libkazv-git

MEDIUM
maintainer shrik3 1 votes scanned 2026-09-23 13:40:34.773403
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:48 "${_pkgname}::git+https://r.lily-is.land/the-kazv-project/libkazv.git"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: shrik3 <i AT shrik3 DOT com>
2# Contributor: dreieck (https://aur.archlinux.org/account/dreieck)
3
4_pkgname=libkazv
5pkgname="${_pkgname}-git"
6pkgver=1.0.0.r538.20260830.cbfdce3
7pkgrel=1
8pkgdesc="A matrix client sdk built upon lager and the value-oriented design it enables."
9arch=(
10 'aarch64'
11 'armv6h'
12 'armv7h'
13 'i686'
14 'x86_64'
15)
16license=('AGPL-3.0-or-later')
17url="https://lily-is.land/kazv/libkazv"
18backup=()
19depends=(
20 #'boost-libs'
21 'crypto++'
22 'gcc-libs'
23 'glibc'
24 'vodozemac-bindings-cpp-kazv>=1.0.0'
25)
26makedepends=(
27 #'boost'
28 'cmake'
29 # 'cpr' # Currently (2023-08-25) this makes build errors, so disabling.
30 'git'
31 'immer'
32 'lager'
33 'nlohmann-json'
34 'zug'
35)
36
37## Disabled until we re-enable `check()`.
38# checkdepends=(
39# 'catch2>=3.4.0'
40# )
41optdepends=(
42 # 'cpr: for kazvjob.' # Currently (2023-08-25) this makes build errors, so disabling.
43 'libhttpserver: For examples.'
44)
45provides=("${_pkgname}=${pkgver}")
46conflicts=("${_pkgname}")
47source=(
48 "${_pkgname}::git+https://r.lily-is.land/the-kazv-project/libkazv.git"
49)
50sha256sums=(
51 'SKIP'
52)
53
54
55prepare() {
56 cd "${srcdir}/${_pkgname}"
57
58 git log > git.log
59}
60
61
62pkgver() {
63 cd "${srcdir}/${_pkgname}"
64
65 _ver="$(git describe --tags | sed -E -e 's|^[vV]||' -e 's|-g[0-9a-f]+$||' | tr '-' '+')"
66 # _ver_major="$(grep -Em1 '^[^#]*set\(libkazv_VERSION_MAJOR' CMakeLists.txt | sed -E 's|.*libkazv_VERSION_MAJOR[[:space:]]+([^\)]*)\).*|\1|')"
67 # _ver_minor="$(grep -Em1 '^[^#]*set\(libkazv_VERSION_MINOR' CMakeLists.txt | sed -E 's|.*libkazv_VERSION_MINOR[[:space:]]+([^\)]*)\).*|\1|')"
68 # _ver_patch="$(grep -Em1 '^[^#]*set\(libkazv_VERSION_PATCH' CMakeLists.txt | sed -E 's|.*libkazv_VERSION_PATCH[[:space:]]+([^\)]*)\).*|\1|')"
69 # _ver="${_ver_major}.${_ver_minor}.${_ver_patch}"
70 _rev="$(git rev-list --count HEAD)"
71 _date="$(git log -1 --date=format:"%Y%m%d" --format="%ad")"
72 _hash="$(git rev-parse --short HEAD)"
73
74 if [ -z "${_ver}" ]; then
75 error "Version could not be determined."
76 return 1
77 else
78 printf '%s' "${_ver}.r${_rev}.${_date}.${_hash}"
79 fi
80}
81
82
83build() {
84 cd "${srcdir}/${_pkgname}"
85
86 mkdir -p build
87 cd build
88
89 ## KAZVJOB: Currently (2023-08-25) this makes build errors related to cpr, so disabling.
90 # TESTS, EXAMPLES: Depend on KAZVJOB.
91 cmake \
92 -DCXX_STANDARD=17 \
93 -DCMAKE_BUILD_TYPE=Release \
94 -DCMAKE_INSTALL_PREFIX='/usr' \
95 -Dlibkazv_BUILD_EXAMPLES=OFF \
96 -Dlibkazv_BUILD_KAZVJOB=OFF \
97 -Dlibkazv_BUILD_TESTS=OFF \
98 -Dlibkazv_ENABLE_COVERAGE=OFF \
99 -Dlibkazv_INSTALL_HEADERS=ON \
100 -Dlibkazv_OUTPUT_LEVEL=20 \
101 ..
102
103 make
104}
105
106
107# check() {
108## Disabled since currently TESTS are disabled.
109# cd "${srcdir}/${_pkgname}/build"
110# }
111
112
113package() {
114 cd "${srcdir}/${_pkgname}/build"
115
116 make DESTDIR="${pkgdir}" install
117
118 cd "${srcdir}/${_pkgname}"
119
120 for _docfile in 'git.log' 'README.md' 'CHANGELOG.md'; do
121 install -Dvm644 "${_docfile}" "${pkgdir}/usr/share/doc/${_pkgname}/${_docfile}"
122 done
123 for _licensefile in COPYING; do
124 install -Dvm644 "${_licensefile}" "${pkgdir}/usr/share/licenses/${pkgname}/${_licensefile}"
125 ln -svr "${pkgdir}/usr/share/licenses/${pkgname}/${_licensefile}" "${pkgdir}/usr/share/doc/${_pkgname}/${_licensefile}"
126 done
127}
128

Changes since previous scan

--- PKGBUILD @ 2026-06-20 00:18
+++ PKGBUILD @ 2026-09-23 13:40
@@ -3,7 +3,7 @@
_pkgname=libkazv
pkgname="${_pkgname}-git"
-pkgver=0.8.0+9.r501.20251002.1155e3e
+pkgver=1.0.0.r538.20260830.cbfdce3
pkgrel=1
pkgdesc="A matrix client sdk built upon lager and the value-oriented design it enables."
arch=(
@@ -21,7 +21,7 @@
'crypto++'
'gcc-libs'
'glibc'
- 'vodozemac-bindings-cpp-kazv>=0.2.0'
+ 'vodozemac-bindings-cpp-kazv>=1.0.0'
)
makedepends=(
#'boost'

Scan history

Scanned at (UTC)SeverityRules
2026-09-23 13:40:34 Medium 1
2026-06-20 00:18:46 Medium 1
2026-06-19 23:51:18 Clean 2
2026-06-19 19:07:35 Low 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion