mp-5-nc

LOW
maintainer orphaned 6 votes base mp-5 scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The source is downloaded from the project's official domain (triptico.com) for building from source, which is normal AUR packaging; the host is not whitelisted but is plausibly legitimate and hosts the project's own release tarball.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is downloaded from the project's official domain (triptico.com) for building from source, which is normal AUR packaging; the host is not whitelisted but is plausibly legitimate and hosts the project's own release tarball.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:19 source=("$pkgbase-$pkgver.tar.gz::https://triptico.com/download/mp-5.tar.gz")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: willemw <willemw12@gmail.com>
2# Contributor: Sebastian Voecking <voeck@web.de>
3
4# NOTE: config.sh detects during the build which libraries (gtk, ...) are available
5
6pkgbase=mp-5
7#pkgname=(mp-5-gtk mp-5-nc mp-5-qt5)
8pkgname=(mp-5-gtk mp-5-nc)
9pkgver=5.61
10pkgrel=1
11arch=('x86_64')
12url="https://triptico.com/software/mp.html"
13license=('Unlicense')
14#'mp_doccer' 'perl-grutatxt'
15#makedepends=('gtk3' 'qt5-base')
16makedepends=('gtk3')
17options=(!makeflags)
18#source=("$pkgbase-$pkgver.tar.gz::https://triptico.com/download/mp/mp-$pkgver.tar.gz")
19source=("$pkgbase-$pkgver.tar.gz::https://triptico.com/download/mp-5.tar.gz")
20sha256sums=('4840e1490a581974e916fc612268a772ed181b92517178a7d68ed4fb997f2624')
21
22prepare() {
23 # Patch hard-coded install paths
24 #sed -i 's| /usr| $(PREFIX)|g' mp-$pkgver-dev/makefile.in
25 sed -i 's| /usr| $(PREFIX)|g' mp-$pkgver/makefile.in
26
27 # Copy source files for each package
28 # Patch: move subfolders "mpdm" and "mpsl" one folder up
29 #for dir in mp-5-gtk mp-5-nc mp-5-qt5; do
30 for dir in mp-5-gtk mp-5-nc; do
31 rm -rf "$dir"
32 #cp -a mp-$pkgver-dev "$dir"
33 cp -a mp-$pkgver "$dir"
34 rm -rf "$dir/"{mpdm,mpsl}
35 done
36 #cp -a mp-$pkgver-dev/{mpdm,mpsl} .
37 cp -a mp-$pkgver/{mpdm,mpsl} .
38}
39
40build() {
41 set -x
42
43 cd "$srcdir/mp-5-gtk"
44 ./config.sh --prefix=/usr --without-curses --without-kde4 --without-qt
45 make
46
47 cd "$srcdir/mp-5-nc"
48 ./config.sh --prefix=/usr --without-gtk --without-kde4 --without-qt
49 make
50
51 #cd "$srcdir/mp-5-qt5"
52 #./config.sh --prefix=/usr --without-curses --without-gtk --without-kde4 --without-qt4
53 #make
54}
55
56package_mp-5-gtk() {
57 pkgdesc="Text editor for programmers (GTK front-end)"
58 depends=('gtk3')
59 _pkgname='mp-5'
60 provides=($_pkgname)
61 conflicts=($_pkgname)
62
63 cd mp-5-gtk
64 #install -Dm644 mp.png "$pkgdir/usr/share/pixmaps/mp.png"
65 install -dm755 "$pkgdir"{/usr/bin,/usr/share/applications,/usr/share/icons/hicolor/48x48/apps}
66 make DESTDIR="$pkgdir" install
67}
68
69package_mp-5-nc() {
70 pkgdesc="Text editor for programmers (ncurses front-end)"
71 _pkgname='mp-5'
72 provides=($_pkgname)
73 conflicts=($_pkgname)
74
75 cd mp-5-nc
76 #install -Dm644 mp.png "$pkgdir/usr/share/pixmaps/mp.png"
77 install -dm755 "$pkgdir"{/usr/bin,/usr/share/applications,/usr/share/icons/hicolor/48x48/apps}
78 make DESTDIR="$pkgdir" install
79}
80
81#package_mp-5-qt5() {
82# pkgdesc="Text editor for programmers (QT5 front-end)"
83# depends=('qt5-base')
84# _pkgname='mp-5'
85# provides=($_pkgname)
86# conflicts=($_pkgname)
87#
88# cd mp-5-qt5
89# #install -Dm644 mp.png "$pkgdir/usr/share/pixmaps/mp.png"
90# install -dm755 "$pkgdir"{/usr/bin,/usr/share/applications,/usr/share/icons/hicolor/48x48/apps}
91# make DESTDIR="$pkgdir" install
92#}
93
94

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion