libxfce4util-devel

LOW

maintainer twa022 8 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The source is a legitimate tarball from the official Xfce archive host, which is plausibly the project's own infrastructure; building from official project sources is normal for AUR packages, even if the host is not on a whitelist.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a legitimate tarball from the official Xfce archive host, which is plausibly the project's own infrastructure; building from official project sources is normal for AUR packages, even if the host is not on a whitelist.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source=("https://archive.xfce.org/src/xfce/${_pkgname}/${pkgver%.*}/${_pkgname}-${pkgver}.tar.xz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: twa022 <twa022 at gmail dot com>
    
      2
    
      3_pkgname=libxfce4util
    
      4pkgname=${_pkgname}-devel
    
      5pkgver=4.21.0
    
      6pkgrel=1
    
      7pkgdesc="Basic utility non-GUI functions for Xfce (development release)"
    
      8arch=('i686' 'x86_64' 'armv7h' 'aarch64')
    
      9url="https://docs.xfce.org/xfce/libxfce4util/start"
    
      10license=('GPL-2.0-or-later')
    
      11groups=('xfce4-devel')
    
      12depends=('glib2')
    
      13makedepends=('gtk-doc' 'gobject-introspection' 'vala')
    
      14provides=("${_pkgname}=${pkgver}")
    
      15conflicts=("${_pkgname}")
    
      16source=("https://archive.xfce.org/src/xfce/${_pkgname}/${pkgver%.*}/${_pkgname}-${pkgver}.tar.xz")
    
      17sha256sums=('205677cb96b778e5079eeac80f3a636d2a909b08fcf2aa05bfe4513c69c27f29')
    
      18
    
      19build() {
    
      20  local meson_options=(
    
      21    -D gtk-doc=true
    
      22    -D vala=enabled
    
      23  )
    
      24
    
      25  arch-meson "${_pkgname}-${pkgver}" build "${meson_options[@]}"
    
      26  meson compile -C build
    
      27}
    
      28
    
      29
    
      30package() {
    
      31  meson install -C build --destdir "$pkgdir"
    
      32}
    
      33

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-17 00:21
@@ -2,37 +2,32 @@
 
 _pkgname=libxfce4util
 pkgname=${_pkgname}-devel
-pkgver=4.19.5
+pkgver=4.21.0
 pkgrel=1
 pkgdesc="Basic utility non-GUI functions for Xfce (development release)"
 arch=('i686' 'x86_64' 'armv7h' 'aarch64')
 url="https://docs.xfce.org/xfce/libxfce4util/start"
-license=('GPL2')
+license=('GPL-2.0-or-later')
 groups=('xfce4-devel')
 depends=('glib2')
 makedepends=('gtk-doc' 'gobject-introspection' 'vala')
 provides=("${_pkgname}=${pkgver}")
 conflicts=("${_pkgname}")
-source=(https://archive.xfce.org/src/xfce/$_pkgname/${pkgver%.*}/$_pkgname-$pkgver.tar.bz2)
-sha256sums=('3465e86749959f2a725bb3a3a4d97217f51d6e15e501650816883dee36ee8546')
+source=("https://archive.xfce.org/src/xfce/${_pkgname}/${pkgver%.*}/${_pkgname}-${pkgver}.tar.xz")
+sha256sums=('205677cb96b778e5079eeac80f3a636d2a909b08fcf2aa05bfe4513c69c27f29')
 
 build() {
-  cd "${_pkgname}-${pkgver}"
+  local meson_options=(
+    -D gtk-doc=true
+    -D vala=enabled
+  )
 
-  ./configure \
-    --prefix=/usr \
-    --sysconfdir=/etc \
-    --sbindir=/usr/bin \
-    --libexecdir=/usr/lib \
-    --localstatedir=/var \
-    --disable-static \
-    --enable-gtk-doc \
-    --disable-debug
-  make
+  arch-meson "${_pkgname}-${pkgver}" build "${meson_options[@]}"
+  meson compile -C build
 }
 
+
 package() {
-  cd "${_pkgname}-${pkgver}"
-  make DESTDIR="${pkgdir}" install
+  meson install -C build --destdir "$pkgdir"
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 02:12:41	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1