monitorix

maintainer cgirard · 103 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from the project's official domain (monitorix.org), which is a plausibly legitimate source for the software; building from official project sources is normal AUR packaging practice even if the host is not on a whitelist.

Triggered rules

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-07-25) reviewed this and agrees it is LOW (confidence 95%): The source is a tarball from the project's official domain (monitorix.org), which is a plausibly legitimate source for the software; building from official project sources is normal AUR packaging practice even if the host is not on a whitelist.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:26 source=("http://www.$pkgname.org/$pkgname-$pkgver.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Cedric Girard <cgirard [dot] archlinux [at] valinor [dot] fr>
    
      2# Contributor: graysky <graysky AT archlinux dot us>
    
      3
    
      4pkgname=monitorix
    
      5pkgver=3.16.0
    
      6pkgrel=1
    
      7pkgdesc='A lightweight system monitoring tool that uses rrd databases.'
    
      8arch=('any')
    
      9url='https://www.monitorix.org'
    
      10license=('GPL2')
    
      11depends=('perl' 'perl-cgi' 'perl-mailtools' 'perl-mime-lite' 'perl-libwww'
    
      12	'perl-dbi' 'perl-xml-simple' 'perl-config-simple' 'perl-config-general'
    
      13	'rrdtool' 'perl-http-server-simple')
    
      14optdepends=(
    
      15	'anything-sync-daemon: offload your databases to tmpfs to save i/o to your disk.'
    
      16	'hddtemp: enable support for hdd temp monitoring.'
    
      17	'lm_sensors: enable support for system temp monitoring.'
    
      18	'net-tools: for netstat monitoring'
    
      19	'nvidia: enable support for nVidia card temp and usage monitoring.'
    
      20	'perl-dbd-mysql: for mysql monitoring'
    
      21	'smartmontools: enable support for hdd bad sector monitoring.'
    
      22	'terminus-font: if graphs do not contain characters, you may need this font package.')
    
      23conflicts=("$pkgname-git")
    
      24backup=("etc/$pkgname/$pkgname.conf" "etc/$pkgname.conf")
    
      25install=readme.install
    
      26source=("http://www.$pkgname.org/$pkgname-$pkgver.tar.gz")
    
      27sha256sums=('0dcd356827d3fc1ce251fe4871b595575e96d8e49e9bdceef82d9a05ae14f363')
    
      28
    
      29prepare() {
    
      30	cd "$pkgname-$pkgver"
    
      31
    
      32	# use Arch default location for http servers and enable built-in httpd
    
      33	sed -i -e '/^base_dir/ s,var\/lib\/monitorix\/www,srv\/http\/monitorix,' \
    
      34		-i -e '/^<httpd_builtin>/{$!N; s/y/n/}' $pkgname.conf
    
      35}
    
      36
    
      37package() {
    
      38	cd "$pkgname-$pkgver"
    
      39	make DESTDIR="$pkgdir" BASEDIR=/srv/http/monitorix \
    
      40		WWWDIR=/srv/http/monitorix install-systemd-all
    
      41
    
      42	# Arch provides the license so do not duplicate it
    
      43	rm -f "$pkgdir/usr/share/doc/$pkgname/COPYING"
    
      44
    
      45	# remove unneed files
    
      46	rm -f "$pkgdir/usr/share/doc/$pkgname/README.OpenBSD"
    
      47	rm -f "$pkgdir/usr/share/doc/$pkgname/README.NetBSD"
    
      48	rm -f "$pkgdir/usr/share/doc/$pkgname/README.FreeBSD"
    
      49}
    
      50

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2