gammu-git

LOW
maintainer dreieck 0 votes scanned 2026-10-20 00:10:31.152894
View on AUR
Why flagged

The package builds from a legitimate GitHub source repository, which is the project's own official hosting; the non-whitelisted host is GitHub itself, but this is a normal and expected location for git-based AUR packages, and the source is verified via git integrity, not checksums, which is standard for -git packages.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The package builds from a legitimate GitHub source repository, which is the project's own official hosting; the non-whitelisted host is GitHub itself, but this is a normal and expected location for git-based AUR packages, and the source is verified via git integrity, not checksums, which is standard for -git packages.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:65 "${_pkgname}::git+https://${_githost}/${_gituser}/${_gitname}.git"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: dreieck (https://aur.archlinux.org/account/dreieck)
2# Contributor: Jaroslav Lichtblau <svetlemodry@archlinux.org>
3# Contributor: Ray Rashif <schiv@archlinux.org>
4# Contributor: Corrado Primier <bardo@aur.archlinux.org>
5# Contributor: Aurelien Foret <orelien@chez.com>
6
7
8_gitname="gammu"
9_pkgname="${_gitname}"
10pkgname="${_pkgname}-git"
11pkgver=1.45.0+11.r14761.20260922.a423d8e58
12pkgrel=1
13pkgdesc="GNU All Mobile Management Utilities. Latest git checkout."
14arch=(
15 'i686'
16 'x86_64'
17 'aarch64'
18 'armv6h'
19 'armv7h'
20)
21_githost='github.com'
22_gituser='gammu'
23url="https://${_githost}/${_gituser}/${_gitname}"
24license=("GPL-2.0-or-later")
25depends=(
26 'bash'
27 'glib2'
28 'glibc'
29 'curl'
30 'libdbi'
31 'libbluetooth.so'
32 'libgudev-1.0.so'
33 'libmariadb.so'
34 'libodbc.so'
35 'libpq.so'
36 'libusb-1.0.so'
37)
38makedepends=(
39 'git'
40 'bluez-libs'
41 'cmake'
42 'doxygen'
43 'gettext'
44 'mariadb-libs'
45 'libgudev'
46 'libusb'
47 'postgresql-libs'
48 'python>=3'
49 'python-sphinx'
50 'sed'
51 'unixodbc'
52)
53optdepends=()
54checkdepends=()
55provides=(
56 "${_pkgname}=${pkgver}"
57 "gammu-udev=${pkgver}"
58)
59conflicts=(
60 "${_pkgname}"
61 "gammu-udev"
62)
63
64source=(
65 "${_pkgname}::git+https://${_githost}/${_gituser}/${_gitname}.git"
66)
67sha256sums=(
68 'SKIP'
69)
70
71prepare() {
72 cd "${srcdir}/${_pkgname}"
73 git log > "${srcdir}/git.log"
74}
75
76pkgver() {
77 cd "${srcdir}/${_pkgname}"
78
79 _ver="$(git describe --tags | sed -E -e 's|^[vV]||' -e 's|\-g[0-9a-f]*$||' | tr '-' '+')"
80 _rev="$(git rev-list --count HEAD)"
81 _date="$(git log -1 --date=format:"%Y%m%d" --format="%ad")"
82 _hash="$(git rev-parse --short HEAD)"
83
84 if [ -z "${_ver}" ]; then
85 error "Version could not be determined."
86 return 1
87 else
88 printf '%s' "${_ver}.r${_rev}.${_date}.${_hash}"
89 fi
90}
91
92build() {
93 cd "${srcdir}"
94
95 cmake -S "${_pkgname}" -B build \
96 -DCMAKE_INSTALL_PREFIX="/usr" \
97 -DCMAKE_BUILD_TYPE=Release \
98 -DBUILD_SHARED_LIBS=ON \
99 -DBUILD_TESTING=ON \
100 -DCOVERAGE=OFF \
101 -DENABLE_COVERAGE=OFF \
102 -DENABLE_GETOPT=ON \
103 -DENABLE_PROTECTION=ON \
104 -DINSTALL_BASH_COMPLETION=ON \
105 -DINSTALL_DOC=ON \
106 -DINSTALL_GNAPPLET=ON \
107 -DINSTALL_LOC=ON \
108 -DINSTALL_LSB_INIT=ON \
109 -DINSTALL_MEDIA=ON \
110 -DINSTALL_PHP_EXAMPLES=ON \
111 -DINSTALL_S60=ON \
112 -DINSTALL_UDEV_RULES=ON \
113 -DLARGE_FILES=ON \
114 -DLIB_SUFFIX="" \
115 -DMYSQL_TESTING=OFF \
116 -DODBC_TESTING=OFF \
117 -DONLINE_TESTING=OFF \
118 -DPIC=ON \
119 -DPSQL_TESTING=OFF \
120 -DUSE_WCHAR_T=ON \
121 -DWITH_ALCABUS=ON \
122 -DWITH_ALCATEL=ON \
123 -DWITH_ALCATEL_SUPPORT=ON \
124 -DWITH_AT=ON \
125 -DWITH_ATGEN=ON \
126 -DWITH_ATOBEX=ON \
127 -DWITH_AT_SUPPORT=ON \
128 -DWITH_BACKUP=ON \
129 -DWITH_BLUEAT=ON \
130 -DWITH_BLUEFBUS2=ON \
131 -DWITH_BLUEGNAPBUS=ON \
132 -DWITH_BLUEOBEX=ON \
133 -DWITH_BLUEPHONET=ON \
134 -DWITH_BLUETOOTH=ON \
135 -DWITH_BLUETOOTH_RF_SEARCHING=ON \
136 -DWITH_BashCompletion=ON \
137 -DWITH_CELLBROADCAST=ON \
138 -DWITH_CURL=ON \
139 -DWITH_DCT4_CALENDAR_6210=OFF \
140 -DWITH_DKU2AT=ON \
141 -DWITH_DKU2PHONET=ON \
142 -DWITH_DKU5FBUS2=ON \
143 -DWITH_Doxygen=ON \
144 -DWITH_FBUS2=ON \
145 -DWITH_FBUS2BLUE=ON \
146 -DWITH_FBUS2DLR3=ON \
147 -DWITH_FBUS2PL2303=ON \
148 -DWITH_GNAPGEN=ON \
149 -DWITH_GNAPPLET_SUPPORT=ON \
150 -DWITH_GObject=ON \
151 -DWITH_Gettext=ON \
152 -DWITH_Glib=ON \
153 -DWITH_IRDA=ON \
154 -DWITH_Iconv=ON \
155 -DWITH_LibDBI=ON \
156 -DWITH_Libintl=ON \
157 -DWITH_MBUS2=ON \
158 -DWITH_MySQL=ON \
159 -DWITH_NOKIA3320=ON \
160 -DWITH_NOKIA3650=ON \
161 -DWITH_NOKIA6110=ON \
162 -DWITH_NOKIA650=ON \
163 -DWITH_NOKIA6510=ON \
164 -DWITH_NOKIA7110=ON \
165 -DWITH_NOKIA9210=ON \
166 -DWITH_NOKIA_SUPPORT=ON \
167 -DWITH_OBEXGEN=ON \
168 -DWITH_OBEX_SUPPORT=ON \
169 -DWITH_ODBC=ON \
170 -DWITH_PHONETBLUE=ON \
171 -DWITH_Postgres=ON \
172 -DWITH_S60=ON \
173 -DWITH_S60_SUPPORT=ON \
174 -DWITH_SystemD=OFF \
175 -DWITH_Threads=ON \
176 -DWITH_USB=ON \
177 -DCMAKE_POLICY_VERSION_MINIMUM=3.5
178
179 make -C build
180}
181
182check() {
183 cd "${srcdir}"
184
185 make -C build test
186}
187
188package() {
189 cd "${srcdir}"
190
191 make DESTDIR="${pkgdir}" -C build install
192
193
194 cd "${srcdir}/${_pkgname}"
195
196 _docfiles=(
197 "${srcdir}/git.log"
198 description-pak
199 ChangeLog
200 INSTALL
201 README.en_GB
202 README.de
203 )
204 _docdirs=()
205 _manfiles=()
206 _infofiles=()
207 _licensefiles=(
208 COPYING
209 )
210 printf '%s\n' " --> installing documentation ..."
211 for _docfile in "${_docfiles[@]}"; do
212 install -D -v -m644 "${_docfile}" "${pkgdir}/usr/share/doc/${_pkgname}/$(basename "${_docfile}")"
213 done
214 for _docdir in "${_docdirs[@]}"; do
215 cp -rv "${_docdir}" "${pkgdir}/usr/share/doc/${_pkgname}/$(basename "${_docdir}")"
216 done
217 for _manfile in "${_manfiles[@]}"; do
218 _section="$(basename "${_manfile}" .gz | sed -E -e 's|^.*\.([^.]*)$|\1|')"
219 install -D -v -m644 "docs/build/man/${_manfile}" "${pkgdir}/usr/share/man/man${_section}/$(basename "${_manfile}")"
220 done
221 for _infofile in "${_infofiles[@]}"; do
222 install -D -v -m644 "${_infofile}" "${pkgdir}/usr/share/info/$(basename "${_infofile}")"
223 done
224 printf '%s\n' " --> installing license ..."
225 for _licensefile in "${_licensefiles[@]}"; do
226 install -D -v -m644 "${_licensefile}" "${pkgdir}/usr/share/licenses/${pkgname}/$(basename "${_licensefile}")"
227 #ln -svr "${pkgdir}/usr/share/licenses/${pkgname}/$(basename "${_licensefile}")" "${pkgdir}/usr/share/doc/${_pkgname}/$(basename "${_licensefile}")"
228 done
229}
230
231

Scan history

Scanned at (UTC)SeverityRules
2026-10-20 00:10:31 Low 2
2026-10-19 00:03:55 Low 2
2026-10-18 00:06:55 Low 2
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 00:06:47 Low 2
2026-10-13 00:23:45 Low 2
2026-10-12 00:18:51 Low 2
2026-10-11 00:26:05 Low 2
2026-10-10 00:11:52 Low 2
2026-10-09 00:05:33 Low 2
2026-10-08 00:28:03 Low 2
2026-10-07 00:21:34 Low 2
2026-10-06 00:13:36 Low 2
2026-10-05 00:08:03 Low 2
2026-10-04 00:18:08 Low 2
2026-10-03 00:23:04 Low 2
2026-10-02 00:00:32 Low 2
2026-10-01 00:02:06 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion