libvirt-vnc

LOW

maintainer orphaned 0 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is a tarball from libvirt.org, the project's official site, which is a standard and trusted host for the software; building from official project sources is normal for AUR packages and poses minimal risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from libvirt.org, the project's official site, which is a standard and trusted host for the software; building from official project sources is normal for AUR packages and poses minimal risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:29 "https://libvirt.org/sources/libvirt-${pkgver}.tar.xz"{,.asc}

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: s3rj1k <evasive dot gyron at gmail dot com>
    
      2# Do not forget to run `makepkg --printsrcinfo > .SRCINFO`
    
      3
    
      4pkgname=libvirt-vnc
    
      5pkgver=8.10.0
    
      6pkgrel=2
    
      7pkgdesc='Libvirt runtime libraries and headers exclusively for VNC support.'
    
      8arch=('x86_64')
    
      9url="https://gitlab.com/libvirt/libvirt"
    
      10license=(
    
'LGPL2.1'
    
      12)
    
      13depends=(
    
'gnutls'
    
'libxml2'
    
      16)
    
      17makedepends=(
    
'intltool'
    
'libxslt'
    
'meson'
    
'python'
    
'python-docutils'
    
'rpcsvc-proto'
    
      24)
    
      25conflicts=(
    
'libvirt'
    
      27)
    
      28source=(
    
"https://libvirt.org/sources/libvirt-${pkgver}.tar.xz"{,.asc}
    
"minimize.patch"
    
      31)
    
      32sha256sums=(
    
'bb07b7b00f08f826dd4f623f8b233e4e8b221b8859bb5937ff45355f0ae29952'
    
'SKIP'
    
'32359d73eb958a50e50478d7eca406c69fad0a48cc923ca3118474ebdb81463c'
    
      36)
    
      37validpgpkeys=(
    
'453B65310595562855471199CA68BE8010084C9C' # Jiří Denemark <jdenemar@redhat.com>
    
'DAF3A6FDB26B62912D0E8E3FBE86EBB415104FDF' # Daniel P. Berrange <dan@berrange.com>
    
      40)
    
      41
    
      42prepare() {
    
cd "${srcdir}/libvirt-${pkgver}"
    
patch -p1 < "${srcdir}/minimize.patch"
    
      45}
    
      46
    
      47build() {
    
cd "${srcdir}/libvirt-${pkgver}"
    
      49
    
arch-meson build \
    
  --buildtype=plain \
    
  --libexecdir=lib/libvirt \
    
  --auto-features disabled \
    
  -Dapparmor=disabled \
    
  -Dapparmor_profiles=disabled \
    
  -Dattr=disabled \
    
  -Daudit=disabled \
    
  -Dbash_completion=disabled \
    
  -Dblkid=disabled \
    
  -Dcapng=disabled \
    
  -Dcurl=disabled \
    
  -Ddocs=enabled \
    
  -Ddriver_bhyve=disabled \
    
  -Ddriver_ch=disabled \
    
  -Ddriver_esx=disabled \
    
  -Ddriver_hyperv=disabled \
    
  -Ddriver_interface=disabled \
    
  -Ddriver_libvirtd=disabled \
    
  -Ddriver_libxl=disabled \
    
  -Ddriver_lxc=disabled \
    
  -Ddriver_network=disabled \
    
  -Ddriver_openvz=disabled \
    
  -Ddriver_qemu=disabled \
    
  -Ddriver_remote=enabled \
    
  -Ddriver_secrets=disabled \
    
  -Ddriver_test=disabled \
    
  -Ddriver_vbox=disabled \
    
  -Ddriver_vmware=disabled \
    
  -Ddriver_vz=disabled \
    
  -Ddtrace=disabled \
    
  -Dfirewalld=disabled \
    
  -Dfirewalld_zone=disabled \
    
  -Dfuse=disabled \
    
  -Dglusterfs=disabled \
    
  -Dhost_validate=disabled \
    
  -Dlibiscsi=disabled \
    
  -Dlibnl=disabled \
    
  -Dlibpcap=disabled \
    
  -Dlibssh2=disabled \
    
  -Dlibssh=disabled \
    
  -Dlogin_shell=disabled \
    
  -Dnetcf=disabled \
    
  -Dnls=disabled \
    
  -Dnss=disabled \
    
  -Dnumactl=disabled \
    
  -Dnumad=disabled \
    
  -Dopenwsman=disabled \
    
  -Dpciaccess=disabled \
    
  -Dpm_utils=disabled \
    
  -Dpolkit=disabled \
    
  -Drunstatedir=/run \
    
  -Dsanlock=disabled \
    
  -Dsasl=disabled \
    
  -Dsecdriver_apparmor=disabled \
    
  -Dsecdriver_selinux=disabled \
    
  -Dselinux=disabled \
    
  -Dstorage_dir=disabled \
    
  -Dstorage_disk=disabled \
    
  -Dstorage_fs=disabled \
    
  -Dstorage_gluster=disabled \
    
  -Dstorage_iscsi=disabled \
    
  -Dstorage_iscsi_direct=disabled \
    
  -Dstorage_lvm=disabled \
    
  -Dstorage_mpath=disabled \
    
  -Dstorage_rbd=disabled \
    
  -Dstorage_scsi=disabled \
    
  -Dstorage_vstorage=disabled \
    
  -Dstorage_zfs=disabled \
    
  -Dsysctl_config=disabled \
    
  -Dtests=disabled \
    
  -Dudev=disabled \
    
  -Dwireshark_dissector=disabled \
    
  -Dyajl=disabled
    
      124
    
ninja -C build
    
      126}
    
      127
    
      128package() {
    
cd "${srcdir}/libvirt-${pkgver}"
    
DESTDIR="${pkgdir}" ninja -C build install
    
      131
    
rm -vrf \
    
  "${pkgdir}/etc" \
    
  "${pkgdir}/usr/share/doc" \
    
  "${pkgdir}/usr/share/libvirt/api/libvirt-admin-api.xml" \
    
  "${pkgdir}/usr/share/libvirt/cpu_map" \
    
  "${pkgdir}/usr/share/libvirt/schemas" \
    
  "${pkgdir}/usr/share/man" \
    
  "${pkgdir}/var"
    
      140}
    
      141

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2