elm
LOW
maintainer aksr
1 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is downloaded from the project's own domain (instinct.org), which hosts the official Elm Mail System; building from this source is standard practice and the checksums are verified, making it low risk despite the non-whitelisted host.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is downloaded from the project's own domain (instinct.org), which hosts the official Elm Mail System; building from this source is standard practice and the checksums are verified, making it low risk despite the non-whitelisted host.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:22
source=("http://www.instinct.org/elm/files/tarballs/$pkgname$pkgver.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: aksr <aksr at t-com dot me>
2
pkgname=elm
3
pkgver=2.5.8
4
pkgrel=1
5
epoch=
6
pkgdesc="The Elm Mail System"
7
arch=('i686' 'x86_64')
8
url="http://www.instinct.org/elm/"
9
license=('custom: public domain')
10
groups=()
11
depends=()
12
makedepends=()
13
checkdepends=()
14
optdepends=()
15
provides=()
16
conflicts=('mailutils')
17
replaces=()
18
backup=()
19
options=()
20
install=
21
changelog=
22
source=("http://www.instinct.org/elm/files/tarballs/$pkgname$pkgver.tar.gz"
23
curses.patch
24
mcprtlib.patch)
25
noextract=()
26
md5sums=('f7a721c1cddbc8632ffe0cf65b045395'
27
'8ffcf3b55a35a20dc0bc9c651e57d288'
28
'76a73fdb5ba02749332ee19aca493e13')
29
sha1sums=('bf09df75d0dc9097a1e69591bfb4872f860e00c7'
30
'126c93238ada3ed3b92f904d86e88e87330895d6'
31
'e65c141f04d2b8840d51228747c635cef0cf4c3d')
32
sha256sums=('80ec62197d214a6efcf19bb98eb64483a78f80956c1a77eab783bea1949ac815'
33
'28bb176f2dbe1979c69c45b1509736904b61b9ee525f0910f6d2f975095dd92d'
34
'c8c8c021a9feceec135e7bd186e7d1df0d1832f4eecbd3b33badd756e592a7b4')
35
36
prepare() {
37
cd "$srcdir/$pkgname$pkgver/src"
38
patch < "$srcdir/curses.patch"
39
cd "$srcdir/$pkgname$pkgver/hdrs"
40
patch < "$srcdir/mcprtlib.patch"
41
}
42
43
build() {
44
cd "$srcdir/$pkgname$pkgver"
45
./Configure Log='' \
46
Header='' \
47
contains='' \
48
cppstdin='' \
49
cppminus='' \
50
d_getopt='' \
51
d_memcpy='' \
52
d_mkdir='' \
53
d_rename='' \
54
d_symlink='' \
55
d_whoami='' \
56
n='' \
57
c='' \
58
orderlib='' \
59
ranlib='' \
60
package='' \
61
pager='' \
62
prefshell='' \
63
startsh='' \
64
d_eunice='' \
65
define='' \
66
eunicefix='' \
67
build_dir='' \
68
source_dir='' \
69
loclist='' \
70
expr='' \
71
sed='' \
72
echo='' \
73
cat='' \
74
rm='' \
75
mv='' \
76
cp='' \
77
tail='' \
78
tr='' \
79
mkdir='' \
80
sort='' \
81
uniq='' \
82
grep='' \
83
trylist='' \
84
test='' \
85
inews='' \
86
ispell='' \
87
egrep='' \
88
more='' \
89
pg='' \
90
Mcc='' \
91
vi='/usr/bin/vi' \
92
mailx='' \
93
mail='' \
94
cpp='' \
95
perl='' \
96
emacs='' \
97
ls='' \
98
rmail='' \
99
sendmail='/usr/bin/sendmail' \
100
shar='' \
101
smail='' \
102
submit='' \
103
tbl='' \
104
troff='/usr/bin/troff' \
105
nroff='' \
106
uname='' \
107
uuname='' \
108
line='' \
109
chgrp='' \
110
chmod='' \
111
lint='' \
112
sleep='' \
113
pr='' \
114
tar='' \
115
ln='' \
116
lpr='' \
117
lp='' \
118
touch='' \
119
make='' \
120
date='' \
121
csh='' \
122
pmake='' \
123
mips='' \
124
col='' \
125
pack='' \
126
bld='' \
127
compress='' \
128
execmail='' \
129
libswanted='' \
130
bin='' \
131
installbin='/usr/bin' \
132
c_date='' \
133
d_ascii='' \
134
d_broke_ctype='' \
135
d_broke_fflush='' \
136
d_calendar='' \
137
calendar='' \
138
d_chown_neg1='' \
139
d_content='' \
