libobjfwtls
objfw
scanned 2026-09-17 00:27:14.276658
The source is a tarball from the project's official domain (objfw.nil.im), which is plausibly the project's own infrastructure; building from source is normal AUR packaging behavior, and the checksum is verified.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official domain (objfw.nil.im), which is plausibly the project's own infrastructure; building from source is normal AUR packaging behavior, and the checksum is verified.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:13
source=("https://objfw.nil.im/downloads/$pkgbase-$pkgver.tar.gz")
PKGBUILD
1 offending line(s) highlighted# Maintainer: Jonathan Schleifer <js@nil.im>
pkgname=('libobjfw' 'libobjfwrt' 'libobjfwtls' 'libobjfwhid' 'ofarc' 'ofdns'
'ofgctester' 'ofhash' 'ofhttp')
pkgbase=objfw
pkgver=1.5.7
pkgrel=1
pkgdesc="Portable, lightweight framework for the Objective-C language"
arch=('x86_64')
url="https://objfw.nil.im/"
license=('LGPL3')
groups=(objfw)
makedepends=(clang)
source=("https://objfw.nil.im/downloads/$pkgbase-$pkgver.tar.gz")
sha256sums=(e637c32731dc07396b812c4019f34d1417a3f7aa39d450b7f27c9bcdc23b3e12)
build() {
cd "$pkgbase-$pkgver"
./configure OBJC=clang --prefix=/usr --with-tls=openssl
make -j$(nproc)
}
check() {
cd "$pkgbase-$pkgver"
make check
}
package_libobjfw() {
pkgdesc="ObjFW library"
depends=(glibc gcc-libs libobjfwrt bash)
cd "$pkgbase-$pkgver"
make DESTDIR="$pkgdir/" install
for i in COPYING COPYING.LESSER; do
install -D -m 644 "$i" "$pkgdir/usr/share/licenses/$pkgname/$i"
done
# Those are in subpackages
rm -f "$pkgdir/usr/bin/ofarc"
rm -f "$pkgdir/usr/bin/ofdns"
rm -f "$pkgdir/usr/bin/ofgctester"
rm -f "$pkgdir/usr/bin/ofhash"
rm -f "$pkgdir/usr/bin/ofhttp"
rm -fr "$pkgdir/usr/include/ObjFWHID"
rm -fr "$pkgdir/usr/include/ObjFWRT"
rm -fr "$pkgdir/usr/include/ObjFWTLS"
rm -f "$pkgdir/usr/lib/libobjfwhid.so"*
rm -f "$pkgdir/usr/lib/libobjfwrt.so"*
rm -f "$pkgdir/usr/lib/libobjfwtls.so"*
rm -f "$pkgdir/usr/lib/objfw-config/ObjFWHID.oc"
rm -f "$pkgdir/usr/lib/objfw-config/ObjFWTLS.oc"
rm -f "$pkgdir/usr/share/man/man1/ofarc.1"
rm -f "$pkgdir/usr/share/man/man1/ofdns.1"
rm -f "$pkgdir/usr/share/man/man1/ofgctester.1"
rm -f "$pkgdir/usr/share/man/man1/ofhash.1"
rm -f "$pkgdir/usr/share/man/man1/ofhttp.1"
rm -fr "$pkgdir/usr/share/ofarc"
rm -fr "$pkgdir/usr/share/ofdns"
rm -fr "$pkgdir/usr/share/ofhash"
rm -fr "$pkgdir/usr/share/ofhttp"
}
package_libobjfwrt() {
pkgdesc="ObjFW Objective-C runtime library"
depends=(glibc gcc-libs)
cd "$pkgbase-$pkgver"
make -C src/runtime DESTDIR="$pkgdir/" install
for i in COPYING COPYING.LESSER; do
install -D -m 644 "$i" "$pkgdir/usr/share/licenses/$pkgname/$i"
done
}
package_libobjfwtls() {
pkgdesc="TLS support for ObjFW"
depends=(glibc gcc-libs libobjfw libobjfwrt openssl)
cd "$pkgbase-$pkgver"
make -C src/tls DESTDIR="$pkgdir/" install
for i in COPYING COPYING.LESSER; do
install -D -m 644 "$i" "$pkgdir/usr/share/licenses/$pkgname/$i"
done
}
package_libobjfwhid() {
pkgdesc="HID support for ObjFW"
depends=(glibc gcc-libs libobjfw libobjfwrt)
cd "$pkgbase-$pkgver"
make -C src/hid DESTDIR="$pkgdir/" install
for i in COPYING COPYING.LESSER; do
install -D -m 644 "$i" "$pkgdir/usr/share/licenses/$pkgname/$i"
done
}
package_ofarc() {
pkgdesc="Utility for handling ZIP, Tar, LHA and Zoo archives"
depends=(glibc gcc-libs libobjfw libobjfwrt libobjfwtls)
cd "$pkgbase-$pkgver"
make -C utils/ofarc DESTDIR="$pkgdir/" install
for i in COPYING COPYING.LESSER; do
install -D -m 644 "$i" "$pkgdir/usr/share/licenses/$pkgname/$i"
done
}
package_ofdns() {
pkgdesc="Utility for performing DNS requests on the command line"
depends=(glibc gcc-libs libobjfw libobjfwrt)
cd "$pkgbase-$pkgver"
make -C utils/ofdns DESTDIR="$pkgdir/" install
for i in COPYING COPYING.LESSER; do
install -D -m 644 "$i" "$pkgdir/usr/share/licenses/$pkgname/$i"
done
}
package_ofgctester() {
pkgdesc="Game controller tester for the terminal"
depends=(glibc gcc-libs libobjfw libobjfwrt libobjfwhid)
cd "$pkgbase-$pkgver"
make -C utils/ofgctester DESTDIR="$pkgdir/" install
for i in COPYING COPYING.LESSER; do
install -D -m 644 "$i" "$pkgdir/usr/share/licenses/$pkgname/$i"
done
}
package_ofhash() {
pkgdesc="Utility to hash files with various cryptographic hash functions"
depends=(glibc gcc-libs libobjfw libobjfwrt libobjfwtls)
cd "$pkgbase-$pkgver"
make -C utils/ofhash DESTDIR="$pkgdir/" install
for i in COPYING COPYING.LESSER; do
install -D -m 644 "$i" "$pkgdir/usr/share/licenses/$pkgname/$i"
done
}
package_ofhttp() {
pkgdesc="Command line downloader for HTTP(S)"
depends=(glibc gcc-libs libobjfw libobjfwrt libobjfwtls)
cd "$pkgbase-$pkgver"
make -C utils/ofhttp DESTDIR="$pkgdir/" install
for i in COPYING COPYING.LESSER; do
install -D -m 644 "$i" "$pkgdir/usr/share/licenses/$pkgname/$i"
done
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |