moony-lv2-git
LOW
maintainer milkii
0 votes
scanned 2026-10-02 00:00:32.890515
Why flagged
The source is a git repository from a plausible project host used to build the software from source;虽非标准主机但属于项目维护者，且无代码执行或远程二进制下载风险。
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a git repository from a plausible project host used to build the software from source;虽非标准主机但属于项目维护者，且无代码执行或远程二进制下载风险。
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:16
source=("git+https://git.ventosus.ch/~hp/moony.lv2")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Milk Brewster (milk on freenode)
2
3
_pkgname=moony.lv2
4
pkgname=moony-lv2-git
5
pkgver=0.41.261.r2828.bffd81aa
6
pkgrel=1
7
pkgdesc="Realtime Lua as programmable glue in LV2 - git master"
8
arch=('i686' 'x86_64')
9
url='https://git.open-music-kontrollers.ch/~hp/moony.lv2'
10
license=('Artistic2.0')
11
groups=('lv2-plugins' 'pro-audio')
12
depends=('cairo' 'fontconfig' 'libgl' 'libvterm' 'pixman')
13
makedepends=('git' 'lv2' 'meson' 'sord' 'fontconfig' 'pixman' 'libvterm' 'cairo')
14
provides=("${_pkgname}")
15
conflicts=('moony-lv2' "${_pkgname}")
16
source=("git+https://git.ventosus.ch/~hp/moony.lv2")
17
sha256sums=('SKIP')
18
19
pkgver() {
20
cd "${srcdir}/${_pkgname}"
21
22
printf "%s.r%s.%s" "$(grep -oP "^option\('version'.*value\s*:\s*'\K[^']+" meson_options.txt)" \
23
"$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
24
}
25
26
build() {
27
cd "${srcdir}/${_pkgname}"
28
29
arch-meson --buildtype=release build
30
cd build
31
ninja -j4
32
}
33
34
check() {
35
cd "${srcdir}/${_pkgname}"
36
37
meson test -C build || msg "lv2_validate currently known to fail on the plugin"
38
}
39
40
package() {
41
cd "${srcdir}/${_pkgname}"
42
43
DESTDIR="${pkgdir}" meson install -C build
44
# docs
45
install -vDm 644 ChangeLog README.md build/manual.html build/moony_logo.png \
46
-t "${pkgdir}/usr/share/doc/${pkgname}"
47
}
48
49
# vim:set ts=2 sw=2 et:
50
Changes since previous scan
--- PKGBUILD @ 2026-09-14 00:27+++ PKGBUILD @ 2026-10-02 00:00@@ -2,7 +2,7 @@ _pkgname=moony.lv2 pkgname=moony-lv2-git-pkgver=0.41.255.r2825.32288d84+pkgver=0.41.261.r2828.bffd81aa pkgrel=1 pkgdesc="Realtime Lua as programmable glue in LV2 - git master" arch=('i686' 'x86_64')Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-02 00:00:32 | Low | 2 |
| 2026-10-01 00:02:06 | Low | 2 |
| 2026-09-30 00:20:07 | Low | 2 |
| 2026-09-29 00:07:46 | Low | 2 |
| 2026-09-28 00:28:32 | Low | 2 |
| 2026-09-27 00:07:07 | Low | 2 |
| 2026-09-26 00:12:15 | Low | 2 |
| 2026-09-25 00:03:36 | Low | 2 |
| 2026-09-24 00:24:14 | Low | 2 |
| 2026-09-23 00:28:13 | Low | 2 |
| 2026-09-22 00:15:14 | Low | 2 |
| 2026-09-21 00:26:32 | Low | 2 |
| 2026-09-20 00:25:31 | Low | 2 |
| 2026-09-19 00:25:36 | Low | 2 |
| 2026-09-18 00:17:11 | Low | 2 |
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 07:16:35 | Medium | 1 |
| 2026-09-14 00:27:57 | Low | 2 |