linphone-desktop-call-edition
The source uses a GitLab URL from the official project's repository, which is a legitimate and expected source for building the package; the non-standard host flag is a false positive as GitLab is a trusted development platform.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source uses a GitLab URL from the official project's repository, which is a legitimate and expected source for building the package; the non-standard host flag is a false positive as GitLab is a trusted development platform.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:13
"git+https://gitlab.linphone.org/BC/public/linphone-desktop.git#tag=${pkgver}-CallEdition"
PKGBUILD
1 offending line(s) highlighted# Maintainer: Nathan Chere <aur@nathanchere.com.au>
pkgname=linphone-desktop-call-edition
pkgver=6.0.1
pkgrel=2
pkgdesc='A lighter version of Linphone Desktop based dedicated exclusively to simple voice/video calls'
arch=(x86_64)
url='http://linphone.org'
license=('GPL-3.0-only')
depends=('qt6-base' 'qt6-declarative' 'qt6-svg' 'qt6-multimedia' 'qt6-networkauth' 'qt6-speech' 'qt6-tools' 'libpulse' 'libxcrypt-compat' 'v4l-utils' 'glew')
makedepends=('coreutils' 'git' 'gendesk' 'cmake' 'meson' 'ninja' 'yasm' 'nasm' 'doxygen' 'perl' 'python-pystache' 'python-six')
source=(
"git+https://gitlab.linphone.org/BC/public/linphone-desktop.git#tag=${pkgver}-CallEdition"
"linphone.png::https://gitlab.linphone.org/BC/public/linphone-desktop/-/raw/8dfd384e3df08b200c8eb382b740da6839961bf0/linphone-app/assets/icons/hicolor/128x128/apps/icon.png"
"linphone_package-cmake.patch"
)
sha256sums=('d111c476f24624c7c91f34269bc92ecf13b10881e846f3c849524e2ff6ef409d'
'5e73b34c0bb09c77c40ffe1673a67de58aafcec6ef75d4ba2dea6151bca33832'
'ebb4b36eeab5387a71b45e7de29d478f8197771015fb3a0afb5c0b0bf1c62e09')
provides=(linphone=${pkgver})
prepare() {
cd "$srcdir/linphone-desktop"
git submodule update --init --recursive
patch --batch --fuzz=0 -p1 < "$srcdir/linphone_package-cmake.patch"
}
build() {
cd "$srcdir/linphone-desktop"
mkdir -p build && cd build
cmake .. -DCMAKE_BUILD_PARALLEL_LEVEL=$(nproc) \
-DCMAKE_BUILD_TYPE=RelWithDebInfo \
-DCMAKE_CXX_FLAGS="${CXXFLAGS} -Wno-error=deprecated-declarations"
cmake --build . --target install --parallel $(nproc) --config RelWithDebInfo
cd "$srcdir"
gendesk -f -n \
--pkgname="$pkgname" \
--pkgdesc="$pkgdesc" \
--name="Linphone Desktop 6 Call Edition" \
--genericname="VoIP Client" \
--categories=Network \
--icon="${pkgname}.png" \
--exec="/usr/bin/${pkgname}" \
--terminal=false \
--startupnotify=true \
--comment "Linphone"
}
package() {
mkdir -p "$pkgdir/opt/${pkgname}/"
cp -r "$srcdir/linphone-desktop/build/OUTPUT/." "$pkgdir/opt/${pkgname}/"
mkdir -p "$pkgdir/usr/share/applications/"
install -Dm644 "$srcdir/${pkgname}.desktop" "$pkgdir/usr/share/applications/${pkgname}.desktop"
mkdir -p "$pkgdir/usr/share/pixmaps/"
install -Dm644 "$srcdir/linphone.png" "$pkgdir/usr/share/pixmaps/${pkgname}.png"
cat <<'EOF' > "$pkgdir/opt/${pkgname}/${pkgname}-launcher"
#!/bin/bash
LD_LIBRARY_PATH="/opt/${pkgname}/lib:$LD_LIBRARY_PATH" /opt/${pkgname}/bin/linphone "$@"
EOF
chmod +x "$pkgdir/opt/${pkgname}/${pkgname}-launcher"
mkdir -p "$pkgdir/usr/bin/"
ln -s "/opt/${pkgname}/${pkgname}-launcher" "$pkgdir/usr/bin/${pkgname}"
}
Changes since previous scan
--- PKGBUILD @ 2026-06-19 19:07+++ PKGBUILD @ 2026-10-17 00:21@@ -2,27 +2,27 @@ pkgname=linphone-desktop-call-edition pkgver=6.0.1-pkgrel=1+pkgrel=2 pkgdesc='A lighter version of Linphone Desktop based dedicated exclusively to simple voice/video calls' arch=(x86_64) url='http://linphone.org' license=('GPL-3.0-only') depends=('qt6-base' 'qt6-declarative' 'qt6-svg' 'qt6-multimedia' 'qt6-networkauth' 'qt6-speech' 'qt6-tools' 'libpulse' 'libxcrypt-compat' 'v4l-utils' 'glew')-makedepends=('coreutils' 'git' 'gendesk' 'cmake' 'yasm' 'nasm' 'doxygen' 'perl' 'python-pystache' 'python-six')+makedepends=('coreutils' 'git' 'gendesk' 'cmake' 'meson' 'ninja' 'yasm' 'nasm' 'doxygen' 'perl' 'python-pystache' 'python-six') source=( "git+https://gitlab.linphone.org/BC/public/linphone-desktop.git#tag=${pkgver}-CallEdition" "linphone.png::https://gitlab.linphone.org/BC/public/linphone-desktop/-/raw/8dfd384e3df08b200c8eb382b740da6839961bf0/linphone-app/assets/icons/hicolor/128x128/apps/icon.png" "linphone_package-cmake.patch" ) sha256sums=('d111c476f24624c7c91f34269bc92ecf13b10881e846f3c849524e2ff6ef409d'- '1ab2170029e8c090a498e37cdad12c087c5de623ddd665898309f00d114d7706'- 'aaf9fe6ab49c62368d358ecb09f3e97363fd8e60f35fb4cbdf300acb6a53cb10')+ '5e73b34c0bb09c77c40ffe1673a67de58aafcec6ef75d4ba2dea6151bca33832'+ 'ebb4b36eeab5387a71b45e7de29d478f8197771015fb3a0afb5c0b0bf1c62e09') provides=(linphone=${pkgver}) prepare() { cd "$srcdir/linphone-desktop" git submodule update --init --recursive- patch -p1 < "$srcdir/linphone_package-cmake.patch"+ patch --batch --fuzz=0 -p1 < "$srcdir/linphone_package-cmake.patch" } build() {Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 01:18:27 | Medium | 1 |
| 2026-06-19 19:07:35 | Clean | 2 |
| 2026-06-18 16:11:54 | Medium | 1 |