jitsi-meet-bin

maintainer celogeek · 14 votes · scanned 2026-08-18 00:03:42.021799
LOW
View on AUR ↗
Why flagged The package downloads official Jitsi Meet .deb files from the project's own domain (download.jitsi.org), extracts and installs them as static web content;虽非白名单主机 but the source is verifiable and the content is non-executable web assets, so the risk is low.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads official Jitsi Meet .deb files from the project's own domain (download.jitsi.org), extracts and installs them as static web content;虽非白名单主机 but the source is verifiable and the content is non-executable web assets, so the risk is low.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:26 "https://download.jitsi.org/stable/jitsi-meet-web_${_version}-1_all.deb"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: C0rn3j <spleefer90@gmail.com>
2# Contributor: Celogeek <private-4zokpdq6@mrhyde.xyz>
3
4_basename=jitsi
5_pkgname=meet
6_version=1.0.9365
7
8_pkgbase=${_basename}-${_pkgname}
9_debname=${_basename}-${_pkgname}-web
10pkgname=${_pkgbase}-bin
11pkgver=${_version}
12pkgrel=1
13pkgdesc="Jitsi Meet Web binary"
14arch=('any')
15url="https://jitsi.org/jitsi-meet/"
16license=('Apache')
17depends=()
18optdepends=("nginx")
19makedepends=('tar')
20options=('!strip')
21backup=(
22 "etc/webapps/${_pkgbase}/config.js"
23 "etc/webapps/${_pkgbase}/interface_config.js"
24)
25source=(
26 "https://download.jitsi.org/stable/jitsi-meet-web_${_version}-1_all.deb"
27 "config_${_version}.deb::https://download.jitsi.org/stable/jitsi-meet-web-config_${_version}-1_all.deb"
28)
29noextract=(
30 "config_${_version}.deb"
31)
32provides=(${_pkgbase})
33conflicts=(${_pkgbase})
34install=jitsi.install
35
36build() {
37 rm -rf ${_pkgbase}
38 mkdir ${_pkgbase}
39 tar xJf data.tar.xz -C ${_pkgbase}
40 ar p "config_${_version}.deb" data.tar.xz | tar xJC ${_pkgbase}
41}
42
43package() {
44 cd "$srcdir/${_pkgbase}"
45
46 DESTDIR="${pkgdir}/usr/share/webapps/${_pkgbase}"
47 CONFDIR="${pkgdir}/etc/webapps/${_pkgbase}"
48 DOCDIR="${pkgdir}/usr/share/doc/${_pkgbase}"
49
50 install -d "$DESTDIR"
51 install -d "$CONFDIR"
52 install -d "$DOCDIR"
53
54 cp -R usr/share/jitsi-meet/* "${DESTDIR}"
55 cp usr/share/jitsi-meet-web-config/config.js "${DESTDIR}"
56 cp -R usr/share/jitsi-meet-web-config/* "${DOCDIR}"
57
58 for i in interface_config.js config.js
59 do
60 install -Dm644 "$DESTDIR/${i}" "$CONFDIR/${i}"
61 ln -sf "/etc/webapps/${_pkgbase}/${i}" "$DESTDIR/${i}"
62 done
63
64 sed -i 's@/usr/share/jitsi-meet@/usr/share/webapps/'${_pkgbase}'@' "${pkgdir}/usr/share/doc/${_pkgbase}/"*
65 sed -i 's@/etc/jitsi/meet@/etc/webapps/'${_pkgbase}'@' "${pkgdir}/usr/share/doc/${_pkgbase}/"*
66
67 chown -R root:root "${pkgdir}"
68}
69sha256sums=('9d5ee46c16b75ad96d09be9c4eeee215e798c95ecbd3f57d74b17ad6ed6737d2'
70 'b6cdaa60310ee6a76ce75095d6935e3937c0f3825725a98307f949a69a01dc00')
71

Changes since previous scan

--- PKGBUILD @ 2026-06-22 14:13
+++ PKGBUILD @ 2026-08-18 00:03
@@ -3,7 +3,7 @@
_basename=jitsi
_pkgname=meet
-_version=1.0.9268
+_version=1.0.9365
_pkgbase=${_basename}-${_pkgname}
_debname=${_basename}-${_pkgname}-web
@@ -66,6 +66,6 @@
chown -R root:root "${pkgdir}"
}
-sha256sums=('a1c8a1ddaec361c16169c1070f58bf846f780d4ef828a3dce9ccbf5dba8cf801'
- 'f9958fd01a1b8cfc3d8cfce9e695a7b3ccee09af4a63f3d33943aa786a387441')
+sha256sums=('9d5ee46c16b75ad96d09be9c4eeee215e798c95ecbd3f57d74b17ad6ed6737d2'
+ 'b6cdaa60310ee6a76ce75095d6935e3937c0f3825725a98307f949a69a01dc00')

Scan history

Scanned at (UTC)SeverityRules
2026-08-18 00:03:42 LOW 2
2026-08-17 00:18:29 LOW 2
2026-08-16 00:03:42 LOW 2
2026-08-15 00:26:13 LOW 2
2026-08-14 00:03:41 LOW 2
2026-08-13 00:17:07 LOW 2
2026-08-12 00:27:08 LOW 2
2026-08-11 19:21:46 MEDIUM 1
2026-06-22 14:13:37 CLEAN 2
2026-06-19 19:07:35 CLEAN 2
2026-06-18 16:11:54 MEDIUM 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion