html2ps

maintainer severach · 4 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The source is a tarball from fossies.org, a legitimate archive hosting site, and the package builds from unexecuted source code; the non-whitelisted host is not a significant risk given the context.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from fossies.org, a legitimate archive hosting site, and the package builds from unexecuted source code; the non-whitelisted host is not a significant risk given the context.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:19 "https://fossies.org/linux/www/old/${_srcdir}.tar.gz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Chris Severance aur.severach aATt spamgourmet dott com
2# Contributor: Michael Duell <michael.duell@rub.de> (akurei)
3# Contributor: Nick B <Shirakawasuna at gmail _dot_com>
4
5set -u
6pkgname='html2ps'
7pkgver='1.0b7'
8pkgrel='8'
9pkgdesc='An HTML to PostScript converter written in Perl.'
10arch=('any')
11#url='http://user.it.uu.se/~jan/html2ps.html'
12url='https://linux.die.net/man/1/html2ps'
13license=('GPL2')
14depends=('ghostscript' 'perl' 'texlive-bin')
15options=('!strip')
16_srcdir="${pkgname}-${pkgver}"
17source=(
18 #"http://user.it.uu.se/~jan/html2ps-${pkgver}.tar.gz"
19 "https://fossies.org/linux/www/old/${_srcdir}.tar.gz"
20 '0000-tmpname.patch'
21)
22md5sums=('073ab8a239c8d0e3547192ee9016db15'
23 'af46fab28f1d32c6fc30e3e2bf09f19c')
24sha256sums=('d553980468a14bae738982c384c17f426ecf77dafd9a4e2499d520953f156f14'
25 '3bedbca6aa76f3accd1c18210c686cddf7168c59f376285bd1c9a35b00e1c74b')
26
27prepare() {
28 set -u
29 cd "${_srcdir}"
30
31 patch -Nup3 -i '../0000-tmpname.patch'
32
33 sed -e '# Fixes Bug: https://bugzilla.redhat.com/show_bug.cgi?id=822117' \
34 -e '/^ local($\[)=0;$/d' \
35 -e '#' \
36 -e '# Set some variables in the script' \
37 -e "s#/it/sw/share/www/lib/html2ps/html2psrc#/etc/html2psrc#g" \
38 -e "s#/opt/misc/lib/html2ps/html2psrc#/etc/html2psrc#g" \
39 -e "s#/opt/misc/lib/html2ps/html2ps.html#/usr/share/html2ps/html2ps.html#g" \
40 -e "s#Ghostscript: 0;#Ghostscript: 1;#g" \
41 -e "s#TeX: 0;#TeX: 1;#g" \
42 -e 's# file: "";# file: "/usr/share/texmf/tex/generic/hyphen/hyphen.tex";#g' \
43 -i "${pkgname}"
44
45 set +u
46}
47
48package() {
49 set -u
50 cd "${_srcdir}"
51 install -Dpm755 "${pkgname}" -t "${pkgdir}/usr/bin/"
52 install -Dpm644 'sample' "${pkgdir}/etc/html2psrc"
53 install -Dpm644 'sample' "${pkgdir}/usr/share/${pkgname}/etc/html2psrc-sampleconfig"
54 install -Dpm644 "${pkgname}.1" -t "${pkgdir}/usr/share/man/man1/"
55 install -Dpm644 "${pkgname}rc.5" -t "${pkgdir}/usr/share/man/man5/"
56 install -Dpm644 "${pkgname}.html" -t "${pkgdir}/usr/share/${pkgname}/"
57 set +u
58}
59set +u
60

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion