meli

MEDIUM
maintainer alerque 7 votes scanned 2026-08-31 07:44:47.603206
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:16 source=("$pkgname-$pkgver.tag.gz::https://git.meli-email.org/meli/meli/archive/v$pkgver.tar.gz")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Caleb Maclennan <caleb@alerque.com>
2# Contributor: Stefan Tatschner <stefan@rumpelsepp.org>
3
4pkgname=meli
5pkgver=0.8.13
6pkgrel=1
7pkgdesc='A MUA for the terminal aiming for configurability and extensibility with sane defaults'
8arch=(x86_64)
9url=https://meli.delivery/
10license=(GPL-3.0-only)
11depends=(dbus-glib
12 gcc-libs
13 glibc)
14makedepends=(cargo
15 mandoc)
16source=("$pkgname-$pkgver.tag.gz::https://git.meli-email.org/meli/meli/archive/v$pkgver.tar.gz")
17sha256sums=('b1414defb7973a96ed0510b5cb888aa8671fe4f3f832c5baa0c79dcd61ba2edf')
18
19prepare() {
20 cd "$pkgname"
21 cargo fetch --locked --target "$(rustc --print host-tuple)"
22}
23
24build() {
25 cd "$pkgname"
26 export RUSTUP_TOOLCHAIN=stable
27 export CARGO_TARGET_DIR=target
28 CFLAGS+=' -ffat-lto-objects'
29 cargo build --frozen --release --features dbus-notifications,jmap
30}
31
32package() {
33 cd "$pkgname"
34 install -Dm0755 -t "$pkgdir/usr/bin/" target/release/meli
35 install -Dm0644 -t "$pkgdir/usr/share/man/man1/" meli/docs/meli.1
36 install -Dm0644 -t "$pkgdir/usr/share/man/man5/" meli/docs/meli.conf.5
37 install -Dm0644 -t "$pkgdir/usr/share/man/man5/" meli/docs/meli-themes.5
38}
39

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-08-31 07:44
@@ -13,7 +13,7 @@
glibc)
makedepends=(cargo
mandoc)
-source=("$pkgname-$pkgver.tag.gz::https://git.meli.delivery/meli/meli/archive/v$pkgver.tar.gz")
+source=("$pkgname-$pkgver.tag.gz::https://git.meli-email.org/meli/meli/archive/v$pkgver.tar.gz")
sha256sums=('b1414defb7973a96ed0510b5cb888aa8671fe4f3f832c5baa0c79dcd61ba2edf')
prepare() {

Scan history

Scanned at (UTC)SeverityRules
2026-08-31 07:44:47 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion