fldigi
LOW
maintainer not_anonymous
62 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The source is downloaded from the project's official domain (w1hkj.org), which is not on the standard whitelist but is legitimate for this software; building from official project sources is normal AUR practice and poses low risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is downloaded from the project's official domain (w1hkj.org), which is not on the standard whitelist but is legitimate for this software; building from official project sources is normal AUR practice and poses low risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:16
source=(http://w1hkj.org/files/$pkgname/$pkgname-$pkgver.tar.gz
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: not_anonymous <nmlibertarian@gmail.com>
2
# Previous Maintainers: Andreas Schreiner <andreas.schreiner@sonnenmulde.at>
3
# and: [Vitaliy Berdinskikh](mailto:ur6lad@archlinux.org.ua) aka UR6LAD
4
# Original Submission: Bob Finch <w9ya@qrparci.net>
5
6
pkgname=fldigi
7
pkgver=4.2.12
8
pkgrel=2
9
pkgdesc="Digital Modem Program for Amateur Radio"
10
arch=('i686' 'x86_64' 'aarch64')
11
url="http://w1hkj.org"
12
license=('GPL-2.0-or-later')
13
depends=('cty' 'fltk' 'libsamplerate' 'flxmlrpc>=1.0.1' 'libsndfile'
14
'portaudio' 'libpulse' 'libgpiod' 'hamlib' 'hamradio-menus')
15
optdepends=('pulseaudio: pulseaudio support')
16
source=(http://w1hkj.org/files/$pkgname/$pkgname-$pkgver.tar.gz
17
# diff.wayland.fix)
18
flarq.wayland.patch)
19
20
prepare () {
21
cd $srcdir/$pkgname-$pkgver
22
23
# patch -p0 < ../diff.wayland.fix
24
patch -p0 < ../flarq.wayland.patch
25
}
26
27
build() {
28
cd "$srcdir"/$pkgname-$pkgver
29
30
./configure --prefix=/usr \
31
--enable-tls --with-flxmlrpc --without-asciidoc
32
# --enable-tls --without-flxmlrpc --without-asciidoc
33
# (^^^ temporary, until flxmlrpc is updated)
34
make ASCIIDOC_ICONS_DIR=/etc/asciidoc/images/icons/
35
}
36
37
check() {
38
cd "$srcdir"/$pkgname-$pkgver
39
40
make -k check
41
}
42
43
package() {
44
cd "$srcdir"/$pkgname-$pkgver
45
46
make DESTDIR="$pkgdir" install
47
}
48
md5sums=('2138b4eff9cd51f7824b79e1b751da1c'
49
'c180f454288d495ecbc65b364818530d')
50
sha256sums=('028bcb1c100cb790cad36324b8063c13594e160743f9378320ceabcf16dbc44a'
51
'3bdbd3fe1b8d7864f46418606e1ab98ca45b48fecd2338a573074c4185dbf380')
52
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |