libosmocore-nosystemd-git-doc
LOW
maintainer dreieck
0 votes
base
libosmocore-nosystemd-git
scanned 2026-10-20 00:10:31.152894
Why flagged
The source is a Git repository from the project's official Gitea instance (gitea.osmocom.org), which is a legitimate and expected source for this software; building from a non-whitelisted but project-owned host is normal for AUR packages and does not constitute a significant security risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Git repository from the project's official Gitea instance (gitea.osmocom.org), which is a legitimate and expected source for this software; building from a non-whitelisted but project-owned host is normal for AUR packages and does not constitute a significant security risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:33
source=("${_pkgname}::git+https://gitea.osmocom.org/osmocom/libosmocore.git")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: dreieck (https://aur.archlinux.org/account/dreieck)
2
# Contributor: Vadim Yanitskiy
3
4
_pkgname=libosmocore
5
_pkgvariant=nosystemd
6
_pkgvcs=git
7
pkgbase="${_pkgname}-${_pkgvariant}-${_pkgvcs}"
8
pkgname=(
9
"${pkgbase}"
10
"${pkgbase}-doc"
11
)
12
pkgver=1.14.2+10.r5147.20260922.58c085f7d
13
pkgrel=1
14
pkgdesc="Osmocom core library (functions relating to mobile communication standards). Compiled without systemd logging dependency."
15
arch=(
16
'i686'
17
'x86_64'
18
)
19
url="https://osmocom.org/projects/libosmocore/wiki/Libosmocore"
20
license=('GPL-2.0-or-later')
21
makedepends=(
22
'autoconf'
23
'automake'
24
'doxygen' # to build the documentation.
25
'gcc'
26
'git'
27
'libtool'
28
'liburing'
29
'make'
30
'pkg-config'
31
'python'
32
)
33
source=("${_pkgname}::git+https://gitea.osmocom.org/osmocom/libosmocore.git")
34
sha256sums=('SKIP')
35
36
pkgver() {
37
cd "${srcdir}/${_pkgname}"
38
39
_ver="$(git describe --tags | sed 's|^[vV]||' | sed 's|-g[0-9a-f]*$||' | sed -E 's|-([0-9]*)$|+\1|')"
40
_rev="$(git rev-list --count HEAD)"
41
_date="$(git log -1 --date=format:"%Y%m%d" --format="%ad")"
42
_hash="$(git rev-parse --short HEAD)"
43
44
if [ -z "${_ver}" ]; then
45
error "Could not determine version."
46
return 1
47
else
48
printf '%s' "${_ver}.r${_rev}.${_date}.${_hash}"
49
fi
50
}
51
52
prepare() {
53
cd "${srcdir}/${_pkgname}"
54
55
autoreconf -i
56
57
git log > "${srcdir}/git.log"
58
}
59
60
build() {
61
cd "${srcdir}/${_pkgname}"
62
63
./configure --prefix=/usr \
64
--exec-prefix=/usr \
65
--bindir=/usr/bin \
66
--sbindir=/usr/sbin \
67
--datadir=/usr/share \
68
--libexecdir=/usr/lib \
69
--localstatedir=/var \
70
--docdir="/usr/share/doc/${_pkgname}" \
71
--libdir=/usr/lib/ \
72
--disable-systemd-logging \
73
--disable-external-tests
74
make
75
}
76
77
# check() {
78
### NOTE: 2022-10-15: dtx and vty tests fail.
79
# cd "${srcdir}/${_pkgname}"
80
# make check
81
# }
82
83
_package_main() {
84
pkgdesc="${pkgdesc}"
85
arch=("${arch[@]}")
86
depends=(
87
'glibc'
88
'gnutls'
89
'libmnl'
90
'libusb'
91
'liburing'
92
'lksctp-tools'
93
'pcsclite'
94
'sh'
95
'talloc'
96
)
97
optdepends=(
98
"${_pkgname}-doc=${pkgver}: Documentation for this software."
99
)
100
provides=(
101
"${_pkgname}=${pkgver}"
102
"${_pkgname}-${_pkgvariant}=${pkgver}"
103
"${_pkgname}-${_pkgvcs}=${pkgver}"
104
)
105
conflicts=(
106
"${_pkgname}"
107
"${_pkgname}-${_pkgvariant}"
108
"${_pkgname}-${_pkgvcs}"
109
)
110
replaces=()
111
112
cd "${srcdir}/${_pkgname}"
113
114
make DESTDIR="${pkgdir}" install
115
if [ -d "${pkgdir}/usr/share/doc" ]; then
116
msg2 "Removing documentation ..."
117
rm -R "${pkgdir}/usr/share/doc"
118
fi
119
120
msg2 "Installing license ..."
121
install -Dvm644 -t "${pkgdir}/usr/share/licenses/${pkgname}" COPYING
122
}
123
124
_package_docs() {
125
pkgdesc="Documentation for ${_pkgname}."
126
arch=('any')
127
depends=()
128
optdepends=(
129
"${_pkgname}=${pkgver}: The software this documentation is for."
130
)
131
provides=(
132
"${_pkgname}-doc=${pkgver}"
133
"${_pkgname}-doc-${_pkgvcs}=${pkgver}"
134
)
135
conflicts=(
136
"${_pkgname}-doc"
137
"${_pkgname}-doc-${_pkgvcs}"
138
)
139
replaces=()
140
141
cd "${srcdir}/${_pkgname}"
142
143
mkdir -p "${pkgdir}/staging"
144
mkdir -p "${pkgdir}/usr/share/doc"
145
make DESTDIR="${pkgdir}/staging" install
146
msg2 "Moving documentation in place and removing everything else ..."
147
mv "${pkgdir}/staging/usr/share/doc"/* "${pkgdir}/usr/share/doc"/
148
rm -R "${pkgdir}/staging"
149
150
msg2 "Installing git repository's information files ..."
151
install -Dvm644 -t "${pkgdir}/usr/share/doc/libosmocore" "README.md" "TODO-RELEASE" "${srcdir}/git.log"
152
}
153
154
eval "package_${pkgname}() { _package_main \"\$@\"; }"
155
eval "package_${pkgname}-doc() { _package_docs \"\$@\"; }"
156
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |
| 2026-10-12 00:18:51 | Low | 2 |
| 2026-10-11 00:26:05 | Low | 2 |
| 2026-10-10 00:11:52 | Low | 2 |
| 2026-10-09 00:05:33 | Low | 2 |
| 2026-10-08 00:28:03 | Low | 2 |
| 2026-10-07 00:21:34 | Low | 2 |
| 2026-10-06 00:13:36 | Low | 2 |
| 2026-10-05 00:08:03 | Low | 2 |
| 2026-10-04 00:18:08 | Low | 2 |
| 2026-10-03 00:23:04 | Low | 2 |
| 2026-10-02 00:00:32 | Low | 2 |
| 2026-10-01 00:02:06 | Low | 2 |