feedthemonkey

LOW

maintainer jeena 8 votes scanned 2026-09-21 00:26:32.109917

View on AUR

Why flagged

The source is a git checkout from the maintainer's own plausible project host, building from source is normal for AUR, and the host, while not standard, is the project's official repository.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a git checkout from the maintainer's own plausible project host, building from source is normal for AUR, and the host, while not standard, is the project's official repository.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source=("$pkgname::git+https://git.jeena.net/jeena/FeedTheMonkey.git#tag=v$pkgver")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Jeena <hello@jeena.net>
    
      2
    
      3pkgname=feedthemonkey
    
      4pkgver=3.0.0
    
      5pkgrel=1
    
      6pkgdesc="Desktop client for FreshRSS, Miniflux and other servers implementing the Greader API"
    
      7arch=('x86_64')
    
      8url="https://git.jeena.net/jeena/FeedTheMonkey"
    
      9license=('GPL-3.0-or-later')
    
      10depends=('gtk4' 'libadwaita' 'webkitgtk-6.0' 'libsecret' 'glib2' 'hicolor-icon-theme')
    
      11makedepends=('cargo' 'blueprint-compiler' 'git')
    
      12options=(!lto)
    
      13source=("$pkgname::git+https://git.jeena.net/jeena/FeedTheMonkey.git#tag=v$pkgver")
    
      14sha256sums=('SKIP')
    
      15
    
      16build() {
    
      17	cd "$pkgname"
    
      18	export RUSTUP_TOOLCHAIN=stable
    
      19	cargo build --release --locked
    
      20}
    
      21
    
      22package() {
    
      23	cd "$pkgname"
    
      24	install -Dm755 target/release/feedthemonkey "$pkgdir/usr/bin/feedthemonkey"
    
      25	install -Dm644 data/net.jeena.FeedTheMonkey.desktop \
    
      26		"$pkgdir/usr/share/applications/net.jeena.FeedTheMonkey.desktop"
    
      27	install -Dm644 data/icons/net.jeena.FeedTheMonkey.png \
    
      28		"$pkgdir/usr/share/icons/hicolor/256x256/apps/net.jeena.FeedTheMonkey.png"
    
      29	install -Dm644 data/net.jeena.FeedTheMonkey.gschema.xml \
    
      30		"$pkgdir/usr/share/glib-2.0/schemas/net.jeena.FeedTheMonkey.gschema.xml"
    
      31	install -Dm644 COPYING "$pkgdir/usr/share/licenses/$pkgname/COPYING"
    
      32}

Changes since previous scan

--- PKGBUILD @ 2026-06-18 16:11
+++ PKGBUILD @ 2026-09-21 00:26
@@ -1,26 +1,32 @@
 # Maintainer: Jeena <hello@jeena.net>
 
 pkgname=feedthemonkey
-_name=FeedTheMonkey
-pkgver=2.2.8
+pkgver=3.0.0
 pkgrel=1
-pkgdesc="Desktop client for the TinyTinyRSS reader"
-arch=('i686' 'x86_64')
-url="https://github.com/jeena/FeedTheMonkey"
-license=('GPL3')
-depends=('qt5-declarative' 'qt5-quickcontrols' 'qt5-webengine')
-source=("https://github.com/jeena/${_name}/archive/v${pkgver}.tar.gz")
-md5sums=('9d3683463ba08b6bb15bdfe6ccef3681')
+pkgdesc="Desktop client for FreshRSS, Miniflux and other servers implementing the Greader API"
+arch=('x86_64')
+url="https://git.jeena.net/jeena/FeedTheMonkey"
+license=('GPL-3.0-or-later')
+depends=('gtk4' 'libadwaita' 'webkitgtk-6.0' 'libsecret' 'glib2' 'hicolor-icon-theme')
+makedepends=('cargo' 'blueprint-compiler' 'git')
+options=(!lto)
+source=("$pkgname::git+https://git.jeena.net/jeena/FeedTheMonkey.git#tag=v$pkgver")
+sha256sums=('SKIP')
 
 build() {
-	cd "${_name}-$pkgver"
-	qmake-qt5 PREFIX=${pkgdir}/usr
-	make
+	cd "$pkgname"
+	export RUSTUP_TOOLCHAIN=stable
+	cargo build --release --locked
 }
 
 package() {
-	cd "${_name}-$pkgver"
-	make install
-	install -D -m644 COPYING "${pkgdir}/usr/share/licenses/${pkgname}/COPYING"
+	cd "$pkgname"
+	install -Dm755 target/release/feedthemonkey "$pkgdir/usr/bin/feedthemonkey"
+	install -Dm644 data/net.jeena.FeedTheMonkey.desktop \
+		"$pkgdir/usr/share/applications/net.jeena.FeedTheMonkey.desktop"
+	install -Dm644 data/icons/net.jeena.FeedTheMonkey.png \
+		"$pkgdir/usr/share/icons/hicolor/256x256/apps/net.jeena.FeedTheMonkey.png"
+	install -Dm644 data/net.jeena.FeedTheMonkey.gschema.xml \
+		"$pkgdir/usr/share/glib-2.0/schemas/net.jeena.FeedTheMonkey.gschema.xml"
+	install -Dm644 COPYING "$pkgdir/usr/share/licenses/$pkgname/COPYING"
 }
-

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-21 00:26:32	Low	2
2026-09-20 23:33:19	Medium	1
2026-06-18 16:11:54	Clean	0