limesurvey

LOW

maintainer danieltetraquark 5 votes scanned 2026-10-23 00:02:19.781852

View on AUR

Why flagged

The source URL is from download.limesurvey.org, which is the official project's download domain; despite not being on a standard whitelist, it hosts the project's own source code, making this a legitimate and expected source for the package.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URL is from download.limesurvey.org, which is the official project's download domain; despite not being on a standard whitelist, it hosts the project's own source code, making this a legitimate and expected source for the package.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 https://download.limesurvey.org/latest-master/limesurvey${pkgver}.zip

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: danieltetraquark
    
      2# Contributor: mawcomw  <mawcomw@gmail.com>
    
      3
    
      4pkgname=limesurvey
    
      5_pkgver="7.7.0"
    
      6_pkgdate="261020"
    
      7_foldername=${pkgname}
    
      8pkgver=$_pkgver+$_pkgdate
    
      9pkgrel=1
    
      10pkgdesc="The most popular FOSS online survey tool on the web."
    
      11depends=('php')
    
      12license=('GPL2')
    
      13arch=('any')
    
      14url="https://www.limesurvey.org"
    
      15source=(
    
      16https://download.limesurvey.org/latest-master/limesurvey${pkgver}.zip
    
      17)
    
      18sha256sums=('925dd275e301b3a12fd18e14994bd21cbee34a08202bc618278c3c1cfc16988d')
    
      19
    
      20optdepends=('apache: a supported application server'
    
      21	    'nginx: a supported application server'
    
      22	    'mariadb: MariaDB database support'
    
      23	    'mysql: MySQL database support'
    
      24	    'postgresql: PostgreSQL database support'
    
      25            'php-imap: email bounce tracking system'
    
      26#            'php-iconv: for some encodings when handling excel files'
    
      27            'php-gd: for CAPTCHAs and graphs'
    
      28            'php-sodium: for data encryption')
    
      29#            'php-ldap: import survey participants using ldap')
    
      30
    
      31backup=('etc/webapps/limesurvey/config.php')
    
      32
    
      33package() {
    
      34    _instdir="$pkgdir"/usr/share/webapps
    
      35    mkdir -p "$_instdir" "$pkgdir"/etc/webapps/limesurvey
    
      36
    
      37
    
      38    #install license
    
      39    install -Dm644 "${srcdir}/${_foldername}/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      40
    
      41    cd "$_instdir"
    
      42    cp -ra "$srcdir"/${_foldername}/ ./limesurvey
    
      43
    
      44    ln -s /etc/webapps/limesurvey/config.php "$pkgdir"/usr/share/webapps/limesurvey/application/config/config.php
    
      45
    
      46    chown -R http:http "$_instdir"/limesurvey/application/config
    
      47    chown -R http:http "$_instdir"/limesurvey/upload
    
      48    chown -R http:http "$_instdir"/limesurvey/tmp
    
      49
    
      50    chown -R http:http "$pkgdir"/etc/webapps/limesurvey
    
      51
    
      52#    chown -R http:http "$_instdir"/limesurvey/
    
      53
    
      54# TODO: apache, nginx example config
    
      55
    
      56    echo "configure your webserver and phpbackend. Files are at /usr/share/webapps/limesurvey. In the browser, go to /index.php?r=installer."
    
      57}
    
      58

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-23 00:02
@@ -2,8 +2,8 @@
 # Contributor: mawcomw  <mawcomw@gmail.com>
 
 pkgname=limesurvey
-_pkgver="6.17.1"
-_pkgdate="260427"
+_pkgver="7.7.0"
+_pkgdate="261020"
 _foldername=${pkgname}
 pkgver=$_pkgver+$_pkgdate
 pkgrel=1
@@ -15,7 +15,7 @@
 source=(
 https://download.limesurvey.org/latest-master/limesurvey${pkgver}.zip
 )
-sha256sums=('83b0758e7f00023ff59a61ae7c481a0aadfda98fed32d6059467fa2e3fa238d4')
+sha256sums=('925dd275e301b3a12fd18e14994bd21cbee34a08202bc618278c3c1cfc16988d')
 
 optdepends=('apache: a supported application server'
 	    'nginx: a supported application server'

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-23 00:02:19	Low	2
2026-10-22 19:36:04	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1