kazakov_simple_components
maintainer charlie5
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads the source tarball from the author's personal domain, which is not on a standard code host whitelist, but the content is built from source using standard Ada tooling, and the worst case of a malicious swap would be code execution during build, which is typical for AUR packages building from upstream sources.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads the source tarball from the author's personal domain, which is not on a standard code host whitelist, but the content is built from source using standard Ada tooling, and the worst case of a malicious swap would be code execution during build, which is typical for AUR packages building from upstream sources.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:16
source=(http://www.dmitry-kazakov.de/ada/components_4_80.tgz
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: charlie5 on #ada @ libera irc
2
3
# Commented out lines are problematic and will be addressed in a future PKGBUILD release.
4
5
pkgname=kazakov_simple_components
6
pkgver=4.80
7
pkgrel=1
8
pkgdesc="A set of low-level Ada components by Dmitri Kazakov."
9
arch=(i686 x86_64)
10
url=http://www.dmitry-kazakov.de/ada/components.htm
11
license=(GPL2+)
12
13
depends=(unixodbc)
14
makedepends=(gprbuild)
15
16
source=(http://www.dmitry-kazakov.de/ada/components_4_80.tgz
17
LICENSE)
18
sha256sums=(4db980861d5b0f86affd7d31acd2430011d347e211d443e49ab60fc40578b823
19
3718d08bc7d42a49e6ce06d6d942f4e310e0db3c4336de1c9fd91dc6c3711615)
20
21
export Target_OS=Linux
22
23
24
build()
25
{
26
cd "$srcdir"
27
28
export Target_OS=Linux
29
30
gprbuild -P strings_edit.gpr
31
gprbuild -P tables.gpr
32
gprbuild -P xpm/xpm_parser.gpr
33
34
gprbuild -P odbc/odbc.gpr
35
36
gprbuild -P components.gpr
37
gprbuild -P components-sqlite.gpr
38
gprbuild -P components-python.gpr
39
gprbuild -P components-openssl.gpr
40
gprbuild -P components-odbc.gpr
41
gprbuild -P components-ntp.gpr
42
gprbuild -P components-julia.gpr
43
# gprbuild -P components-json.gpr
44
gprbuild -P components-gnutls.gpr
45
46
# gprbuild -P components-gnade.gpr
47
48
gprbuild -P components-connections_server.gpr
49
gprbuild -P components-connections_server-smtp.gpr
50
gprbuild -P components-connections_server-secure.gpr
51
gprbuild -P components-connections_server-openssl.gpr
52
gprbuild -P components-connections_server-mqtt.gpr
53
gprbuild -P components-connections_server-modbus.gpr
54
gprbuild -P components-connections_server-ldap.gpr
55
gprbuild -P components-connections_server-http_server.gpr
56
gprbuild -P components-connections_server-http_server-sqlite_browser.gpr
57
gprbuild -P components-connections_server-elv_max_cube.gpr
58
59
# gprbuild -P components-apq.gpr
60
}
61
62
63
64
65
install_gpr()
66
{
67
export Target_OS=Linux
68
69
gprinstall -p --prefix="$pkgdir/usr" --sources-subdir="include/kazakov" --lib-subdir="lib/kazakov" -P "$1"
70
}
71
72
73
74
package()
75
{
76
cd "$srcdir"
77
78
export Target_OS=Linux
79
80
install_gpr strings_edit.gpr
81
install_gpr tables.gpr
82
install_gpr xpm/xpm_parser.gpr
83
84
# gprinstall -p --prefix="$pkgdir/usr" -P odbc/odbc.gpr
85
86
install_gpr components.gpr
87
install_gpr components-sqlite.gpr
88
install_gpr components-python.gpr
89
install_gpr components-openssl.gpr
90
install_gpr components-odbc.gpr
91
install_gpr components-ntp.gpr
92
install_gpr components-julia.gpr
93
# install_gpr components-json.gpr
94
install_gpr components-gnutls.gpr
95
96
# gprbuild -P components-gnade.gpr
97
98
install_gpr components-connections_server.gpr
99
install_gpr components-connections_server-smtp.gpr
100
install_gpr components-connections_server-secure.gpr
101
install_gpr components-connections_server-openssl.gpr
102
install_gpr components-connections_server-mqtt.gpr
103
install_gpr components-connections_server-modbus.gpr
104
install_gpr components-connections_server-ldap.gpr
105
install_gpr components-connections_server-http_server.gpr
106
install_gpr components-connections_server-http_server-sqlite_browser.gpr
107
install_gpr components-connections_server-elv_max_cube.gpr
108
109
# gprbuild -P components-apq.gpr
110
111
112
# Install the license.
113
install -D -m644 \
114
"LICENSE" \
115
"$pkgdir/usr/share/licenses/$pkgname/LICENSE"
116
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |