fwlogwatch
The source is a tarball from the project's official domain, used to build the software from source, which is standard practice; the non-whitelisted host is the project's own site, so the risk is low despite the static analyzer flag.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official domain, used to build the software from source, which is standard practice; the non-whitelisted host is the project's own site, so the risk is low despite the static analyzer flag.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:27
source=("http://fwlogwatch.inside-security.de/sw/$pkgname-$pkgver.tar.gz"
PKGBUILD
1 offending line(s) highlighted# Maintainer: Phillip Smith <pkgbuild@phs.id.au>
# http://github.com/fukawi2/aur-packages
# Contributor: Sven Schulz <omee@archlinux.de>
# Contributor: dorphell <dorphell@archlinux.org>
# Contributor: Moritz Alexander Esser <Moritz.Esser@rwth-aachen.de>
### I AM ONLY THE PACKAGER, NOT THE DEVELOPER
### Please ask support questions about this software in one of:
### 1) The AUR comments; OR
### 2) Upstream forums/maillist etc; OR
### 3) The ArchLinux forums
### I do not always know enough about the software itself, or don't have the
### time to promptly respond to direct emails.
### If you have found a problem with the package/PKGBUILD (as opposed to
### the software) then please do email me or post an AUR comment.
pkgname=fwlogwatch
pkgver=1.5
pkgrel=3
pkgdesc="A packet filter/firewall/IDS log analyzer"
arch=('i686' 'x86_64')
depends=('zlib>=1.0.9')
backup=('etc/conf.d/fwlogwatch'
'etc/fwlogwatch.config')
url="http://fwlogwatch.inside-security.de/"
license=('GPL')
source=("http://fwlogwatch.inside-security.de/sw/$pkgname-$pkgver.tar.gz"
'fwlogwatch'
'fwlogwatch.conf')
md5sums=('0c55031e7d66518493607d2c30a3a5a5'
'e10d41244780c74280d27794ca6a6525'
'35dc2f301904b2b03ef688e2e2edae53')
prepare() {
cd "$srcdir"/$pkgname-$pkgver
sed -e 's/sbin/bin/g' -i Makefile
}
build() {
cd "$srcdir"/$pkgname-$pkgver
make
}
package() {
cd "$srcdir"/$pkgname-$pkgver
mkdir -p "$pkgdir"/{etc,usr/{bin,share/man/man8}}
mkdir -p "$pkgdir"/usr/share/locale/{de,ja,pt,sv,zh_CN,zh_TW}/LC_MESSAGES
make INSTALL_DIR="$pkgdir"/usr install
make CONF_DIR="$pkgdir"/etc install-config
make LOCALE_DIR="$pkgdir"/usr install-i18n
install -D -m644 "$srcdir"/fwlogwatch.conf "$pkgdir"/etc/conf.d/fwlogwatch
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |