jellyfin-server-bin
MEDIUM
maintainer notfire
5 votes
scanned 2026-09-08 15:17:32.240420
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:21
source_x86_64=("https://repo.jellyfin.org/files/server/debian/latest-stable/amd64/jellyfin-server_${_pkgver}_amd64.deb")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: notfire <notfire@posteo.net>
2
# Contributor: Jingbei Li <i@jingbei.li>
3
# Contributor: Eric Cheng <ericcheng@hey.com>
4
5
pkgname=jellyfin-server-bin
6
pkgver=12.0
7
_pkgver="${pkgver}+deb12"
8
pkgrel=1
9
pkgdesc='Jellyfin server backend'
10
arch=('x86_64' 'aarch64')
11
url='https://jellyfin.org/'
12
license=('GPL2')
13
provides=('jellyfin-server')
14
conflicts=('jellyfin-server' 'jellyfin-server-git')
15
depends=('bash' 'sqlite' 'fontconfig' 'jellyfin-ffmpeg')
16
optdepends=('jellyfin-web: to run web-app on the same machine')
17
source=('jellyfin.conf'
18
'jellyfin.service'
19
'jellyfin.sysusers'
20
'jellyfin.tmpfiles')
21
source_x86_64=("https://repo.jellyfin.org/files/server/debian/latest-stable/amd64/jellyfin-server_${_pkgver}_amd64.deb")
22
source_aarch64=("https://repo.jellyfin.org/files/server/debian/latest-stable/arm64/jellyfin-server_${_pkgver}_arm64.deb")
23
sha256sums=('d28c4219f2ab87ca7b7e9dd53710fb689d604baffd9acb3fef6b663d537944ec'
24
'0f8511673816daf528625366b6c27bc7e6182e4ac789191c87474667398376e2'
25
'9bc1ddb77c73d46cc4078356b5773e5a776ebf8b47a1c820ad5fb17591ad5228'
26
'b7faa4b0c756cdb361ef5b04fddfdc416b00f1246bb3a19a34bf4d185a6a7e5a')
27
sha256sums_x86_64=('15d3a51dc2211ad6a9aa90dd2e6ff9083c6b38fc6882c255469895b098bb2e27')
28
sha256sums_aarch64=('fe14287ebfd3018c05b575020247de0600895f86d052424554d270f348047d95')
29
backup=('etc/conf.d/jellyfin')
30
options=('staticlibs')
31
32
package() {
33
tar -xf data.tar.xz
34
35
cp -r "$srcdir"/usr "$pkgdir"/usr
36
rm -r "$pkgdir"/usr/share
37
38
install -Dm 644 jellyfin.service -t "$pkgdir"/usr/lib/systemd/system/
39
install -Dm 644 jellyfin.sysusers "$pkgdir"/usr/lib/sysusers.d/jellyfin.conf
40
install -Dm 644 jellyfin.tmpfiles "$pkgdir"/usr/lib/tmpfiles.d/jellyfin.conf
41
install -Dm 644 jellyfin.conf "$pkgdir"/etc/conf.d/jellyfin
42
}
43
Changes since previous scan
--- PKGBUILD @ 2026-06-19 19:07+++ PKGBUILD @ 2026-09-08 15:17@@ -3,7 +3,7 @@ # Contributor: Eric Cheng <ericcheng@hey.com> pkgname=jellyfin-server-bin-pkgver=10.11.11+pkgver=12.0 _pkgver="${pkgver}+deb12" pkgrel=1 pkgdesc='Jellyfin server backend'@@ -24,8 +24,8 @@ '0f8511673816daf528625366b6c27bc7e6182e4ac789191c87474667398376e2' '9bc1ddb77c73d46cc4078356b5773e5a776ebf8b47a1c820ad5fb17591ad5228' 'b7faa4b0c756cdb361ef5b04fddfdc416b00f1246bb3a19a34bf4d185a6a7e5a')-sha256sums_x86_64=('d772daa41a0e13cf7765cc7bfdec80fb4f05aee37bd6fcf3943d0a09a56768d4')-sha256sums_aarch64=('4ceea480e04a3317a1b43434e1b601ba448c1aee952cc30123bfa656da6cd631')+sha256sums_x86_64=('15d3a51dc2211ad6a9aa90dd2e6ff9083c6b38fc6882c255469895b098bb2e27')+sha256sums_aarch64=('fe14287ebfd3018c05b575020247de0600895f86d052424554d270f348047d95') backup=('etc/conf.d/jellyfin') options=('staticlibs') Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-08 15:17:32 | Medium | 1 |
| 2026-06-19 19:07:35 | Clean | 2 |
| 2026-06-18 18:55:24 | Clean | 2 |
| 2026-06-18 16:11:54 | Medium | 1 |