jami-qt-beta-git

maintainer a_i · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged Package builds from the official Jami project git repository (git.jami.net/savoirfairelinux), applies local patch files, and runs no unreviewed remote code; the SKIP checksum on the git source is normal for VCS sources, and the patch files have explicit checksums. Low votes/recent upload is the only mild concern.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 80%): Package builds from the official Jami project git repository (git.jami.net/savoirfairelinux), applies local patch files, and runs no unreviewed remote code; the SKIP checksum on the git source is normal for VCS sources, and the patch files have explicit checksums. Low votes/recent upload is the only mild concern.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:47 "${_pkgname}::git+https://git.jami.net/savoirfairelinux/jami-client-qt.git"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Alex Indigo <ai at aegis dot one>
    
      2# Contributor: Alex Indigo <ai at aegis dot one>
    
      3
    
      4pkgname=jami-qt-beta-git
    
      5_pkgname=jami-client-qt
    
      6_release_ver=202607271335
    
      7pkgver=202607271335.r3.g2e34c0bb
    
      8pkgrel=1
    
      9pkgdesc="Free and universal communication platform which preserves the users' privacy and freedoms (Qt client, beta channel)"
    
      10arch=('x86_64')
    
      11url="https://jami.net"
    
      12license=('GPL-3.0-or-later')
    
      13groups=('jami')
    
      14
    
      15depends=(
    
      16    'jami-daemon'
    
      17    'glib2'
    
      18    'gdk-pixbuf2'
    
      19    'libnm'
    
      20    'libnotify'
    
      21    'qt6-declarative'
    
      22    'qt6-multimedia'
    
      23    'qt6-svg'
    
      24    'qt6-5compat'
    
      25    'qt6-webengine'
    
      26    'qt6-httpserver'
    
      27    'qt6-webchannel'
    
      28    'qt6-shadertools'
    
      29    'hunspell'
    
      30    'tidy'
    
      31    'md4c'
    
      32    'qwindowkit'
    
      33    'zxing-cpp'
    
      34)
    
      35makedepends=(
    
      36    'cmake'
    
      37    'git'
    
      38    'python'
    
      39    'qt6-tools'
    
      40    'qt6-networkauth'
    
      41)
    
      42
    
      43provides=('jami-qt' 'jami-client-qt')
    
      44conflicts=('jami-qt' 'jami-client-qt')
    
      45
    
      46source=(
    
      47    "${_pkgname}::git+https://git.jami.net/savoirfairelinux/jami-client-qt.git"
    
      48    'zxing-cpp-3.patch'
    
      49    'fix-link.patch'
    
      50    'fix-valuefilter-invert.patch'
    
      51)
    
      52sha256sums=(
    
      53    'SKIP'
    
      54    '0b26f155c94f91a0c541879698f2d1b14544036685267e7367f6523dacd8a91f'
    
      55    'ce15c9c4ed91768cbd75bf7bd0fa904f553a12da32c17b700d85fdd8c8cbedce'
    
      56    '44ab7cfbf1c3b58a118e4852227d86f08f28d5636d3d6a0e4f966e87535a80b0'
    
      57)
    
      58
    
      59pkgver() {
    
      60    cd "${srcdir}/${_pkgname}"
    
      61    git describe --long --tags --match 'beta/*' --always 2>/dev/null \
    
      62        | sed 's/^beta\///;s/\([^-]*-g\)/r\1/;s/-/./g' \
    
      63        || echo "${_release_ver}.r0.g$(git rev-parse --short HEAD)"
    
      64}
    
      65
    
      66prepare() {
    
      67    cd "${srcdir}/${_pkgname}"
    
      68    git submodule update --init --recursive -- 3rdparty
    
      69    patch -p1 < "${srcdir}/zxing-cpp-3.patch"
    
      70    patch -p1 < "${srcdir}/fix-link.patch"
    
      71    patch -p1 < "${srcdir}/fix-valuefilter-invert.patch"
    
      72}
    
      73
    
      74build() {
    
      75    cmake -B build -S "${srcdir}/${_pkgname}" \
    
      76        -DCMAKE_INSTALL_PREFIX=/usr \
    
      77        -DCMAKE_BUILD_TYPE=None \
    
      78        -DENABLE_LIBWRAP=ON \
    
      79        -DJAMICORE_AS_SUBDIR=OFF \
    
      80        -DWITH_DAEMON_SUBMODULE=OFF \
    
      81        -Wno-dev
    
      82    make -C build VERBOSE=1
    
      83}
    
      84
    
      85package() {
    
      86    make -C build DESTDIR="${pkgdir}" install
    
      87}
    
      88

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	3
2026-08-02 00:16:08	LOW	3
2026-08-01 00:11:18	LOW	3
2026-07-31 00:14:10	LOW	3
2026-07-30 00:17:23	LOW	3
2026-07-29 00:25:53	LOW	3
2026-07-28 07:39:26	LOW	3
2026-07-28 07:37:32	MEDIUM	2