libvirt-glib-vnc
LOW
maintainer orphaned
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a tarball from the official project's domain (libvirt.org), which is plausibly the project's own release infrastructure; building from official sources is normal AUR packaging, even if the host is not whitelisted.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the official project's domain (libvirt.org), which is plausibly the project's own release infrastructure; building from official sources is normal AUR packaging, even if the host is not whitelisted.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:28
"https://libvirt.org/sources/glib/libvirt-glib-${pkgver}.tar.xz"{,'.asc'}
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: s3rj1k <evasive dot gyron at gmail dot com>
2
# Do not forget to run `makepkg --printsrcinfo > .SRCINFO`
3
4
pkgname=libvirt-glib-vnc
5
pkgver=4.0.0
6
pkgrel=3
7
pkgdesc='Libvirt-Glib runtime libraries and headers exclusively for VNC support.'
8
arch=('x86_64')
9
url="https://gitlab.com/libvirt/libvirt-glib"
10
license=(
11
'LGPL2.1'
12
)
13
depends=(
14
'libcap-ng'
15
'libvirt-vnc'
16
)
17
makedepends=(
18
'gobject-introspection'
19
'intltool'
20
'meson'
21
'python'
22
'vala'
23
)
24
conflicts=(
25
'libvirt-glib'
26
)
27
source=(
28
"https://libvirt.org/sources/glib/libvirt-glib-${pkgver}.tar.xz"{,'.asc'}
29
"libvirt-glib-meson.build.patch"
30
)
31
sha256sums=(
32
'8423f7069daa476307321d1c11e2ecc285340cd32ca9fc05207762843edeacbd'
33
'SKIP'
34
'274acd43b641abfc5b378ad866ac0dad78abd942ac347e2049eefa3ce2e5362c'
35
)
36
validpgpkeys=(
37
'453B65310595562855471199CA68BE8010084C9C' # Jiří Denemark <jdenemar@redhat.com>
38
'DAF3A6FDB26B62912D0E8E3FBE86EBB415104FDF' # Daniel P. Berrange <dan@berrange.com>
39
)
40
41
prepare() {
42
cd "${srcdir}/libvirt-glib-${pkgver}"
43
patch meson.build < "${srcdir}/libvirt-glib-meson.build.patch"
44
}
45
46
build() {
47
cd "${srcdir}/libvirt-glib-${pkgver}"
48
arch-meson build \
49
--prefix=/usr \
50
--buildtype=plain \
51
--auto-features disabled \
52
-Ddocs=disabled \
53
-Dintrospection=disabled \
54
-Dtests=disabled \
55
-Dvapi=disabled
56
57
ninja -C build
58
}
59
60
package() {
61
cd "${srcdir}/libvirt-glib-${pkgver}"
62
DESTDIR="${pkgdir}" ninja -C build install
63
}
64
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |