monitorix

LOW

maintainer cgirard 103 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is a tarball from the project's official domain (monitorix.org), which is a plausibly legitimate source for the software; building from official project sources is normal AUR packaging practice even if the host is not on a whitelist.

Triggered rules

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-07-25) reviewed this and agrees it is LOW (confidence 95%): The source is a tarball from the project's official domain (monitorix.org), which is a plausibly legitimate source for the software; building from official project sources is normal AUR packaging practice even if the host is not on a whitelist.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:26 source=("http://www.$pkgname.org/$pkgname-$pkgver.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Cedric Girard <cgirard [dot] archlinux [at] valinor [dot] fr>
    
      2# Contributor: graysky <graysky AT archlinux dot us>
    
      3
    
      4pkgname=monitorix
    
      5pkgver=3.16.0
    
      6pkgrel=1
    
      7pkgdesc='A lightweight system monitoring tool that uses rrd databases.'
    
      8arch=('any')
    
      9url='https://www.monitorix.org'
    
      10license=('GPL2')
    
      11depends=('perl' 'perl-cgi' 'perl-mailtools' 'perl-mime-lite' 'perl-libwww'
    
      12	'perl-dbi' 'perl-xml-simple' 'perl-config-simple' 'perl-config-general'
    
      13	'rrdtool' 'perl-http-server-simple')
    
      14optdepends=(
    
      15	'anything-sync-daemon: offload your databases to tmpfs to save i/o to your disk.'
    
      16	'hddtemp: enable support for hdd temp monitoring.'
    
      17	'lm_sensors: enable support for system temp monitoring.'
    
      18	'net-tools: for netstat monitoring'
    
      19	'nvidia: enable support for nVidia card temp and usage monitoring.'
    
      20	'perl-dbd-mysql: for mysql monitoring'
    
      21	'smartmontools: enable support for hdd bad sector monitoring.'
    
      22	'terminus-font: if graphs do not contain characters, you may need this font package.')
    
      23conflicts=("$pkgname-git")
    
      24backup=("etc/$pkgname/$pkgname.conf" "etc/$pkgname.conf")
    
      25install=readme.install
    
      26source=("http://www.$pkgname.org/$pkgname-$pkgver.tar.gz")
    
      27sha256sums=('0dcd356827d3fc1ce251fe4871b595575e96d8e49e9bdceef82d9a05ae14f363')
    
      28
    
      29prepare() {
    
      30	cd "$pkgname-$pkgver"
    
      31
    
      32	# use Arch default location for http servers and enable built-in httpd
    
      33	sed -i -e '/^base_dir/ s,var\/lib\/monitorix\/www,srv\/http\/monitorix,' \
    
      34		-i -e '/^<httpd_builtin>/{$!N; s/y/n/}' $pkgname.conf
    
      35}
    
      36
    
      37package() {
    
      38	cd "$pkgname-$pkgver"
    
      39	make DESTDIR="$pkgdir" BASEDIR=/srv/http/monitorix \
    
      40		WWWDIR=/srv/http/monitorix install-systemd-all
    
      41
    
      42	# Arch provides the license so do not duplicate it
    
      43	rm -f "$pkgdir/usr/share/doc/$pkgname/COPYING"
    
      44
    
      45	# remove unneed files
    
      46	rm -f "$pkgdir/usr/share/doc/$pkgname/README.OpenBSD"
    
      47	rm -f "$pkgdir/usr/share/doc/$pkgname/README.NetBSD"
    
      48	rm -f "$pkgdir/usr/share/doc/$pkgname/README.FreeBSD"
    
      49}
    
      50

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2