fet-timetabling
maintainer littlejhonnesme
· 8 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The source is a tarball from the project's official website, which is not on a standard forge but is plausibly the project's own; building from official project source, even on a non-whitelisted host, is normal AUR packaging behavior and not inherently dangerous.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official website, which is not on a standard forge but is plausibly the project's own; building from official project source, even on a non-whitelisted host, is normal AUR packaging behavior and not inherently dangerous.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:12
source=("https://lalescu.ro/liviu/fet/download/fet-${pkgver}.tar.xz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Thibaud Kehler <thibaud.kehler at gmx dot net>
2
pkgname='fet-timetabling'
3
_module='fet'
4
pkgver=7.9.4
5
pkgrel=1
6
pkgdesc="A software for automatically scheduling the timetable of a school, high-school or university."
7
arch=('x86_64')
8
url="https://lalescu.ro/liviu/fet/"
9
license=('AGPL3')
10
depends=('qt6-base' 'hicolor-icon-theme')
11
makedepends=('cmake')
12
source=("https://lalescu.ro/liviu/fet/download/fet-${pkgver}.tar.xz")
13
sha256sums=('341a02be1a7b54b956b575283614a2bdcdbaa76ab5da733103ff50b779d9b6e4')
14
15
build() {
16
cd "$srcdir/$_module-$pkgver"
17
# Use qt-cmake as recommended by the author
18
mkdir -p build
19
cd build
20
/usr/lib/qt6/bin/qt-cmake .. \
21
-DCMAKE_BUILD_TYPE=Release \
22
-DCMAKE_INSTALL_PREFIX=/usr \
23
-DUSE_SYSTEM_LOCALE=ON \
24
-DCMAKE_INSTALL_DATADIR=/usr/share
25
cmake --build .
26
}
27
28
package() {
29
cd "$srcdir/$_module-$pkgver/build"
30
31
find .qt/ -name "deploy_fet_*.cmake" -exec truncate -s 0 {} + 2>/dev/null || true
32
33
DESTDIR="${pkgdir}" cmake --install . --prefix /usr
34
}
35
Changes since previous scan
--- PKGBUILD @ 2026-07-29 00:25+++ PKGBUILD @ 2026-08-03 00:08@@ -1,7 +1,7 @@ # Maintainer: Thibaud Kehler <thibaud.kehler at gmx dot net> pkgname='fet-timetabling' _module='fet'-pkgver=7.9.2+pkgver=7.9.4 pkgrel=1 pkgdesc="A software for automatically scheduling the timetable of a school, high-school or university." arch=('x86_64')@@ -10,7 +10,7 @@ depends=('qt6-base' 'hicolor-icon-theme') makedepends=('cmake') source=("https://lalescu.ro/liviu/fet/download/fet-${pkgver}.tar.xz")-sha256sums=('9552ff96941ade3686dd905084a9709eab428484bdd599bab6d01180b1b23b53')+sha256sums=('341a02be1a7b54b956b575283614a2bdcdbaa76ab5da733103ff50b779d9b6e4') build() { cd "$srcdir/$_module-$pkgver"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 11:11:22 | MEDIUM | 1 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 11:20:06 | MEDIUM | 1 |
| 2026-07-10 00:20:30 | CLEAN | 2 |
| 2026-07-09 11:31:02 | MEDIUM | 1 |
| 2026-07-03 11:11:02 | CLEAN | 2 |
| 2026-06-19 19:07:35 | CLEAN | 2 |
| 2026-06-18 18:04:49 | CLEAN | 2 |
| 2026-06-18 16:11:54 | MEDIUM | 1 |