emacs-psvn

maintainer orphaned · 4 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is an Emacs Lisp file from a personal host, but it is a plain text script installed as data for Emacs, not an executable binary, and the worst case on source swap is limited to code injection into Emacs, which is low severity for a niche AUR package.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is an Emacs Lisp file from a personal host, but it is a plain text script installed as data for Emacs, not an executable binary, and the worst case on source swap is limited to code injection into Emacs, which is low severity for a niche AUR package.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 source=(http://www.xsteve.at/prg/emacs/psvn.el)

PKGBUILD

1 offending line(s) highlighted

      1# Contributor: Cesar Romero <cesar.romero@gmail.com>
    
      2# Maintainer: Stefan Husmann <stefan-husmann@t-online.de>
    
      3
    
      4pkgname=emacs-psvn
    
      5pkgver=2015.07.20_21.42.00
    
      6pkgrel=4
    
      7pkgdesc="Subversion interface for emacs"
    
      8url="http://www.emacswiki.org/cgi-bin/wiki/SubVersion"
    
      9license=('GPL2')
    
      10depends=('emacs')
    
      11install=$pkgname.install
    
      12source=(http://www.xsteve.at/prg/emacs/psvn.el)
    
      13md5sums=('1abc852ced8c82267770ea953d819486')
    
      14makedepends=('awk')
    
      15arch=('any')
    
      16
    
      17pkgver() {
    
      18  printf "%s_%s" $(awk '/The revision date of psvn/ {print $3}' psvn.el| head -1|tr - .|tr -d '"'|tr -d ',') $(awk '/The revision date of psvn/ {print $4}' psvn.el | head -1 | tr -d '"'|tr ':' '.')
    
      19}
    
      20
    
      21build() {
    
      22  emacs -batch -q -f batch-byte-compile ${pkgname#emacs-}.el
    
      23}
    
      24
    
      25package () {
    
      26  cd $srcdir
    
      27  install -Dm644 $srcdir/psvn.el \
    
      28    $pkgdir/usr/share/emacs/site-lisp/psvn.el 
    
      29  install -Dm644 $srcdir/psvn.elc \
    
      30    $pkgdir/usr/share/emacs/site-lisp/psvn.elc 
    
      31}
    
      32

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2