free-delta
LOW
maintainer malacology
0 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The package downloads source code and Lazarus components from GitHub and a trusted Lazarus package host; the non-whitelisted hosts are used for open-source project assets and patches, not executables, and the build process compiles only the project's own code and dependencies.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The package downloads source code and Lazarus components from GitHub and a trusted Lazarus package host; the non-whitelisted hosts are used for open-source project assets and patches, not executables, and the build process compiles only the project's own code and dependencies.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:18
"https://packages.lazarus-ide.org/SynFacilSyn.zip"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Malacology <guoyizhang at malacology dot net>
2
# Contributor: Sergej Pupykin <sergej@p5n.pp.ru>
3
# Contributor: Fabio Lolix <fabio.loli@disroot.org>>
4
5
pkgname=free-delta
6
pkgver=4.0.7
7
pkgrel=1
8
pkgdesc="An Open Source System for Processing Taxonomic Descriptions"
9
arch=('x86_64')
10
url="http://freedelta.sourceforge.net/"
11
#url="https://www.delta-intkey.com/"
12
license=('GPL-2.0-or-later')
13
depends=(gtk2 classic-delta)
14
makedepends=(lazarus imagemagick git)
15
source=("git+https://github.com/maurobio/freedelta.git#tag=v$pkgver"
16
"Free_Delta_Editor.desktop"
17
"${pkgver}.patch::https://github.com/maurobio/freedelta/compare/main...starsareintherose:eufreedelta:${pkgver}.patch"
18
"https://packages.lazarus-ide.org/SynFacilSyn.zip"
19
"https://packages.lazarus-ide.org/HtmlViewer.zip"
20
"https://packages.lazarus-ide.org/HistoryFiles.zip"
21
"git+https://github.com/skalogryz/richmemo.git")
22
sha256sums=('06bf7f22d67bfc5add026d5f7a9a5c43717f7cb6caf345263dc552f937dba8e7'
23
'df398bcf5f3ef5ae7bddd624e309f9b30188eb1200befc436acf11f4a8fcd7c9'
24
'f6b335d43887be91eb6f59447777c7cae4a4b0652948477ac3b060d8c10531f6'
25
'7d7176cb08b546c6f7537032aba9fbca60c72e17cfc66dc320ebcbb8a239b03a'
26
'23425f67446a1751858c2a149da7669d1ee297cc2e724da719763ff015f274b4'
27
'56921e78696d12690f0123e742d92663706386e6342a46e96a0ed9a14cbecc92'
28
'SKIP')
29
prepare () {
30
cd $srcdir/freedelta
31
patch -N -i ${srcdir}/${pkgver}.patch
32
}
33
build () {
34
# depends
35
cd $srcdir/'SynFacilSyn 1.21'
36
lazbuild --lazarusdir=/usr/lib/lazarus *.lpk
37
cd $srcdir/HistoryFiles
38
lazbuild --lazarusdir=/usr/lib/lazarus *.lpk
39
cd $srcdir/HtmlViewer/package
40
lazbuild --lazarusdir=/usr/lib/lazarus *.lpk
41
cd $srcdir/richmemo
42
lazbuild --lazarusdir=/usr/lib/lazarus --ws=gtk2 *.lpk
43
44
# binary
45
cd $srcdir/freedelta
46
lazbuild --lazarusdir=/usr/lib/lazarus -r fde.lpi
47
48
# desktop png
49
convert "fde.ico" -thumbnail 256x256 -alpha on -background none -flatten "fde.png"
50
}
51
package() {
52
install -dDm755 "$pkgdir"/usr/{bin,share/$pkgname}
53
54
install -Dm 755 Free_Delta_Editor.desktop $pkgdir/usr/share/applications/Free_Delta_Editor.desktop
55
56
cd freedelta
57
58
for dire in languages vocabulary
59
do
60
cp -r $dire $pkgdir/usr/share/$pkgname/
61
done
62
63
install -Dm 755 fde $pkgdir/usr/share/$pkgname/fde
64
install -Dm 644 fde.png $pkgdir/usr/share/pixmaps/fde.png
65
install -Dm 644 LICENSE $pkgdir/usr/share/licenses/$pkgname/LICENSE
66
67
ln -s /usr/share/$pkgname/fde $pkgdir/usr/bin/fde
68
69
# add function of free-delta
70
for prog in dist key confor
71
do
72
ln -s /usr/bin/$prog $pkgdir/usr/share/$pkgname/$prog
73
done
74
}
75
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |