neferafk-bin

MEDIUM
maintainer bnema 0 votes scanned 2026-10-27 07:47:02.942332
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:17 source_aarch64=("${pkgname}_${pkgver}_aarch64.tar.gz::https://git.bnema.dev/neferafk/releases/download/v${pkgver}/neferafk_${pkgver}_linux_arm64.tar.gz")

PKGBUILD

1 offending line(s) highlighted
1# This file was generated by GoReleaser. DO NOT EDIT.
2# Maintainer: bnema <b at bnema dot dev>
3
4pkgname='neferafk-bin'
5pkgver=0.6.0
6pkgrel=1
7pkgdesc='Idle daemon for Wayland: fade, session lock, screens off and suspend'
8url='https://git.bnema.dev/neferafk'
9arch=('aarch64' 'x86_64')
10license=('GPL-3.0-only')
11provides=('neferafk')
12conflicts=('neferafk' 'neferafk-git')
13depends=('glibc' 'pam' 'libxkbcommon' 'vulkan-icd-loader' 'vulkan-driver' 'systemd' 'ttf-dejavu')
14optdepends=('pass: PIN source for auth.mode = pin')
15backup=('etc/pam.d/neferafk')
16
17source_aarch64=("${pkgname}_${pkgver}_aarch64.tar.gz::https://git.bnema.dev/neferafk/releases/download/v${pkgver}/neferafk_${pkgver}_linux_arm64.tar.gz")
18sha256sums_aarch64=('4edc71f1c542d7c16d856aa02455442289f92e2666b9a5418b03afdaf90b460c')
19
20source_x86_64=("${pkgname}_${pkgver}_x86_64.tar.gz::https://git.bnema.dev/neferafk/releases/download/v${pkgver}/neferafk_${pkgver}_linux_amd64.tar.gz")
21sha256sums_x86_64=('d85f61fc2d15fc77457e467a96523237b986620b5a9c6e0e396b4ebe0bb19258')
22
23package() {
24 install -Dm755 ./neferafk "${pkgdir}/usr/bin/neferafk"
25 install -Dm644 ./packaging/neferafk.pam "${pkgdir}/etc/pam.d/neferafk"
26 install -Dm644 ./examples/config "${pkgdir}/usr/share/doc/neferafk/config.example"
27 install -Dm644 ./README.md "${pkgdir}/usr/share/doc/neferafk/README.md"
28 install -Dm644 ./LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
29}
30

Changes since previous scan

--- PKGBUILD @ 2026-10-06 00:13
+++ PKGBUILD @ 2026-10-27 07:47
@@ -2,10 +2,10 @@
# Maintainer: bnema <b at bnema dot dev>
pkgname='neferafk-bin'
-pkgver=0.5.1
+pkgver=0.6.0
pkgrel=1
pkgdesc='Idle daemon for Wayland: fade, session lock, screens off and suspend'
-url='https://github.com/bnema/neferafk'
+url='https://git.bnema.dev/neferafk'
arch=('aarch64' 'x86_64')
license=('GPL-3.0-only')
provides=('neferafk')
@@ -14,11 +14,11 @@
optdepends=('pass: PIN source for auth.mode = pin')
backup=('etc/pam.d/neferafk')
-source_aarch64=("${pkgname}_${pkgver}_aarch64.tar.gz::https://github.com/bnema/neferafk/releases/download/v${pkgver}/neferafk_${pkgver}_linux_arm64.tar.gz")
-sha256sums_aarch64=('3bebfac2fc2b2b2e1536ce623e7364500b36dc0d18f448611b7326b9e1f31fbd')
+source_aarch64=("${pkgname}_${pkgver}_aarch64.tar.gz::https://git.bnema.dev/neferafk/releases/download/v${pkgver}/neferafk_${pkgver}_linux_arm64.tar.gz")
+sha256sums_aarch64=('4edc71f1c542d7c16d856aa02455442289f92e2666b9a5418b03afdaf90b460c')
-source_x86_64=("${pkgname}_${pkgver}_x86_64.tar.gz::https://github.com/bnema/neferafk/releases/download/v${pkgver}/neferafk_${pkgver}_linux_amd64.tar.gz")
-sha256sums_x86_64=('10717a609630dbb47935a58513226bcdc4fdde3ff72d22b04af9729980bb4e92')
+source_x86_64=("${pkgname}_${pkgver}_x86_64.tar.gz::https://git.bnema.dev/neferafk/releases/download/v${pkgver}/neferafk_${pkgver}_linux_amd64.tar.gz")
+sha256sums_x86_64=('d85f61fc2d15fc77457e467a96523237b986620b5a9c6e0e396b4ebe0bb19258')
package() {
install -Dm755 ./neferafk "${pkgdir}/usr/bin/neferafk"

Scan history

Scanned at (UTC)SeverityRules
2026-10-27 07:47:02 Medium 1
2026-10-06 00:13:36 Clean 2
2026-10-05 23:40:58 Low 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion