lyn-git

MEDIUM
maintainer swiftscythe 0 votes scanned 2026-09-10 11:20:36.259518
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:13 source=("${pkgname%-git}::git+https://src.timharek.no/tim/lyn")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Adrià Arrufat <swiftscythe@gmail.com>
2pkgname=lyn-git
3pkgver=1.5.1.r0.g624a211
4pkgrel=1
5pkgdesc="Weather forecasting CLI powered by the Norwegian Meteorological Institute"
6arch=('x86_64' 'aarch64')
7url="https://sr.ht/~timharek/lyn/"
8license=('GPL-3.0-only')
9depends=('glibc')
10makedepends=('git' 'go')
11provides=("${pkgname%-git}")
12conflicts=("${pkgname%-git}")
13source=("${pkgname%-git}::git+https://src.timharek.no/tim/lyn")
14sha256sums=('SKIP')
15
16pkgver() {
17 cd "${pkgname%-git}"
18 git describe --long --tags | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
19}
20
21build() {
22 cd "${pkgname%-git}"
23 export CGO_CPPFLAGS="${CPPFLAGS}"
24 export CGO_CFLAGS="${CFLAGS}"
25 export CGO_CXXFLAGS="${CXXFLAGS}"
26 export CGO_LDFLAGS="${LDFLAGS}"
27 export GOFLAGS="-buildmode=pie -trimpath -mod=readonly -modcacherw"
28 go build -ldflags "-linkmode=external -X main.Version=$(git describe --tags)" -o lyn ./cmd/lyn
29
30 ./lyn completion bash > lyn.bash
31 ./lyn completion zsh > lyn.zsh
32 ./lyn completion fish > lyn.fish
33}
34
35package() {
36 cd "${pkgname%-git}"
37 install -Dm755 lyn "$pkgdir/usr/bin/lyn"
38 install -Dm644 lyn.bash "$pkgdir/usr/share/bash-completion/completions/lyn"
39 install -Dm644 lyn.zsh "$pkgdir/usr/share/zsh/site-functions/_lyn"
40 install -Dm644 lyn.fish "$pkgdir/usr/share/fish/vendor_completions.d/lyn.fish"
41 install -Dm644 LICENSE.md "$pkgdir/usr/share/licenses/$pkgname/LICENSE.md"
42}
43

Changes since previous scan

--- PKGBUILD @ 2026-09-09 23:20
+++ PKGBUILD @ 2026-09-10 11:20
@@ -1,6 +1,6 @@
# Maintainer: Adrià Arrufat <swiftscythe@gmail.com>
pkgname=lyn-git
-pkgver=1.4.1.r14.gc1fc103
+pkgver=1.5.1.r0.g624a211
pkgrel=1
pkgdesc="Weather forecasting CLI powered by the Norwegian Meteorological Institute"
arch=('x86_64' 'aarch64')
@@ -10,7 +10,7 @@
makedepends=('git' 'go')
provides=("${pkgname%-git}")
conflicts=("${pkgname%-git}")
-source=("${pkgname%-git}::git+https://git.sr.ht/~timharek/lyn")
+source=("${pkgname%-git}::git+https://src.timharek.no/tim/lyn")
sha256sums=('SKIP')
pkgver() {

Scan history

Scanned at (UTC)SeverityRules
2026-09-10 11:20:36 Medium 1
2026-09-09 23:20:11 Clean 0
2026-08-18 00:03:42 Clean 2
2026-08-17 21:37:43 Low 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion