mingw-w64-libyaml
LOW
maintainer IceDragon
2 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a standard tarball from the project's official host (pyyaml.org), which is not on the whitelist but is the legitimate project domain; building from official source is normal AUR practice and poses low risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a standard tarball from the project's official host (pyyaml.org), which is not on the whitelist but is the legitimate project domain; building from official source is normal AUR practice and poses low risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:14
source=(http://pyyaml.org/download/libyaml/yaml-${pkgver}.tar.gz)
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Corey Powell (mistdragon100@gmail.com)
2
# Swiped from the official libyaml package and modified for mingw-w64
3
# Also swiped some code from 0X1A and Schala's mingw-w64-libyaml
4
pkgname=mingw-w64-libyaml
5
pkgver=0.2.5
6
pkgrel=1
7
pkgdesc="YAML 1.1 library (mingw-w64)"
8
arch=('any')
9
url="http://pyyaml.org/wiki/LibYAML"
10
license=('MIT')
11
makedepends=('mingw-w64-configure')
12
depends=('mingw-w64-crt')
13
options=(staticlibs !strip !buildflags)
14
source=(http://pyyaml.org/download/libyaml/yaml-${pkgver}.tar.gz)
15
md5sums=('bb15429d8fb787e7d3f1c83ae129a999')
16
17
_architectures="i686-w64-mingw32 x86_64-w64-mingw32"
18
19
build() {
20
cd "${srcdir}/yaml-$pkgver/"
21
for _arch in ${_architectures}; do
22
mkdir -p build-${_arch} && pushd build-${_arch}
23
${_arch}-configure CFLAGS="-DYAML_DECLARE_STATIC" --enable-static --disable-shared
24
make
25
popd
26
done
27
}
28
29
package() {
30
for _arch in ${_architectures}; do
31
cd "${srcdir}/yaml-$pkgver/build-${_arch}"
32
make DESTDIR="${pkgdir}" install
33
rm -rf "$pkgdir"/usr/${_arch}/share/man
34
${_arch}-strip -g "$pkgdir"/usr/${_arch}/lib/*.a
35
#${_arch}-strip -g "$pkgdir"/usr/${_arch}/bin/*.dll
36
find "$pkgdir/usr/${_arch}" -name '*.exe' -delete
37
#cd "${srcdir}/yaml-$pkgver"
38
#install -m644 -D LICENSE "${pkgdir}/usr/${_arch}/share/licenses/${pkgname}/LICENSE"
39
done
40
}
41
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |