minidlna-custom-icon
LOW
maintainer mojo-hakase
3 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a Git repository from a plausible project host (SourceForge), building the project's own code with patches; the non-standard host is not inherently dangerous as it hosts the official source.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Git repository from a plausible project host (SourceForge), building the project's own code with patches; the non-standard host is not inherently dangerous as it hosts the official source.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:16
source=("minidlna::git+https://git.code.sf.net/p/minidlna/git#tag=v${pkgver//./_}"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: mojo-hakase <aur@mojo.hakase.de>
2
3
_pkgname=minidlna
4
pkgname=minidlna-custom-icon
5
pkgver=1.3.3
6
pkgrel=1
7
pkgdesc="A DLNA/UPnP-AV Media server (aka ReadyDLNA) with patch to set a custom icon"
8
arch=('x86_64')
9
url="https://sourceforge.net/projects/minidlna/"
10
license=('GPL')
11
depends=('libexif' 'libjpeg-turbo' 'libid3tag' 'flac' 'libvorbis' 'ffmpeg' 'sqlite')
12
makedepends=('git')
13
provides=('minidlna')
14
conflicts=('minidlna' 'readymedia-transcode-git')
15
backup=('etc/minidlna.conf')
16
source=("minidlna::git+https://git.code.sf.net/p/minidlna/git#tag=v${pkgver//./_}"
17
minidlna-custom-icon.patch
18
minidlna.service
19
ffmpeg7.patch)
20
sha512sums=('7048a86a72d6ce23de2292120427a258993028d8ec7fef68a4879c2a41ab24c07d68526d92a477a5b20c21ee8cfa1a758e5d7ed34dd666d8325eb75be37cce93'
21
'dbeee5950fa05dfc52ee7561d80bc34314165348aaec3e77386d25db56bd46931b3ad8f7017e6248fe96c498a2bb7d03fb514c71b0a7bb1ac8c8ade13a5aba60'
22
'fc5692adf537e203a0466a923d350498faba4f29a219bb6e1ad527fc267d6143403fe8b4c6f5d746805f451142b1ba3ed4e9bb57e445255f3769df8e037a8b66'
23
'0bff7af02ae2d6b0d6f1e4c0ee26cd18f156bfb99377a365c8ff2c3c5555a5e979c215423579a45f82e0cb1fce8628de2c1ca51a28fa07a1d336b9ecc561a7f3')
24
25
prepare() {
26
cd "$srcdir/$_pkgname"
27
sed -i 's|-Werror||g' configure.ac
28
sed -i 's|#user=.*|user=minidlna|g' minidlna.conf
29
patch -p1 -i ../ffmpeg7.patch # Fix build with ffmpeg 7
30
patch -Np1 -i ../minidlna-custom-icon.patch
31
}
32
33
build() {
34
cd "$srcdir/$_pkgname"
35
CFLAGS+=' -fcommon' # https://wiki.gentoo.org/wiki/Gcc_10_porting_notes/fno_common
36
[ -x configure ] || ./autogen.sh
37
ac_cv_lib_id3tag__lz___id3_file_open=yes \
38
ac_cv_lib_avformat__lavcodec__lavutil__lz___avformat_open_input=yes \
39
ac_cv_lib_avformat__lavcodec__lavutil__lz___av_open_input_file=yes \
40
./configure --prefix=/usr --sbindir=/usr/bin
41
make
42
}
43
44
package() {
45
cd "$srcdir/$_pkgname"
46
DESTDIR="$pkgdir" make install
47
install -Dm644 minidlna.conf "$pkgdir"/etc/minidlna.conf
48
install -Dm0644 "$srcdir"/minidlna.service "$pkgdir"/usr/lib/systemd/system/minidlna.service
49
install -Dm644 "$srcdir"/$_pkgname/minidlna.conf.5 "$pkgdir"/usr/share/man/man5/minidlna.conf.5
50
install -Dm644 "$srcdir"/$_pkgname/minidlnad.8 "$pkgdir"/usr/share/man/man8/minidlnad.8
51
}
52
Changes since previous scan
--- PKGBUILD @ 2026-09-05 00:16+++ PKGBUILD @ 2026-09-17 00:27@@ -2,28 +2,31 @@ _pkgname=minidlna pkgname=minidlna-custom-icon-pkgver=1.3.2-pkgrel=3+pkgver=1.3.3+pkgrel=1 pkgdesc="A DLNA/UPnP-AV Media server (aka ReadyDLNA) with patch to set a custom icon" arch=('x86_64') url="https://sourceforge.net/projects/minidlna/" license=('GPL')-depends=('libexif' 'libjpeg' 'libid3tag' 'flac' 'libvorbis' 'ffmpeg' 'sqlite')+depends=('libexif' 'libjpeg-turbo' 'libid3tag' 'flac' 'libvorbis' 'ffmpeg' 'sqlite') makedepends=('git') provides=('minidlna') conflicts=('minidlna' 'readymedia-transcode-git') backup=('etc/minidlna.conf') source=("minidlna::git+https://git.code.sf.net/p/minidlna/git#tag=v${pkgver//./_}"- minidlna-custom-icon.patch- minidlna.service)-sha512sums=('SKIP'+ minidlna-custom-icon.patch+ minidlna.service+ ffmpeg7.patch)+sha512sums=('7048a86a72d6ce23de2292120427a258993028d8ec7fef68a4879c2a41ab24c07d68526d92a477a5b20c21ee8cfa1a758e5d7ed34dd666d8325eb75be37cce93' 'dbeee5950fa05dfc52ee7561d80bc34314165348aaec3e77386d25db56bd46931b3ad8f7017e6248fe96c498a2bb7d03fb514c71b0a7bb1ac8c8ade13a5aba60'- 'fc5692adf537e203a0466a923d350498faba4f29a219bb6e1ad527fc267d6143403fe8b4c6f5d746805f451142b1ba3ed4e9bb57e445255f3769df8e037a8b66')+ 'fc5692adf537e203a0466a923d350498faba4f29a219bb6e1ad527fc267d6143403fe8b4c6f5d746805f451142b1ba3ed4e9bb57e445255f3769df8e037a8b66'+ '0bff7af02ae2d6b0d6f1e4c0ee26cd18f156bfb99377a365c8ff2c3c5555a5e979c215423579a45f82e0cb1fce8628de2c1ca51a28fa07a1d336b9ecc561a7f3') prepare() { cd "$srcdir/$_pkgname" sed -i 's|-Werror||g' configure.ac sed -i 's|#user=.*|user=minidlna|g' minidlna.conf+ patch -p1 -i ../ffmpeg7.patch # Fix build with ffmpeg 7 patch -Np1 -i ../minidlna-custom-icon.patch } Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 16:00:23 | Medium | 1 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |