ncurses5-compat-libs
LOW
maintainer andreas_baumann
585 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is downloaded from the official project's archive domain (invisible-island.net), which is legitimate and maintained by the ncurses author; the non-whitelisted host is not a security risk in this context as it hosts the project's official releases.
Triggered rules
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-07-25) reviewed this and agrees it is LOW (confidence 95%): The source is downloaded from the official project's archive domain (invisible-island.net), which is legitimate and maintained by the ncurses author; the non-whitelisted host is not a security risk in this context as it hosts the project's official releases.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:18
source=(https://invisible-island.net/archives/ncurses/ncurses-$pkgver.tar.gz{,.asc})
PKGBUILD
1 offending line(s) highlighted
1
# Contributor: Michał Wojdyła < micwoj9292 at gmail dot com >
2
# Contributor: Bartłomiej Piotrowski <bpiotrowski@archlinux.org>
3
# Contributor: Mateusz Gozdek <mgozdekof@gmail.com>
4
# Contributor: Allan McRae <allan@archlinux.org>
5
# Contributor: judd <jvinet@zeroflux.org>
6
7
pkgname=ncurses5-compat-libs
8
_pkgname=ncurses
9
pkgver=6.6
10
pkgrel=2
11
pkgdesc='System V Release 4.0 curses emulation library, ABI 5'
12
arch=(i686 x86_64)
13
url='https://invisible-island.net/ncurses/ncurses.html'
14
license=(MIT)
15
depends=(glibc gcc-libs sh)
16
provides=(libtinfo5)
17
conflicts=(libtinfo5)
18
source=(https://invisible-island.net/archives/ncurses/ncurses-$pkgver.tar.gz{,.asc})
19
sha256sums=('355b4cbbed880b0381a04c46617b7656e362585d52e9cf84a67e2009b749ff11'
20
'SKIP')
21
validpgpkeys=('19882D92DDA4C400C22C0D56CC2AF4472167BE03') # Thomas Dickey
22
23
prepare() {
24
cp -r ${_pkgname}-${pkgver}{,-no-widec}
25
}
26
27
build() {
28
local configure_options=(
29
--prefix=/usr
30
--mandir=/usr/share/man
31
--with-shared
32
--with-normal
33
--without-debug
34
--without-ada
35
--disable-pc-files
36
--with-cxx-binding
37
--with-cxx-shared
38
--with-versioned-syms
39
--with-abi-version=5
40
)
41
42
# allow building with gcc >= 15
43
CFLAGS+=' -std=gnu17'
44
45
cd "${srcdir}/${_pkgname}-${pkgver}"
46
47
./configure "${configure_options[@]}" --enable-widec
48
make
49
50
cd "${srcdir}/${_pkgname}-${pkgver}-no-widec"
51
52
./configure "${configure_options[@]}"
53
make
54
}
55
56
package() {
57
cd "${srcdir}/${_pkgname}-${pkgver}"
58
make DESTDIR="$pkgdir" install.libs
59
cd "${srcdir}/${_pkgname}-${pkgver}-no-widec"
60
make DESTDIR="$pkgdir" install.libs
61
install -Dm644 COPYING "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
62
rm -rf "$pkgdir/usr/include/" "$pkgdir/usr/lib/pkgconfig" \
63
"$pkgdir"/usr/lib/*.so "$pkgdir"/usr/lib/*.a
64
65
ln -s /usr/lib/libncurses.so.5 "$pkgdir/usr/lib/libtinfo.so.5"
66
ln -s /usr/lib/libncurses.so.5 "$pkgdir/usr/lib/libtic.so.5"
67
}
68
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |