lib32-mariadb-connector-c

LOW

maintainer orphaned 0 votes scanned 2026-11-03 12:09:28.176153

View on AUR

Why flagged

Source is downloaded from archive.mariadb.org, which is the official MariaDB distribution infrastructure; this is a legitimate lib32 build of the MariaDB connector-c library with a provided checksum, posing no meaningful security risk beyond normal AUR packaging concerns.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 85%): Source is downloaded from archive.mariadb.org, which is the official MariaDB distribution infrastructure; this is a legitimate lib32 build of the MariaDB connector-c library with a provided checksum, posing no meaningful security risk beyond normal AUR packaging concerns.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source=("https://archive.mariadb.org/connector-c-${pkgver}/mariadb-connector-c-${pkgver}-src.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Dominic Radermacher <blip@mockmoon-cybernetics.ch>
    
      2_pkgbasename='mariadb-connector-c'
    
      3pkgname=lib32-${_pkgbasename}
    
      4pkgver=3.1.13
    
      5pkgrel=1
    
      6pkgdesc='MariaDB connector libraries for C/C++'
    
      7arch=('x86_64')
    
      8license=('GPL')
    
      9url='http://mariadb.org/'
    
      10depends=('lib32-openssl' 'lib32-krb5' 'lib32-curl')
    
      11makedepends=('cmake' 'zlib' 'libaio' 'libxml2' 'openssl' 'pcre' 'lz4')
    
      12conflicts=('lib32-libmysqlclient')
    
      13source=("https://archive.mariadb.org/connector-c-${pkgver}/mariadb-connector-c-${pkgver}-src.tar.gz")
    
      14sha256sums=('0271a5edfd64b13bca5937267474e4747d832ec62e169fc2589d2ead63746875')
    
      15
    
      16build() {
    
      17	export CC="gcc -m32"
    
      18	export CXX="g++ -m32"
    
      19	export PKG_CONFIG_PATH="/usr/lib32/pkgconfig"
    
      20	cd ${_pkgbasename}-${pkgver}-src
    
      21	cmake ../${_pkgbasename}-${pkgver}-src \
    
      22	-DCMAKE_INSTALL_PREFIX=/usr
    
      23	make
    
      24}
    
      25
    
      26package() {
    
      27	cd ${_pkgbasename}-${pkgver}-src
    
      28	make DESTDIR="${pkgdir}" install
    
      29	cd ${pkgdir}/usr
    
      30	# Ugly hack, I didn't manage to get cmake use CMAKE_INSTALL_LIBDIR
    
      31	mkdir lib32
    
      32	mv lib/mariadb/* lib32
    
      33	rm -rf lib bin
    
      34}
    
      35

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-03 12:09:28	Low	3
2026-11-03 12:04:35	Medium	2