lua54-taglib
LOW
maintainer jprjr
0 votes
base
lua-taglib
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a tarball from the project's own official domain, used to build the project's own code, which is a normal and legitimate practice in AUR packages despite the non-whitelisted host.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's own official domain, used to build the project's own code, which is a normal and legitimate practice in AUR packages despite the non-whitelisted host.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:16
source=("https://buffering.party/software/lua-taglib/lua-taglib-$pkgver.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: jprjr <john@jrjrtech.com>
2
3
pkgname=('lua-taglib' 'lua51-taglib' 'lua52-taglib' 'lua53-taglib' 'lua54-taglib')
4
pkgbase='lua-taglib'
5
pkgdesc="Lua bindings for taglib"
6
pkgver=1.2.2
7
pkgrel=2
8
arch=('x86_64' 'i686' 'aarch64')
9
url='https://buffering.party/software/lua-taglib/'
10
license=('MIT')
11
depends=('taglib' 'gcc-libs' 'glibc')
12
_lua_cur=5.5
13
_lua_next=5.6
14
makedepends=('cmake' "lua>=$_lua_cur" "lua<$_lua_next" 'lua51' 'lua52' 'lua53' 'lua54')
15
#options=(debug)
16
source=("https://buffering.party/software/lua-taglib/lua-taglib-$pkgver.tar.gz")
17
18
_build() {
19
LUA_V=$1
20
V=${LUA_V//./}
21
22
local cmake_options=(
23
-S "${pkgbase}-${pkgver}"
24
-W no-dev
25
-D CMAKE_BUILD_TYPE=None
26
-D CMAKE_INSTALL_PREFIX=/usr
27
)
28
29
cmake "${cmake_options[@]}" -B build-lua$V-${pkgver}-${pkgrel} -DLUA_VERSION=$LUA_V
30
cmake --build build-lua$V-${pkgver}-${pkgrel}
31
}
32
33
34
build() {
35
for v in 5.1 5.2 5.3 5.4 5.5 ; do
36
_build $v
37
done
38
}
39
40
_package() {
41
LUA_V=$1
42
V=${LUA_V//./}
43
44
DESTDIR="$pkgdir" cmake --install build-lua$V-${pkgver}-${pkgrel}
45
install -Dm644 "${pkgbase}-${pkgver}/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
46
}
47
48
package_lua-taglib() {
49
pkgdesc="Lua bindings for taglib"
50
depends+=("lua>=${_lua_cur}" "lua<${_lua_next}")
51
52
_package $_lua_cur
53
}
54
55
package_lua54-taglib() {
56
pkgdesc="Lua bindings for taglib - Lua 5.4"
57
depends+=('lua54')
58
59
_package 5.4
60
}
61
62
package_lua53-taglib() {
63
pkgdesc="Lua bindings for taglib - Lua 5.3"
64
depends+=('lua53')
65
66
_package 5.3
67
}
68
69
package_lua52-taglib() {
70
pkgdesc="Lua bindings for taglib - Lua 5.2"
71
depends+=('lua52')
72
73
_package 5.2
74
}
75
76
package_lua51-taglib() {
77
pkgdesc="Lua bindings for taglib - Lua 5.1"
78
depends+=('lua51')
79
80
_package 5.1
81
}
82
83
sha512sums=(
84
'154d6106bc7f7b1b536fe2ebc488b011ecbe4de3da5682941a854a49efee99cf825fb27c5493774bb6ff93839075272b03a39c8fc30021120444d67abe5f0e94'
85
)
86
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |