libquicktime-git

MEDIUM

maintainer Chocobo1 0 votes scanned 2026-09-23 15:40:39.984319

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 source=("git+https://git.code.sf.net/p/libquicktime/git")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Chocobo1 <chocobo1 AT archlinux DOT net>
    
      2
    
      3pkgname=libquicktime-git
    
      4pkgver=r987.g2213b76
    
      5pkgrel=3
    
      6pkgdesc="Library for reading and writing quicktime files"
    
      7arch=('i686' 'x86_64')
    
      8url="https://libquicktime.sourceforge.net/"
    
      9license=('LGPL-2.1-or-later')
    
      10depends=('glibc' 'alsa-lib' 'faad2' 'gtk4' 'lame' 'libdv' 'libjpeg-turbo' 'libxaw'  # faac
    
      11         'libxv' 'schroedinger'
    
      12         'libavcodec.so' 'libswscale.so' 'libvorbisenc.so' 'libvorbisfile.so'
    
      13         'libvorbis.so' 'libx264.so')
    
      14makedepends=('git' 'doxygen' 'mesa-libgl')
    
      15provides=("libquicktime=$pkgver")
    
      16conflicts=('libquicktime')
    
      17source=("git+https://git.code.sf.net/p/libquicktime/git")
    
      18sha256sums=('SKIP')
    
      19
    
      20
    
      21pkgver() {
    
      22  cd "git"
    
      23
    
      24  _rev=$(git rev-list --count --all)
    
      25  _hash=$(git rev-parse --short HEAD)
    
      26  printf "r%s.g%s" "$_rev" "$_hash"
    
      27}
    
      28
    
      29build() {
    
      30  cd "git"
    
      31
    
      32  ./autogen.sh
    
      33  ./configure \
    
      34    --prefix="/usr" \
    
      35    --enable-gpl \
    
      36    --enable-year2038 \
    
      37    --with-ffmpeg \
    
      38    --with-libdv \
    
      39    --with-x \
    
      40    --with-x264 \
    
      41    --without-faac
    
      42  make
    
      43}
    
      44
    
      45package() {
    
      46  cd "git"
    
      47
    
      48  make DESTDIR="$pkgdir" install
    
      49}
    
      50

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-09-23 15:40
@@ -2,12 +2,12 @@
 
 pkgname=libquicktime-git
 pkgver=r987.g2213b76
-pkgrel=1
+pkgrel=3
 pkgdesc="Library for reading and writing quicktime files"
 arch=('i686' 'x86_64')
 url="https://libquicktime.sourceforge.net/"
 license=('LGPL-2.1-or-later')
-depends=('glibc' 'alsa-lib' 'faac' 'faad2' 'gtk4' 'lame' 'libjpeg-turbo' 'libxaw'
+depends=('glibc' 'alsa-lib' 'faad2' 'gtk4' 'lame' 'libdv' 'libjpeg-turbo' 'libxaw'  # faac
          'libxv' 'schroedinger'
          'libavcodec.so' 'libswscale.so' 'libvorbisenc.so' 'libvorbisfile.so'
          'libvorbis.so' 'libx264.so')
@@ -33,8 +33,12 @@
   ./configure \
     --prefix="/usr" \
     --enable-gpl \
+    --enable-year2038 \
     --with-ffmpeg \
-    --with-x264
+    --with-libdv \
+    --with-x \
+    --with-x264 \
+    --without-faac
   make
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-23 15:40:39	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1