f88997c702fa682631787c7b15e2c')
    
      14sha1sums=('c931493a4f50b65b0d129f51de025f07784669fb')
    
      15sha256sums=('a00e86643b0aa73861e9d8d619a80370f0f99519d34ce12459fab77f5f6b5bde')
    
      16
    
      17build() {
    
      18  cd "$srcdir/$pkgname-$pkgver"
    
      19  ./configure --prefix=/usr --sysconfdir=/etc 
    
      20  make
    
      21}
    
      22
    
      23package() {
    
      24  cd "$srcdir/$pkgname-$pkgver"
    
      25  make prefix="$pkgdir/usr" install
    
      26}
    
      27
    
      28

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2