mess822

maintainer uffe · 1 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The source is downloaded from cr.yp.to, the official website of the software's author (Daniel J. Bernstein), which is a legitimate but non-whitelisted host; the package builds from source and installs libraries, binaries, and man pages as expected, with no evidence of malicious behavior.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is downloaded from cr.yp.to, the official website of the software's author (Daniel J. Bernstein), which is a legitimate but non-whitelisted host; the package builds from source and installs libraries, binaries, and man pages as expected, with no evidence of malicious behavior.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:24 source=(http://cr.yp.to/software/$pkgname-$pkgver.tar.gz

PKGBUILD

1 offending line(s) highlighted
1# PKGBUILD for mess822
2# Contributor: Uffe Jakobsen <uffe@uffe.org>
3# Maintainer: Uffe Jakobsen <uffe@uffe.org>
4pkgname=mess822
5pkgver=0.58
6pkgrel=2
7epoch=
8pkgdesc="mess822 is a library for parsing Internet mail messages works wellwith qmail"
9arch=('i686' 'x86_64')
10url="http://cr.yp.to/mess822.html"
11license=('unknown')
12groups=()
13depends=()
14makedepends=()
15checkdepends=()
16optdepends=()
17provides=()
18conflicts=()
19replaces=()
20backup=()
21options=()
22install=
23changelog=
24source=(http://cr.yp.to/software/$pkgname-$pkgver.tar.gz
25 mess822-conf-cc.patch)
26noextract=()
27md5sums=('8ce4c29c994a70dcaa30140601213dbe'
28 '240fb4d711016ee9a4637fe6619d14dc')
29
30prepare() {
31 cd "$srcdir/$pkgname-$pkgver"
32 patch -p1 -i "$srcdir/mess822-conf-cc.patch"
33}
34
35build() {
36 cd "$srcdir/$pkgname-$pkgver"
37 make default
38}
39
40check() {
41 cd "$srcdir/$pkgname-$pkgver"
42 #make -k check
43}
44
45package() {
46 cd "$srcdir/$pkgname-$pkgver"
47 #make DESTDIR="$pkgdir/" install
48
49 mkdir "$pkgdir/usr"
50 chmod 755 "$pkgdir/usr"
51
52 mkdir "$pkgdir/usr/lib"
53 chmod 755 "$pkgdir/usr/lib"
54 for f in mess822.a
55 do
56 cp "$f" "$pkgdir/usr/lib/$f"
57 chmod 644 "$pkgdir/usr/lib/$f"
58 done
59
60 mkdir "$pkgdir/usr/include"
61 chmod 755 "$pkgdir/usr/include"
62 for f in mess822.h
63 do
64 cp "$f" "$pkgdir/usr/include/$f"
65 chmod 644 "$pkgdir/usr/include/$f"
66 done
67
68 mkdir "$pkgdir/usr/bin"
69 chmod 755 "$pkgdir/usr/bin"
70 for f in ofmipd ofmipname iftocc new-inject 822field 822header 822date 822received 822print
71 do
72 cp "$f" "$pkgdir/usr/bin/$f"
73 chmod 644 "$pkgdir/usr/bin/$f"
74 done
75
76 mkdir "$pkgdir/usr/man"
77 chmod 755 "$pkgdir/usr/man"
78
79 mkdir "$pkgdir/usr/man/man1"
80 chmod 755 "$pkgdir/usr/man/man1"
81 for f in iftocc.1 new-inject.1 822field.1 822header.1 822date.1 822received.1 822print.1
82 do
83 cp "$f" "$pkgdir/usr/man/man1/$f"
84 chmod 644 "$pkgdir/usr/man/man1/$f"
85 done
86
87 mkdir "$pkgdir/usr/man/man5"
88 chmod 755 "$pkgdir/usr/man/man5"
89 for f in rewriting.5
90 do
91 cp "$f" "$pkgdir/usr/man/man5/$f"
92 chmod 644 "$pkgdir/usr/man/man5/$f"
93 done
94
95 mkdir "$pkgdir/usr/man/man8"
96 chmod 755 "$pkgdir/usr/man/man8"
97 for f in ofmipd.8 ofmipname.8
98 do
99 cp "$f" "$pkgdir/usr/man/man8/$f"
100 chmod 644 "$pkgdir/usr/man/man8/$f"
101 done
102
103 mkdir "$pkgdir/usr/man/man3"
104 chmod 755 "$pkgdir/usr/man/man3"
105 for f in mess822.3 mess822_addr.3 mess822_date.3 mess822_fold.3 mess822_quote.3 mess822_token.3 mess822_when.3
106 do
107 cp "$f" "$pkgdir/usr/man/man3/$f"
108 chmod 644 "$pkgdir/usr/man/man3/$f"
109 done
110
111 mkdir "$pkgdir/usr/man/cat1"
112 chmod 755 "$pkgdir/usr/man/cat1"
113 for f in iftocc.0 new-inject.0 822field.0 822header.0 822date.0 822received.0 822print.0
114 do
115 cp "$f" "$pkgdir/usr/man/cat1/$f"
116 chmod 644 "$pkgdir/usr/man/cat1/$f"
117 done
118
119 mkdir "$pkgdir/usr/man/cat5"
120 chmod 755 "$pkgdir/usr/man/cat5"
121 for f in rewriting.0
122 do
123 cp "$f" "$pkgdir/usr/man/cat5/$f"
124 chmod 644 "$pkgdir/usr/man/cat5/$f"
125 done
126
127 mkdir "$pkgdir/usr/man/cat8"
128 chmod 755 "$pkgdir/usr/man/cat8"
129 for f in ofmipd.0 ofmipname.0;
130 do
131 cp "$f" "$pkgdir/usr/man/cat8/$f"
132 chmod 644 "$pkgdir/usr/man/cat8/$f"
133 done
134
135 mkdir "$pkgdir/usr/man/cat3"
136 chmod 755 "$pkgdir/usr/man/cat3"
137 for f in mess822.0 mess822_addr.0 mess822_date.0 mess822_fold.0 mess822_quote.0 mess822_token.0 mess822_when.0;
138 do
139 cp "$f" "$pkgdir/usr/man/cat3/$f"
140 chmod 644 "$pkgdir/usr/man/cat3/$f"
141 done
142
143 mkdir "$pkgdir/etc"
144 chmod 755 "$pkgdir/etc"
145 for f in leapsecs.dat;
146 do
147 cp "$f" "$pkgdir/etc/$f"
148 chmod 644 "$pkgdir/etc/$f"
149 done
150
151}
152
153# EOF
154

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion