gnome-radio
LOW
maintainer bittin
4 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a tarball from the project's official domain, used to build the software normally; the host is not whitelisted but is plausibly legitimate, and no untrusted executable is downloaded or executed.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official domain, used to build the software normally; the host is not whitelisted but is plausibly legitimate, and no untrusted executable is downloaded or executed.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:15
source=(http://www.gnomeradio.org/src/gnome-radio-83.0.3.tar.xz)
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Luna Jernberg <lunajernberg@gnome.org>
2
# Co-Maintainer: Rafael Fontenelle <rafaelff@gnome.org>
3
4
pkgname=gnome-radio
5
pkgver=83.0.3
6
pkgrel=1
7
pkgdesc="Easily find live radio programs based on geographical location of radio broadcasters on the Internet"
8
arch=('x86_64')
9
url="https://www.gnomeradio.org"
10
license=(GPL-3.0-only)
11
depends=('libchamplain' 'geoclue' 'gst-plugins-base' 'gst-plugins-bad' 'geocode-glib-2' 'goocanvas2')
12
makedepends=('intltool' 'itstool' 'python')
13
conflicts=('gnome-internet-radio-locator')
14
replaces=('gnome-internet-radio-locator')
15
source=(http://www.gnomeradio.org/src/gnome-radio-83.0.3.tar.xz)
16
sha256sums=('e7f7e9bb65f311a3cfc835cb6640562a792398d7fb71df37774605c30abc0bcb')
17
18
prepare() {
19
cd $pkgname-$pkgver
20
# https://gitlab.gnome.org/ole/gnome-radio/-/issues/4
21
sed -i 's|geocode-glib-1.0|geocode-glib-2.0|' configure
22
}
23
24
build() {
25
cd $pkgname-$pkgver
26
./configure --prefix=/usr --with-recording
27
make
28
}
29
30
check(){
31
cd $pkgname-$pkgver
32
make check -k
33
}
34
35
package(){
36
cd $pkgname-$pkgver
37
make DESTDIR="$pkgdir" install
38
}
39
40
Changes since previous scan
--- PKGBUILD @ 2026-08-31 00:19+++ PKGBUILD @ 2026-09-17 00:27@@ -2,7 +2,7 @@ # Co-Maintainer: Rafael Fontenelle <rafaelff@gnome.org> pkgname=gnome-radio-pkgver=83.0.1+pkgver=83.0.3 pkgrel=1 pkgdesc="Easily find live radio programs based on geographical location of radio broadcasters on the Internet" arch=('x86_64')@@ -12,8 +12,8 @@ makedepends=('intltool' 'itstool' 'python') conflicts=('gnome-internet-radio-locator') replaces=('gnome-internet-radio-locator')-source=(http://www.gnomeradio.org/src/gnome-radio-83.0.1.tar.xz)-sha256sums=('acd4d8f00a64c0c97c5960ab15748cfbb6f27009def79dd801362db6fa3dd848')+source=(http://www.gnomeradio.org/src/gnome-radio-83.0.3.tar.xz)+sha256sums=('e7f7e9bb65f311a3cfc835cb6640562a792398d7fb71df37774605c30abc0bcb') prepare() { cd $pkgname-$pkgverScan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 07:44:47 | Medium | 1 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |