minnow

MEDIUM
maintainer Voten 0 votes scanned 2026-10-25 21:43:05.033624
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:12 source=("$pkgname-$pkgver.tar.gz::https://forgejo.voten.me/Voten641/minnow/archive/v$pkgver.tar.gz")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Minnow Contributors <noreply@example.com>
2pkgname=minnow
3pkgver=1.2.0
4pkgrel=1
5pkgdesc="A simple, lightweight file manager for KDE"
6arch=('x86_64')
7url="https://forgejo.voten.me/Voten641/minnow"
8license=('GPL-3.0-or-later')
9depends=('qt6-base' 'kcoreaddons' 'kconfigwidgets' 'kwidgetsaddons' 'kio' 'kfilemetadata' 'karchive' 'knotifications' 'kwindowsystem')
10makedepends=('cmake')
11# Forgejo-generated archive - unpacks to a bare "minnow/" directory, not "minnow-$pkgver/"
12source=("$pkgname-$pkgver.tar.gz::https://forgejo.voten.me/Voten641/minnow/archive/v$pkgver.tar.gz")
13sha256sums=('721209b8a61be8e991124f9ee179161bacf748ab796bf83d460ae9e780bcef97')
14
15build() {
16 cmake -B build -S minnow \
17 -DCMAKE_BUILD_TYPE=Release \
18 -DCMAKE_INSTALL_PREFIX=/usr \
19 -DBUILD_TESTING=OFF \
20 -DMINNOW_APP_VERSION="$pkgver"
21 cmake --build build
22}
23
24package() {
25 DESTDIR="$pkgdir" cmake --install build
26}
27

Changes since previous scan

--- PKGBUILD @ 2026-09-23 09:40
+++ PKGBUILD @ 2026-10-25 21:43
@@ -1,18 +1,19 @@
# Maintainer: Minnow Contributors <noreply@example.com>
pkgname=minnow
-pkgver=0.1.9
+pkgver=1.2.0
pkgrel=1
pkgdesc="A simple, lightweight file manager for KDE"
arch=('x86_64')
-url="https://github.com/minnowfm/minnow"
+url="https://forgejo.voten.me/Voten641/minnow"
license=('GPL-3.0-or-later')
depends=('qt6-base' 'kcoreaddons' 'kconfigwidgets' 'kwidgetsaddons' 'kio' 'kfilemetadata' 'karchive' 'knotifications' 'kwindowsystem')
makedepends=('cmake')
-source=("$pkgname-$pkgver.tar.gz::https://github.com/minnowfm/minnow/archive/refs/tags/v$pkgver.tar.gz")
-sha256sums=('b86dac78b21b77dd251ab5f02104d2d99f3b956a6acedfa9d4879826ed0dab73')
+# Forgejo-generated archive - unpacks to a bare "minnow/" directory, not "minnow-$pkgver/"
+source=("$pkgname-$pkgver.tar.gz::https://forgejo.voten.me/Voten641/minnow/archive/v$pkgver.tar.gz")
+sha256sums=('721209b8a61be8e991124f9ee179161bacf748ab796bf83d460ae9e780bcef97')
build() {
- cmake -B build -S "$pkgname-$pkgver" \
+ cmake -B build -S minnow \
-DCMAKE_BUILD_TYPE=Release \
-DCMAKE_INSTALL_PREFIX=/usr \
-DBUILD_TESTING=OFF \

Scan history

Scanned at (UTC)SeverityRules
2026-10-25 21:43:05 Medium 1
2026-09-23 09:40:25 Clean 0
2026-09-14 19:17:46 Clean 0
2026-09-13 11:14:35 Clean 0
2026-08-11 21:21:47 Clean 0
2026-08-02 00:16:08 Clean 2
2026-08-01 11:20:22 Low 1
2026-08-01 00:11:18 Clean 2
2026-07-31 21:18:45 Low 1
2026-07-30 00:17:23 Clean 2
2026-07-29 11:11:22 Low 1
2026-07-29 09:11:06 Low 1
2026-07-27 00:24:32 Clean 2
2026-07-26 15:32:35 Low 1
2026-07-26 00:07:32 Clean 2
2026-07-25 15:29:50 Low 1
2026-07-25 00:13:44 Clean 2
2026-07-24 21:28:26 Low 1
2026-07-24 19:28:12 Low 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion