devinorium-server-git
MEDIUM
maintainer HttpAnimations
0 votes
scanned 2026-10-28 21:50:44.871523
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:19
"flutter_linux_${_flutterver}-stable.tar.xz::https://storage.googleapis.com/flutter_infra_release/releases/stable/linux/flutter_linux_${_flutterver}-stable.tar.xz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: HttpAnimations
2
pkgname=devinorium-server-git
3
_pkgname=devinorium
4
pkgver=0.109.0.r4.gd480576
5
pkgrel=1
6
pkgdesc="Self-hosted web UI for AI coding agents - server (git build)"
7
arch=('x86_64')
8
url="https://gitlab.com/HttpAnimations/devinorium"
9
license=('AGPL-3.0-only')
10
options=('!lto')
11
depends=('glibc' 'gcc-libs' 'git')
12
makedepends=('cargo' 'git' 'unzip' 'zip' 'curl')
13
optdepends=('openssh: clone repositories over SSH')
14
provides=('devinorium-server')
15
conflicts=('devinorium-server')
16
backup=('etc/devinorium/devinorium.env')
17
_flutterver=3.44.9
18
source=("git+https://gitlab.com/HttpAnimations/devinorium.git"
19
"flutter_linux_${_flutterver}-stable.tar.xz::https://storage.googleapis.com/flutter_infra_release/releases/stable/linux/flutter_linux_${_flutterver}-stable.tar.xz"
20
"devinorium.service"
21
"devinorium.sysusers"
22
"devinorium.env")
23
sha256sums=('SKIP'
24
'a9120fa4a01048bdef438ddc3a2d4b7389662ea98a95db86eeaf10382bc4efcb'
25
'SKIP'
26
'SKIP'
27
'SKIP')
28
29
pkgver() {
30
cd "$_pkgname"
31
local ver
32
ver=$(git describe --long --tags 2>/dev/null || true)
33
if [ -n "$ver" ]; then
34
printf '%s' "$ver" | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
35
else
36
printf '0.0.0.r%s.g%s' "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
37
fi
38
}
39
40
build() {
41
export PATH="$srcdir/flutter/bin:$PATH"
42
export PUB_CACHE="$srcdir/pub-cache"
43
export CARGO_HOME="$srcdir/cargo-home"
44
flutter config --no-analytics >/dev/null 2>&1 || true
45
flutter precache --web >/dev/null
46
47
cd "$_pkgname/flutter"
48
flutter pub get
49
flutter build web --release --wasm
50
rm -rf build/web/canvaskit
51
52
rm -rf ../frontend/dist
53
mkdir -p ../frontend/dist
54
cp -r build/web/. ../frontend/dist/
55
56
cd ..
57
cargo build --release --locked
58
}
59
60
package() {
61
cd "$_pkgname"
62
install -Dm755 target/release/devinorium "$pkgdir/usr/bin/devinorium-server"
63
install -Dm644 "$srcdir/devinorium.service" "$pkgdir/usr/lib/systemd/system/devinorium.service"
64
install -Dm644 "$srcdir/devinorium.sysusers" "$pkgdir/usr/lib/sysusers.d/devinorium.conf"
65
install -Dm600 "$srcdir/devinorium.env" "$pkgdir/etc/devinorium/devinorium.env"
66
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
67
}
68
Changes since previous scan
--- PKGBUILD @ 2026-10-28 00:06+++ PKGBUILD @ 2026-10-28 21:50@@ -1,7 +1,7 @@ # Maintainer: HttpAnimations pkgname=devinorium-server-git _pkgname=devinorium-pkgver=0.108.2.r3.gd035eb8+pkgver=0.109.0.r4.gd480576 pkgrel=1 pkgdesc="Self-hosted web UI for AI coding agents - server (git build)" arch=('x86_64')Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-28 21:50:44 | Medium | 1 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 07:42:02 | Medium | 1 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 21:41:28 | Medium | 1 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 07:24:05 | Medium | 1 |
| 2026-10-19 05:23:55 | Medium | 1 |
| 2026-10-19 03:23:49 | Medium | 1 |
| 2026-10-19 01:23:43 | Medium | 1 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 07:21:11 | Medium | 1 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 21:19:24 | Medium | 1 |