140
d_crypt='' \
141
cryptlib='' \
142
d_cuserid='' \
143
d_disphost='' \
144
d_domname='' \
145
d_usegetdom='' \
146
d_errlst='' \
147
d_flock='' \
148
d_dotlock='' \
149
d_fcntlock='' \
150
lock_dir='' \
151
has_flock='' \
152
has_fcntl='' \
153
d_fsync='' \
154
d_ftruncate='' \
155
d_gethname='' \
156
d_douname='' \
157
d_host_comp='' \
158
ign_hname='' \
159
d_index='' \
160
d_internet='' \
161
d_ispell='' \
162
ispell_path='' \
163
ispell_options='' \
164
d_locale='' \
165
d_nl_types='' \
166
d_msgcat='' \
167
d_usenls='' \
168
d_mboxedit='' \
169
d_mime='' \
170
defcharset='' \
171
defdispcharset='' \
172
d_mmdf='' \
173
d_newauto='' \
174
d_noaddfrom='' \
175
d_usedomain='' \
176
d_noxheader='' \
177
d_pidcheck='' \
178
d_ptem='' \
179
d_putenv='' \
180
d_remlock='' \
181
maxattempts='' \
182
d_setegid='' \
183
d_setgid='' \
184
d_savegrpmboxid='' \
185
mailermode='' \
186
d_sigvec='' \
187
d_sigvectr='' \
188
d_sigset='' \
189
d_sighold='' \
190
d_sigprocmask='' \
191
d_sigblock='' \
192
d_sigaction='' \
193
d_statuschg='' \
194
d_strcspn='' \
195
d_strspn='' \
196
d_strpbrk='' \
197
d_strerror='' \
198
d_strftime='' \
199
d_strings='' \
200
d_pwdinsys='' \
201
strings='' \
202
includepath='' \
203
d_strstr='' \
204
d_strtok='' \
205
d_subshell='' \
206
d_tempnam='' \
207
tempnamo='' \
208
tempnamc='' \
209
d_termio='' \
210
d_termios='' \
211
d_useembed='' \
212
d_utimbuf='' \
213
d_vfork='' \
214
defbatsub='' \
215
defeditor='' \
216
editoropts='' \
217
hostname='' \
218
phostname='' \
219
mydomain='' \
220
autohostname='' \
221
i_memory='' \
222
i_stdarg='' \
223
i_stdlib='' \
224
i_time='' \
225
i_systime='' \
226
d_systimekernel='' \
227
i_unistd='' \
228
i_utime='' \
229
i_sysutime='' \
230
lib='' \
231
installlib='installlib' \
232
libc='' \
233
linepr='' \
234
maildir='' \
235
mailer='' \
236
mailgrp='' \
237
mansrc='' \
238
catmansrc='' \
239
manext='.1' \
240
manext_choice='' \
241
catmanext='' \
242
catmanext_choice='' \
243
packed='' \
244
manroff='' \
245
manroffopts='' \
246
suffix='' \
247
packer='' \
248
models='' \
249
split='' \
250
small='' \
251
medium='' \
252
large='' \
253
huge='' \
254
optimize='' \
255
ccflags='' \
256
cppflags='' \
257
ldflags='' \
258
cc='' \
259
libs='' \
260
nametype='' \
261
d_passnames='' \
262
d_berknames='' \
263
d_usgnames='' \
264
passcat='' \
265
rmttape='' \
266
roff='' \
267
roffopts='' \
268
sigtype='' \
269
spitshell='' \
270
shsharp='' \
271
sharpbang='' \
272
termlib='' \
273
tmpdir='' \
274
tzname_handling='' \
275
xencf='' \
276
xenlf='' \
277
d_xenix='' \
278
d_bsd='' \
279
CONFIG='' \
280
package=elm-2.5 \
281
make all
282
}
283
284
check() {
285
cd "$srcdir/$pkgname$pkgver"
286
make -k .CHECK
287
}
288
289
package() {
290
cd "$srcdir/$pkgname$pkgver"
291
mkdir -p $pkgdir/usr/{bin,lib,/share/man/{man1,cat1}}
292
make DEST="$pkgdir/usr" \
293
LIB="$pkgdir/usr/lib/" \
294
MAN="$pkgdir/usr/share/man/man1" \
295
CATMAN="$pkgdir/usr/share/man/cat1" \
296
DESTBIN="$pkgdir/usr/bin" \
297
DESTLIB="$pkgdir/usr/lib/" install
298
install -Dm644 doc/Alias.guide $pkgdir/usr/share/doc/$pkgname/Alias.guide
299
install -Dm644 doc/Config.guid $pkgdir/usr/share/doc/$pkgname/Config.guid
300
install -Dm644 doc/Form.guide $pkgdir/usr/share/doc/$pkgname/Form.guide
301
install -Dm644 doc/Ref.guide $pkgdir/usr/share/doc/$pkgname/Ref.guide
302
install -Dm644 doc/Users.guide $pkgdir/usr/share/doc/$pkgname/Users.guide
303
}
304
305
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |