forgejo-mcp-bin

MEDIUM

maintainer anjanaya 2 votes scanned 2026-10-05 23:40:58.404909

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:11 source_x86_64=("${pkgname}-${pkgver}.tar.gz::https://git.b4mad.industries/agentic-forges/forgejo-mcp/releases/download/v${pkgver}/forgejo-mcp_${pkgver}_linux_amd64.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Guru <anjanaya@gmail.com>
    
      2pkgname=forgejo-mcp-bin
    
      3pkgver=3.2.0
    
      4pkgrel=1
    
      5pkgdesc="MCP server for Forgejo integration with AI assistants like Claude, the binary package"
    
      6arch=('x86_64' 'aarch64')
    
      7url="https://git.b4mad.industries/agentic-forges/forgejo-mcp"
    
      8license=('MIT')
    
      9provides=('forgejo-mcp')
    
      10conflicts=('forgejo-mcp')
    
      11source_x86_64=("${pkgname}-${pkgver}.tar.gz::https://git.b4mad.industries/agentic-forges/forgejo-mcp/releases/download/v${pkgver}/forgejo-mcp_${pkgver}_linux_amd64.tar.gz")
    
      12source_aarch64=("${pkgname}-${pkgver}.tar.gz::https://git.b4mad.industries/agentic-forges/forgejo-mcp/releases/download/v${pkgver}/forgejo-mcp_${pkgver}_linux_arm64.tar.gz")
    
      13sha256sums_x86_64=('bf8f744d53dd06c0e7830ee13a0507464b3ab301fcf01de4744db03d770039df')
    
      14sha256sums_aarch64=('b434a5874afe87bfe2e985d563b0cdbf029530aa5cfac85f2bf80be145c90d0a')
    
      15
    
      16package() {
    
      17    cd "forgejo-mcp_${pkgver}_linux_amd64"
    
      18    install -Dm755 forgejo-mcp "${pkgdir}/usr/bin/forgejo-mcp"
    
      19    install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      20}

Changes since previous scan

--- PKGBUILD @ 2026-07-15 17:49
+++ PKGBUILD @ 2026-10-05 23:40
@@ -1,19 +1,20 @@
 # Maintainer: Guru <anjanaya@gmail.com>
 pkgname=forgejo-mcp-bin
-pkgver=2.30.1
+pkgver=3.2.0
 pkgrel=1
 pkgdesc="MCP server for Forgejo integration with AI assistants like Claude, the binary package"
-arch=('x86_64')
-url="https://codeberg.org/goern/forgejo-mcp"
+arch=('x86_64' 'aarch64')
+url="https://git.b4mad.industries/agentic-forges/forgejo-mcp"
 license=('MIT')
 provides=('forgejo-mcp')
 conflicts=('forgejo-mcp')
-source=("${pkgname}-${pkgver}.tar.gz::https://codeberg.org/goern/forgejo-mcp/releases/download/v${pkgver}/forgejo-mcp_${pkgver}_linux_amd64.tar.gz")
-sha256sums=('01e11877ae338491baea00eaa77e5b1f952418ffabc79a46a8e44536a6ddf1ca')
+source_x86_64=("${pkgname}-${pkgver}.tar.gz::https://git.b4mad.industries/agentic-forges/forgejo-mcp/releases/download/v${pkgver}/forgejo-mcp_${pkgver}_linux_amd64.tar.gz")
+source_aarch64=("${pkgname}-${pkgver}.tar.gz::https://git.b4mad.industries/agentic-forges/forgejo-mcp/releases/download/v${pkgver}/forgejo-mcp_${pkgver}_linux_arm64.tar.gz")
+sha256sums_x86_64=('bf8f744d53dd06c0e7830ee13a0507464b3ab301fcf01de4744db03d770039df')
+sha256sums_aarch64=('b434a5874afe87bfe2e985d563b0cdbf029530aa5cfac85f2bf80be145c90d0a')
 
 package() {
     cd "forgejo-mcp_${pkgver}_linux_amd64"
     install -Dm755 forgejo-mcp "${pkgdir}/usr/bin/forgejo-mcp"
     install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
 }
-

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-05 23:40:58	Medium	1
2026-07-15 17:49:21	Clean	0
2026-06-30 20:39:37	Clean	0
2026-06-22 22:15:16	Clean	0
2026-06-18 16:11:54	Clean	0