magma-server-git

maintainer artemklevtsov · 1 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The non-standard host hosts the project's own source code which is built locally; this is normal AUR packaging behavior and not inherently dangerous.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The non-standard host hosts the project's own source code which is built locally; this is normal AUR packaging behavior and not inherently dangerous.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:21 source=(${pkgname}::"git+http://git.magmafoundation.org/magmafoundation/Magma.git"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Artem Klevtsov <a.a.klevtsov@gmail.com>
2
3_pkgver=1.12.2
4pkgname=magma-server-git
5pkgver=1.12.2.r504.d04e549e
6pkgrel=1
7_mng_ver=1.0.2
8pkgdesc="Magma is the next generation of hybrid minecraft server softwares"
9arch=('any')
10url="https://magmafoundation.org/"
11license=('custom')
12depends=('java-runtime=8' 'tmux' 'sudo' 'bash' 'awk' 'sed')
13optdepends=("tar: needed in order to create world backups"
14 "netcat: required in order to suspend an idle server")
15makedepends=('git' 'gettext' 'java-environment-openjdk=8')
16conflicts=('magma-server')
17provides=('magma-server')
18backup=("etc/conf.d/magma-${_gamever%.*}")
19install="${pkgname}.install"
20# See https://launchermeta.mojang.com/mc/game/version_manifest.json for a list of all releases
21source=(${pkgname}::"git+http://git.magmafoundation.org/magmafoundation/Magma.git"
22 "minecraft-server-${_mng_ver}.tar.gz"::"https://github.com/Edenhofer/minecraft-server/archive/refs/tags/v${_mng_ver}.tar.gz")
23sha512sums=('SKIP'
24 '11d708d511b63e5541bcc1dbcaf29abbf7cb9583b1d313028770a39b26b41d48dcba023f7e1d6fe30f3c093d20e10a43363011edd432e5785a4580e5c5f852a6')
25
26_game="magma"
27_user="${_game//./-}"
28_server_root="/srv/magma"
29
30prepare() {
31 export _game
32 export _user
33 export _server_root
34 envsubst < "${startdir}/${pkgname}.install.tmpl" > "${startdir}/${pkgname}.install"
35
36 cd "${srcdir}/${pkgname}"
37 git submodule init
38 git submodule update
39}
40
41pkgver() {
42 cd "${srcdir}/${pkgname}"
43
44 printf "%s.r%s.%s" "${_pkgver}" "$(git rev-list --count HEAD)" "$(git rev-parse HEAD | cut -c1-8)"
45}
46
47build() {
48 # Detect JAVA home
49 export JAVA_HOME="/usr/lib/jvm/$(archlinux-java status | tail -n +2 | cut -d ' ' -f 3 | grep '8-')"
50
51 make -C "${srcdir}/minecraft-server-${_mng_ver}" clean
52
53 make -C "${srcdir}/minecraft-server-${_mng_ver}" \
54 GAME=${_game} \
55 INAME=${_game}d \
56 SERVER_ROOT=${_server_root} \
57 BACKUP_PATHS="world world_nether world_the_end" \
58 GAME_USER=${_user} \
59 SESSION_NAME="magma" \
60 MAIN_EXECUTABLE="magma-server.jar" \
61 SERVER_START_CMD="${JAVA_HOME}/bin/java -Xms512M -Xmx1024M -jar ./magma-server.jar nogui" \
62 all
63
64 cd "${srcdir}/${pkgname}"
65
66 export MAVEN_OPTS="-Xmx2G"
67
68 ./gradlew outputJar
69}
70
71package() {
72 make -C "${srcdir}/minecraft-server-${_mng_ver}" \
73 DESTDIR="${pkgdir}" \
74 GAME=${_game} \
75 INAME=${_game}d \
76 install
77
78 install -Dm644 "${srcdir}/${pkgname}/build/distributions/Magma-${_pkgver}-${pkgver##*.}-server.jar" "${pkgdir}${_server_root}/magma-server-${_pkgver}.jar"
79 # Link server jar file
80 ln -s "magma-server-${_pkgver}.jar" "${pkgdir}${_server_root}/magma-server.jar"
81
82 # Link the log files
83 mkdir -p "${pkgdir}/var/log/"
84 install -dm2755 "${pkgdir}/${_server_root}/logs"
85 ln -s "${_server_root}/logs" "${pkgdir}/var/log/${_game}"
86
87 # Give the group write permissions and set user or group ID on execution
88 chmod g+ws "${pkgdir}${_server_root}"
89}
90

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion