linphone-desktop-call-edition

LOW
maintainer nathanchere 2 votes scanned 2026-10-17 00:21:55.226236
View on AUR
Why flagged

The source uses a GitLab URL from the official project's repository, which is a legitimate and expected source for building the package; the non-standard host flag is a false positive as GitLab is a trusted development platform.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source uses a GitLab URL from the official project's repository, which is a legitimate and expected source for building the package; the non-standard host flag is a false positive as GitLab is a trusted development platform.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:13 "git+https://gitlab.linphone.org/BC/public/linphone-desktop.git#tag=${pkgver}-CallEdition"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Nathan Chere <aur@nathanchere.com.au>
2
3pkgname=linphone-desktop-call-edition
4pkgver=6.0.1
5pkgrel=2
6pkgdesc='A lighter version of Linphone Desktop based dedicated exclusively to simple voice/video calls'
7arch=(x86_64)
8url='http://linphone.org'
9license=('GPL-3.0-only')
10depends=('qt6-base' 'qt6-declarative' 'qt6-svg' 'qt6-multimedia' 'qt6-networkauth' 'qt6-speech' 'qt6-tools' 'libpulse' 'libxcrypt-compat' 'v4l-utils' 'glew')
11makedepends=('coreutils' 'git' 'gendesk' 'cmake' 'meson' 'ninja' 'yasm' 'nasm' 'doxygen' 'perl' 'python-pystache' 'python-six')
12source=(
13 "git+https://gitlab.linphone.org/BC/public/linphone-desktop.git#tag=${pkgver}-CallEdition"
14 "linphone.png::https://gitlab.linphone.org/BC/public/linphone-desktop/-/raw/8dfd384e3df08b200c8eb382b740da6839961bf0/linphone-app/assets/icons/hicolor/128x128/apps/icon.png"
15 "linphone_package-cmake.patch"
16)
17sha256sums=('d111c476f24624c7c91f34269bc92ecf13b10881e846f3c849524e2ff6ef409d'
18 '5e73b34c0bb09c77c40ffe1673a67de58aafcec6ef75d4ba2dea6151bca33832'
19 'ebb4b36eeab5387a71b45e7de29d478f8197771015fb3a0afb5c0b0bf1c62e09')
20provides=(linphone=${pkgver})
21
22prepare() {
23 cd "$srcdir/linphone-desktop"
24 git submodule update --init --recursive
25 patch --batch --fuzz=0 -p1 < "$srcdir/linphone_package-cmake.patch"
26}
27
28build() {
29 cd "$srcdir/linphone-desktop"
30
31 mkdir -p build && cd build
32
33 cmake .. -DCMAKE_BUILD_PARALLEL_LEVEL=$(nproc) \
34 -DCMAKE_BUILD_TYPE=RelWithDebInfo \
35 -DCMAKE_CXX_FLAGS="${CXXFLAGS} -Wno-error=deprecated-declarations"
36 cmake --build . --target install --parallel $(nproc) --config RelWithDebInfo
37
38 cd "$srcdir"
39 gendesk -f -n \
40 --pkgname="$pkgname" \
41 --pkgdesc="$pkgdesc" \
42 --name="Linphone Desktop 6 Call Edition" \
43 --genericname="VoIP Client" \
44 --categories=Network \
45 --icon="${pkgname}.png" \
46 --exec="/usr/bin/${pkgname}" \
47 --terminal=false \
48 --startupnotify=true \
49 --comment "Linphone"
50}
51
52package() {
53 mkdir -p "$pkgdir/opt/${pkgname}/"
54 cp -r "$srcdir/linphone-desktop/build/OUTPUT/." "$pkgdir/opt/${pkgname}/"
55
56 mkdir -p "$pkgdir/usr/share/applications/"
57 install -Dm644 "$srcdir/${pkgname}.desktop" "$pkgdir/usr/share/applications/${pkgname}.desktop"
58
59 mkdir -p "$pkgdir/usr/share/pixmaps/"
60 install -Dm644 "$srcdir/linphone.png" "$pkgdir/usr/share/pixmaps/${pkgname}.png"
61
62 cat <<'EOF' > "$pkgdir/opt/${pkgname}/${pkgname}-launcher"
63#!/bin/bash
64LD_LIBRARY_PATH="/opt/${pkgname}/lib:$LD_LIBRARY_PATH" /opt/${pkgname}/bin/linphone "$@"
65EOF
66 chmod +x "$pkgdir/opt/${pkgname}/${pkgname}-launcher"
67
68 mkdir -p "$pkgdir/usr/bin/"
69 ln -s "/opt/${pkgname}/${pkgname}-launcher" "$pkgdir/usr/bin/${pkgname}"
70}
71

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-17 00:21
@@ -2,27 +2,27 @@
pkgname=linphone-desktop-call-edition
pkgver=6.0.1
-pkgrel=1
+pkgrel=2
pkgdesc='A lighter version of Linphone Desktop based dedicated exclusively to simple voice/video calls'
arch=(x86_64)
url='http://linphone.org'
license=('GPL-3.0-only')
depends=('qt6-base' 'qt6-declarative' 'qt6-svg' 'qt6-multimedia' 'qt6-networkauth' 'qt6-speech' 'qt6-tools' 'libpulse' 'libxcrypt-compat' 'v4l-utils' 'glew')
-makedepends=('coreutils' 'git' 'gendesk' 'cmake' 'yasm' 'nasm' 'doxygen' 'perl' 'python-pystache' 'python-six')
+makedepends=('coreutils' 'git' 'gendesk' 'cmake' 'meson' 'ninja' 'yasm' 'nasm' 'doxygen' 'perl' 'python-pystache' 'python-six')
source=(
"git+https://gitlab.linphone.org/BC/public/linphone-desktop.git#tag=${pkgver}-CallEdition"
"linphone.png::https://gitlab.linphone.org/BC/public/linphone-desktop/-/raw/8dfd384e3df08b200c8eb382b740da6839961bf0/linphone-app/assets/icons/hicolor/128x128/apps/icon.png"
"linphone_package-cmake.patch"
)
sha256sums=('d111c476f24624c7c91f34269bc92ecf13b10881e846f3c849524e2ff6ef409d'
- '1ab2170029e8c090a498e37cdad12c087c5de623ddd665898309f00d114d7706'
- 'aaf9fe6ab49c62368d358ecb09f3e97363fd8e60f35fb4cbdf300acb6a53cb10')
+ '5e73b34c0bb09c77c40ffe1673a67de58aafcec6ef75d4ba2dea6151bca33832'
+ 'ebb4b36eeab5387a71b45e7de29d478f8197771015fb3a0afb5c0b0bf1c62e09')
provides=(linphone=${pkgver})
prepare() {
cd "$srcdir/linphone-desktop"
git submodule update --init --recursive
- patch -p1 < "$srcdir/linphone_package-cmake.patch"
+ patch --batch --fuzz=0 -p1 < "$srcdir/linphone_package-cmake.patch"
}
build() {

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 01:18:27 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion