meli
MEDIUM
maintainer alerque
7 votes
scanned 2026-08-31 07:44:47.603206
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:16
source=("$pkgname-$pkgver.tag.gz::https://git.meli-email.org/meli/meli/archive/v$pkgver.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Caleb Maclennan <caleb@alerque.com>
2
# Contributor: Stefan Tatschner <stefan@rumpelsepp.org>
3
4
pkgname=meli
5
pkgver=0.8.13
6
pkgrel=1
7
pkgdesc='A MUA for the terminal aiming for configurability and extensibility with sane defaults'
8
arch=(x86_64)
9
url=https://meli.delivery/
10
license=(GPL-3.0-only)
11
depends=(dbus-glib
12
gcc-libs
13
glibc)
14
makedepends=(cargo
15
mandoc)
16
source=("$pkgname-$pkgver.tag.gz::https://git.meli-email.org/meli/meli/archive/v$pkgver.tar.gz")
17
sha256sums=('b1414defb7973a96ed0510b5cb888aa8671fe4f3f832c5baa0c79dcd61ba2edf')
18
19
prepare() {
20
cd "$pkgname"
21
cargo fetch --locked --target "$(rustc --print host-tuple)"
22
}
23
24
build() {
25
cd "$pkgname"
26
export RUSTUP_TOOLCHAIN=stable
27
export CARGO_TARGET_DIR=target
28
CFLAGS+=' -ffat-lto-objects'
29
cargo build --frozen --release --features dbus-notifications,jmap
30
}
31
32
package() {
33
cd "$pkgname"
34
install -Dm0755 -t "$pkgdir/usr/bin/" target/release/meli
35
install -Dm0644 -t "$pkgdir/usr/share/man/man1/" meli/docs/meli.1
36
install -Dm0644 -t "$pkgdir/usr/share/man/man5/" meli/docs/meli.conf.5
37
install -Dm0644 -t "$pkgdir/usr/share/man/man5/" meli/docs/meli-themes.5
38
}
39
Changes since previous scan
--- PKGBUILD @ 2026-06-19 19:07+++ PKGBUILD @ 2026-08-31 07:44@@ -13,7 +13,7 @@ glibc) makedepends=(cargo mandoc)-source=("$pkgname-$pkgver.tag.gz::https://git.meli.delivery/meli/meli/archive/v$pkgver.tar.gz")+source=("$pkgname-$pkgver.tag.gz::https://git.meli-email.org/meli/meli/archive/v$pkgver.tar.gz") sha256sums=('b1414defb7973a96ed0510b5cb888aa8671fe4f3f832c5baa0c79dcd61ba2edf') prepare() {Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-31 07:44:47 | Medium | 1 |
| 2026-06-19 19:07:35 | Clean | 2 |
| 2026-06-18 16:11:54 | Medium | 1 |