doors-git

LOW
maintainer dy-tea 0 votes scanned 2026-11-01 00:21:48.120785
View on AUR
Why flagged

The source is a git repository from a non-whitelisted host, but it is used to build the project's own code, which is a normal AUR practice; the host 'dawn.wine' appears to be project-specific, and no unverifiable prebuilt binaries or malicious payloads are involved.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a git repository from a non-whitelisted host, but it is used to build the project's own code, which is a normal AUR practice; the host 'dawn.wine' appears to be project-specific, and no unverifiable prebuilt binaries or malicious payloads are involved.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:35 source=("git+https://dawn.wine/CreeperFace/doors.git#branch=master" "doors-portals.conf" "doors-session.target")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Dylan Donnell <dy-tea@proton.me>
2pkgname='doors-git'
3_pkgname='doors'
4pkgver=0
5pkgrel=1
6pkgdesc='Wayland compositor inspired by bspwm'
7arch=(x86_64)
8url='https://dawn.wine/CreeperFace/doors'
9license=(GPL-3.0-or-later)
10depends=(
11 'cairo'
12 'glib2'
13 'glibc'
14 'libevdev'
15 'libglvnd'
16 'libinput'
17 'libpixman-1.so'
18 'libsystemd.so'
19 'libwayland-server.so'
20 'libxcb'
21 'libxkbcommon.so'
22 'pango'
23 'pcre2'
24 'bash'
25 'shaderc'
26 'systemd-libs'
27 'vulkan-icd-loader'
28 'wlroots-git'
29 'xcb-util-wm'
30 'xorg-xwayland'
31)
32makedepends=(git perl meson ninja wayland-protocols vulkan-headers linux-api-headers)
33provides=('wayland-compositor')
34install=doors-git.install
35source=("git+https://dawn.wine/CreeperFace/doors.git#branch=master" "doors-portals.conf" "doors-session.target")
36sha512sums=("SKIP" "ac8d23f5ace35b77c55e00e26976e8981f53e31b10ff1df717bc26acba3567e79d4b477bc8b60d0f83e0ca8d18ab4f42840a8e7734f447cdf525460510bc1063" "9bbd5bea647f983884ff92871b17a5cab68e6d46c0d465d859e49be61f6e31c171bb2916665c1b1dcd61988edc76f7b41a051ec35ac3d13aa45c393a0fe746ac")
37
38pkgver() {
39 cd "$srcdir/$_pkgname"
40 printf "0.r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
41}
42
43build() {
44 mkdir -p build
45 arch-meson build "$_pkgname" -D b_ndebug=true
46 ninja -C build
47}
48
49package() {
50 DESTDIR="$pkgdir" ninja -C build install
51 install -Dm644 "$_pkgname/LICENSE.md" "$pkgdir/usr/share/licenses/$_pkgname/LICENSE"
52 install -Dm644 "$_pkgname/examples/arch/doorsrc" "$pkgdir/etc/doors/doorsrc"
53 install -Dm644 "$_pkgname/examples/arch/doorshkrc" "$pkgdir/etc/doors/doorshkrc"
54 install -Dm644 doors-portals.conf "$pkgdir/usr/share/xdg-desktop-portal/doors-portals.conf"
55 install -Dm644 doors-session.target "$pkgdir/usr/lib/systemd/user/doors-session.target"
56
57 # Convert POD documentation to man pages and install them.
58 install -d "$pkgdir/usr/share/man/man1" "$pkgdir/usr/share/man/man5"
59 pod2man -s 1 -c "doors" -r "doors" "$_pkgname/docs/doorsctl.pod" "$pkgdir/usr/share/man/man1/doorsctl.1"
60 pod2man -s 5 -c "doors" -r "doors" "$_pkgname/docs/doorshkrc.pod" "$pkgdir/usr/share/man/man5/doorshkrc.5"
61 pod2man -s 5 -c "doors" -r "doors" "$_pkgname/docs/doorsrc.pod" "$pkgdir/usr/share/man/man5/doorsrc.5"
62}
63

Changes since previous scan

--- PKGBUILD @ 2026-10-28 00:06
+++ PKGBUILD @ 2026-11-01 00:21
@@ -47,11 +47,17 @@
}
package() {
- DESTDIR="$pkgdir" ninja -C build install
- install -Dm644 "$_pkgname/LICENSE.md" "$pkgdir/usr/share/licenses/$_pkgname/LICENSE"
- install -Dm644 "$_pkgname/examples/arch/doorsrc" "$pkgdir/etc/doors/doorsrc"
- install -Dm644 "$_pkgname/examples/arch/doorshkrc" "$pkgdir/etc/doors/doorshkrc"
- install -Dm644 doors-portals.conf "$pkgdir/usr/share/xdg-desktop-portal/doors-portals.conf"
- install -Dm644 doors-session.target "$pkgdir/usr/lib/systemd/user/doors-session.target"
+ DESTDIR="$pkgdir" ninja -C build install
+ install -Dm644 "$_pkgname/LICENSE.md" "$pkgdir/usr/share/licenses/$_pkgname/LICENSE"
+ install -Dm644 "$_pkgname/examples/arch/doorsrc" "$pkgdir/etc/doors/doorsrc"
+ install -Dm644 "$_pkgname/examples/arch/doorshkrc" "$pkgdir/etc/doors/doorshkrc"
+ install -Dm644 doors-portals.conf "$pkgdir/usr/share/xdg-desktop-portal/doors-portals.conf"
+ install -Dm644 doors-session.target "$pkgdir/usr/lib/systemd/user/doors-session.target"
+
+ # Convert POD documentation to man pages and install them.
+ install -d "$pkgdir/usr/share/man/man1" "$pkgdir/usr/share/man/man5"
+ pod2man -s 1 -c "doors" -r "doors" "$_pkgname/docs/doorsctl.pod" "$pkgdir/usr/share/man/man1/doorsctl.1"
+ pod2man -s 5 -c "doors" -r "doors" "$_pkgname/docs/doorshkrc.pod" "$pkgdir/usr/share/man/man5/doorshkrc.5"
+ pod2man -s 5 -c "doors" -r "doors" "$_pkgname/docs/doorsrc.pod" "$pkgdir/usr/share/man/man5/doorsrc.5"
}

Scan history

Scanned at (UTC)SeverityRules
2026-11-01 00:21:48 Low 2
2026-10-31 00:07:41 Low 2
2026-10-30 00:29:30 Low 2
2026-10-29 00:13:55 Low 2
2026-10-28 17:50:30 Medium 1
2026-10-28 00:06:54 Low 2
2026-10-27 00:23:28 Low 2
2026-10-26 00:12:40 Low 2
2026-10-25 00:20:48 Low 2
2026-10-24 00:14:55 Low 2
2026-10-23 00:02:19 Low 2
2026-10-22 00:13:10 Low 2
2026-10-21 00:12:50 Low 2
2026-10-20 00:10:31 Low 2
2026-10-19 00:03:55 Low 2
2026-10-18 00:06:55 Low 2
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 00:06:47 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion