fastforward
The source is a tarball from the project's official domain (cr.yp.to), which is not on the whitelist but is plausibly the legitimate source; the package builds from source and installs binaries and documentation without executing remote code or introducing unverifiable prebuilt payloads.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official domain (cr.yp.to), which is not on the whitelist but is plausibly the legitimate source; the package builds from source and installs binaries and documentation without executing remote code or introducing unverifiable prebuilt payloads.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:24
source=(http://cr.yp.to/software/$pkgname-$pkgver.tar.gz
PKGBUILD
1 offending line(s) highlighted# PKGBUILD for fastforward
# Contributor: Uffe Jakobsen <uffe@uffe.org>
# Maintainer: Uffe Jakobsen <uffe@uffe.org>
pkgname=fastforward
pkgver=0.51
pkgrel=2
epoch=
pkgdesc="fastforward handles qmail forwarding according to a cdb database"
arch=('i686' 'x86_64')
url="http://cr.yp.to/fastforward.html"
license=('unknown')
groups=()
depends=('glibc' 'qmail')
makedepends=()
checkdepends=()
optdepends=()
provides=()
conflicts=()
replaces=()
backup=()
options=()
install=
changelog=
source=(http://cr.yp.to/software/$pkgname-$pkgver.tar.gz
fastforward-cc-conf.patch)
noextract=()
md5sums=('6dc619180ba9726380dc1047e45a1d8d'
'7c6ebb4e2e514bebc11296f0a2ee80eb')
prepare() {
cd "$srcdir/$pkgname-$pkgver"
patch -p1 -i "$srcdir/fastforward-cc-conf.patch"
}
build() {
cd "$srcdir/$pkgname-$pkgver"
make default
}
check() {
cd "$srcdir/$pkgname-$pkgver"
#make -k check
}
package() {
cd "$srcdir/$pkgname-$pkgver"
#make DESTDIR="$pkgdir/" setup
mkdir -p $pkgdir/var/qmail
chmod 0755 $pkgdir/var/qmail
mkdir $pkgdir/var/qmail/bin
chmod 0755 $pkgdir/var/qmail/bin
mkdir $pkgdir/var/qmail/man
chmod 0755 $pkgdir/var/qmail/man
mkdir $pkgdir/var/qmail/man/man1
chmod 0755 $pkgdir/var/qmail/man/man1
mkdir $pkgdir/var/qmail/man/cat1
chmod 0755 $pkgdir/var/qmail/man/cat1
mkdir $pkgdir/var/qmail/doc
chmod 0755 $pkgdir/var/qmail/doc
mkdir $pkgdir/var/qmail/doc/fastforward
chmod 755 $pkgdir/var/qmail/doc/fastforward
cp fastforward $pkgdir/var/qmail/bin/fastforward
chmod 755 $pkgdir/var/qmail/bin/fastforward
cp printforward $pkgdir/var/qmail/bin/printforward
chmod 755 $pkgdir/var/qmail/bin/printforward
cp setforward $pkgdir/var/qmail/bin/setforward
chmod 755 $pkgdir/var/qmail/bin/setforward
cp newaliases $pkgdir/var/qmail/bin/newaliases
chmod 755 $pkgdir/var/qmail/bin/newaliases
cp printmaillist $pkgdir/var/qmail/bin/printmaillist
chmod 755 $pkgdir/var/qmail/bin/printmaillist
cp setmaillist $pkgdir/var/qmail/bin/setmaillist
chmod 755 $pkgdir/var/qmail/bin/setmaillist
cp newinclude $pkgdir/var/qmail/bin/newinclude
chmod 755 $pkgdir/var/qmail/bin/newinclude
cp ALIASES $pkgdir/var/qmail/doc/fastforward/ALIASES
chmod 755 $pkgdir/var/qmail/doc/fastforward/ALIASES
cp fastforward.1 $pkgdir/var/qmail/man/man1/fastforward.1
chmod 644 $pkgdir/var/qmail/man/man1/fastforward.1
cp fastforward.0 $pkgdir/var/qmail/man/cat1/fastforward.1
chmod 644 $pkgdir/var/qmail/man/cat1/fastforward.1
cp printforward.1 $pkgdir/var/qmail/man/man1/printforward.1
chmod 644 $pkgdir/var/qmail/man/man1/printforward.1
cp printforward.0 $pkgdir/var/qmail/man/cat1/printforward.1
chmod 644 $pkgdir/var/qmail/man/cat1/printforward.1
cp setforward.1 $pkgdir/var/qmail/man/man1/setforward.1
chmod 644 $pkgdir/var/qmail/man/man1/setforward.1
cp setforward.0 $pkgdir/var/qmail/man/cat1/setforward.1
chmod 644 $pkgdir/var/qmail/man/cat1/setforward.1
cp newaliases.1 $pkgdir/var/qmail/man/man1/newaliases.1
chmod 644 $pkgdir/var/qmail/man/man1/newaliases.1
cp newaliases.0 $pkgdir/var/qmail/man/cat1/newaliases.1
chmod 644 $pkgdir/var/qmail/man/cat1/newaliases.1
cp printmaillist.1 $pkgdir/var/qmail/man/man1/printmaillist.1
chmod 644 $pkgdir/var/qmail/man/man1/printmaillist.1
cp printmaillist.0 $pkgdir/var/qmail/man/cat1/printmaillist.1
chmod 644 $pkgdir/var/qmail/man/cat1/printmaillist.1
cp setmaillist.1 $pkgdir/var/qmail/man/man1/setmaillist.1
chmod 644 $pkgdir/var/qmail/man/man1/setmaillist.1
cp setmaillist.0 $pkgdir/var/qmail/man/cat1/setmaillist.1
chmod 644 $pkgdir/var/qmail/man/cat1/setmaillist.1
cp newinclude.1 $pkgdir/var/qmail/man/man1/newinclude.1
chmod 644 $pkgdir/var/qmail/man/man1/newinclude.1
cp newinclude.0 $pkgdir/var/qmail/man/cat1/newinclude.1
chmod 644 $pkgdir/var/qmail/man/cat1/newinclude.1
}
# EOF
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |