megacmd-bin

MEDIUM
maintainer knedl1k 3 votes scanned 2026-09-20 17:33:19.607430
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:17 "https://mega.nz/linux/repo/Arch_Extra/x86_64//megacmd-$pkgver-1-x86_64.pkg.tar.zst"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: knedl1k <knedl1k at tuta dot io>
2# Contributor: Holly A. Law <lilithl@ladair.org>
3# Contributor: Oirio Joshi <joshirio@protonmail.com>
4
5pkgname=megacmd-bin
6pkgver=2.5.2
7pkgrel=1
8pkgdesc="MEGA Command Line Interactive and Scriptable Application"
9arch=('x86_64')
10url="http://mega.nz/cmd"
11license=('custom:LicenseRef-megacmd')
12depends=('glibc' 'gcc-libs' 'openssl' 'sqlite' 'zlib' 'libpsl' 'icu' 'pcre' 'bzip2' 'xz' 'fuse2')
13optdepends=('freeimage: For image preview/thumbnail support')
14provides=('megacmd' 'ffmpeg-mega')
15conflicts=('megacmd' 'ffmpeg-mega')
16source=('LICENSE'
17 "https://mega.nz/linux/repo/Arch_Extra/x86_64//megacmd-$pkgver-1-x86_64.pkg.tar.zst"
18 "https://mega.nz/linux/repo/Arch_Extra/x86_64//megacmd-$pkgver-1-x86_64.pkg.tar.zst.sig")
19sha256sums=('SKIP'
20 '4375fd48f5304e38249b71c3779a05812494748fc1f97cec28adceb993f30753'
21 'be2ac696468393c93736176c4a55fc343208e66ac6e2a36a80e3f1bf548d5919')
22validpgpkeys=('B01C811880480C854C73EC7E1A664B787094A482')
23
24package() {
25 for dir in usr etc opt; do
26 if [[ -d "$srcdir/$dir" ]]; then
27 cp -a "$srcdir/$dir" "$pkgdir/"
28 fi
29 done
30
31 install -Dm644 "$srcdir/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
32}
33

Scan history

Scanned at (UTC)SeverityRules
2026-09-20 17:33:19 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion