delegate
The source is downloaded from the project's official domain (ftp.delegate.org) using a non-standard URL format with embedded credentials, but this is the legitimate upstream host for the software; building from official source is normal AUR packaging practice.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The source is downloaded from the project's official domain (ftp.delegate.org) using a non-standard URL format with embedded credentials, but this is the legitimate upstream host for the software; building from official source is normal AUR packaging practice.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:17
source=(ftp://ftp:ps790809%40inbox%2Eru@ftp.delegate.org/pub/DeleGate/delegate$pkgver.tar.gz
PKGBUILD
1 offending line(s) highlighted# $Id: PKGBUILD 266875 2017-11-15 14:29:11Z foutrelis $
# Maintainer: Sergej Pupykin <pupykin.s+arch@gmail.com>
# Maintainer: Kristóf Marussy <kristof@marussy.com>
# Contributor: Sergej Pupykin <pupykin.s+arch@gmail.com>
pkgname=delegate
pkgver=9.9.13
pkgrel=4
pkgdesc="Caching and converting multyprotocol proxy. For example, you may use it as NNTP web interface"
arch=('x86_64')
url="http://www.delegate.org/"
license=('GPL')
depends=('libnsl' 'pam')
optdepends=('openssl-1.0: TLS support' 'zlib: Zlib support')
options=(strip)
install=delegate.install
source=(ftp://ftp:ps790809%40inbox%2Eru@ftp.delegate.org/pub/DeleGate/delegate$pkgver.tar.gz
ssl3.patch
readycc.patch) # Patch from https://stackoverflow.com/a/62457597 by SatoxITS (author of delegate)
sha384sums=('3118c948643431c9cd232091a23ad6eca05fbe32c42537d3e8178cebce4a4916e51544874c19b509a4f5158d00198932'
'589f1c9c086340d4e5b3d111b176925951a656007495aed0100d7cd7c5051cfb8800f4283a01cfbb2de6e78baea6472a'
'6f549bedaa8bb840759ab043aa9e71befd40841b440d3d5ba78a1a3efe3449038064883def995af82508da2c2cbab62c')
prepare() {
cd "$srcdir"/$pkgname$pkgver
patch -p1 <"$srcdir"/ssl3.patch
patch -p1 <"$srcdir"/readycc.patch
}
build() {
cd "$srcdir"/$pkgname$pkgver
make ADMIN="root@localhost" CFLAGS="$CFLAGS -Wno-narrowing"
}
package() {
cd "$srcdir"/$pkgname$pkgver
install -D -m0755 src/delegated "$pkgdir"/usr/bin/delegated
install -D -m0755 subin/dgbind "$pkgdir"/usr/bin/dgbind
install -D -m0755 subin/dgchroot "$pkgdir"/usr/bin/dgchroot
install -D -m0755 subin/dgcpnod "$pkgdir"/usr/bin/dgcpnod
install -D -m0755 subin/dgpam "$pkgdir"/usr/bin/dgpam
install -D -m0644 doc/Manual.htm "$pkgdir"/usr/share/delegate/manual.htm
install -D -m0644 doc/tutor-en.htm "$pkgdir"/usr/share/delegate/tutor-en.htm
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |