mstflint

MEDIUM

maintainer k0ste 8 votes scanned 2026-09-12 13:12:15.869575

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 source=("${pkgname}-${_pkgver}.tar.gz::https://codeload.${_uri}/tar.gz/refs/tags/v${_pkgver}")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Konstantin Shalygin <k0ste@k0ste.ru>
    
      2# Contributor: Konstantin Shalygin <k0ste@k0ste.ru>
    
      3
    
      4pkgname='mstflint'
    
      5pkgver='4.37.0.1'
    
      6_pkgver='4.37.0-1'
    
      7pkgrel='1'
    
      8pkgdesc='Open source version of MFT (Mellanox Firmware Tools)'
    
      9arch=('x86_64' 'aarch64')
    
      10_uri="github.com/Mellanox/${pkgname}"
    
      11url="https://${_uri}"
    
      12license=('GPL2' 'custom:"OpenIB.org BSD"')
    
      13depends=('python' 'iniparser' 'openssl' 'libxml2' 'libidn2' 'libpsl'
    
      14	 'libunistring' 'zlib' 'xz' 'icu' 'keyutils' 'brotli' 'sqlite'
    
      15	 'libxml2' 'jsoncpp' 'curl' 'libnghttp2')
    
      16makedepends=('rdma-core')
    
      17source=("${pkgname}-${_pkgver}.tar.gz::https://codeload.${_uri}/tar.gz/refs/tags/v${_pkgver}")
    
      18sha256sums=('75405d8c7594c25a686eba0edfa4101312f3b63cdabae4870b259b796041a15a')
    
      19
    
      20prepare() {
    
      21  cd "${pkgname}-${_pkgver}"
    
      22
    
      23  autoreconf -fvi
    
      24  ./configure \
    
      25    --prefix="/usr" \
    
      26    --sbindir="/usr/bin" \
    
      27    --libexecdir="/usr/lib" \
    
      28    --sysconfdir="/etc" \
    
      29    --localstatedir="/var/${pkgname}" \
    
      30    --enable-fw-mgr \
    
      31    --enable-nvfwreset \
    
      32    --enable-adb-generic-tools \
    
      33    --enable-xml2
    
      34}
    
      35
    
      36build() {
    
      37  cd "${pkgname}-${_pkgver}"
    
      38  make
    
      39}
    
      40
    
      41check() {
    
      42  cd "${pkgname}-${_pkgver}"
    
      43  make check
    
      44}
    
      45
    
      46package() {
    
      47  cd "${pkgname}-${_pkgver}"
    
      48  make DESTDIR="${pkgdir}" install
    
      49  install -Dm0644 "LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}"
    
      50  install -Dm0644 "README" -t "${pkgdir}/usr/share/doc/${pkgname}"
    
      51}
    
      52

Changes since previous scan

--- PKGBUILD @ 2026-09-01 09:47
+++ PKGBUILD @ 2026-09-12 13:12
@@ -2,20 +2,20 @@
 # Contributor: Konstantin Shalygin <k0ste@k0ste.ru>
 
 pkgname='mstflint'
-pkgver='4.36.0.1'
-_pkgver='4.36.0-1'
+pkgver='4.37.0.1'
+_pkgver='4.37.0-1'
 pkgrel='1'
 pkgdesc='Open source version of MFT (Mellanox Firmware Tools)'
 arch=('x86_64' 'aarch64')
-_uri="Mellanox/${pkgname}"
-url="https://github.com/${_uri}"
+_uri="github.com/Mellanox/${pkgname}"
+url="https://${_uri}"
 license=('GPL2' 'custom:"OpenIB.org BSD"')
 depends=('python' 'iniparser' 'openssl' 'libxml2' 'libidn2' 'libpsl'
 	 'libunistring' 'zlib' 'xz' 'icu' 'keyutils' 'brotli' 'sqlite'
 	 'libxml2' 'jsoncpp' 'curl' 'libnghttp2')
 makedepends=('rdma-core')
-source=("${pkgname}-${_pkgver}.tar.gz::https://codeload.github.com/${_uri}/tar.gz/refs/tags/v${_pkgver}")
-sha256sums=('ea36a77a561d2908ac4358ba2106d0ee8b2ddfe98b40a05d1c374a40a2330569')
+source=("${pkgname}-${_pkgver}.tar.gz::https://codeload.${_uri}/tar.gz/refs/tags/v${_pkgver}")
+sha256sums=('75405d8c7594c25a686eba0edfa4101312f3b63cdabae4870b259b796041a15a')
 
 prepare() {
   cd "${pkgname}-${_pkgver}"
@@ -28,6 +28,7 @@
     --sysconfdir="/etc" \
     --localstatedir="/var/${pkgname}" \
     --enable-fw-mgr \
+    --enable-nvfwreset \
     --enable-adb-generic-tools \
     --enable-xml2
 }

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-12 13:12:15	Medium	1
2026-09-01 09:47:42	Clean	0
2026-06-18 16:11:54	Clean	0