fail2rest-git
The package builds from the project's official GitHub repository, uses standard Go build practices, and installs only the resulting binary and config files; the orphaned/re-adopted status is administrative and does not imply malicious intent or supply-chain risk.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the project's official GitHub repository, uses standard Go build practices, and installs only the resulting binary and config files; the orphaned/re-adopted status is administrative and does not imply malicious intent or supply-chain risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
orphaned_readopted
This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.
PKGBUILD
# Maintainer: Adler Neves <adlerosn@gmail.com>
provides=('fail2rest')
conflicts=('fail2rest')
pkgver=r52.42cfa41
pkgname=fail2rest-git
pkgrel=2
pkgdesc="REST server for fail2ban"
arch=('any')
depends=('fail2ban')
makedepends=('go')
url="https://github.com/Sean-Der/fail2rest"
options=()
license=('MIT')
source=('fail2rest::git+https://github.com/Sean-Der/fail2rest')
sha512sums=('SKIP')
pkgver() {
cd fail2rest
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
}
prepare() {
cd "${srcdir}"
msg2 "Creating compilation structure..."
mkdir -p gopath/src/github.com/Sean-Der
rm -rf gopath/src/github.com/Sean-Der/fail2rest
ln -rTsf fail2rest gopath/src/github.com/Sean-Der/fail2rest
msg2 "Downloading dependencies..."
cd gopath/src/github.com/Sean-Der/fail2rest
GOPATH="${srcdir}/gopath" go get
}
build() {
msg2 "Compiling..."
cd gopath/src/github.com/Sean-Der/fail2rest
GOPATH="${srcdir}/gopath" go build \
-trimpath \
-gcflags "-trimpath $srcdir" \
-asmflags "-trimpath $srcdir" \
-ldflags "-extldflags $LDFLAGS" \
-o fail2rest
msg2 "Customizing SystemD unit service..."
cat "${srcdir}"/fail2rest/init-scripts/systemd |\
sed 's/fail2rest\.json/fail2rest\/config.json/g' |\
tee "${srcdir}"/fail2rest.service
}
package() {
cd "${pkgdir}"
mkdir -p "${pkgdir}"/usr/bin
ln -s /usr/share/webapps/fail2rest/bin/fail2rest "${pkgdir}"/usr/bin/fail2rest
install -Dm755 "${srcdir}"/gopath/bin/fail2rest "${pkgdir}"/usr/share/webapps/fail2rest/bin/fail2rest
install -Dm644 "${srcdir}"/fail2rest.service "${pkgdir}"/usr/lib/systemd/system/fail2rest.service
install -Dm644 "${srcdir}"/fail2rest/fail2rest.1 "${pkgdir}"/usr/share/man/man1/fail2rest.1
install -Dm644 "${srcdir}"/fail2rest/config.json "${pkgdir}"/etc/fail2rest/config.json
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |
| 2026-10-12 00:18:51 | Low | 2 |
| 2026-10-11 00:26:05 | Low | 2 |
| 2026-10-10 22:16:18 | Medium | 1 |
| 2026-06-18 16:11:54 | Clean | 0 |