nefercap-git

MEDIUM

maintainer bnema 0 votes scanned 2026-10-22 17:35:31.972993

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:19 source=('git+https://git.bnema.dev/nefercap.git')

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: bnema <b at bnema dot dev>
    
      2# The release workflow sets pkgver and publishes this file to the AUR on every
    
      3# release tag, so the AUR version never falls behind the latest tag.
    
      4pkgname=nefercap-git
    
      5pkgver=0.6.1.r0.g3d41bc5
    
      6pkgrel=1
    
      7pkgdesc='Screenshots and silent screen recording for Wayland, from one shortcut (git version)'
    
      8arch=('x86_64' 'aarch64')
    
      9url='https://git.bnema.dev/nefercap'
    
      10license=('GPL-3.0-only')
    
      11# Loaded at runtime (purego, no cgo): not seen by makepkg's library scan.
    
      12depends=('glibc' 'wayland' 'libxkbcommon' 'vulkan-icd-loader' 'vulkan-driver')
    
      13makedepends=('go>=2:1.27' 'git')
    
      14optdepends=('ffmpeg: screen recording (libx264)'
    
      15	'wl-clipboard: copy screenshots to the clipboard'
    
      16	'neferwl: hidden-workspace capture, HUD exclusion and capture indicator')
    
      17provides=('nefercap')
    
      18conflicts=('nefercap' 'nefercap-bin')
    
      19source=('git+https://git.bnema.dev/nefercap.git')
    
      20sha256sums=('SKIP')
    
      21
    
      22pkgver() {
    
      23	cd nefercap
    
      24	# v0.2.0-5-gabc1234 -> 0.2.0.r5.gabc1234. Pre-release tags (v0.3.0-rc1)
    
      25	# are skipped: pacman sorts 0.3.0.rc1 after 0.3.0.
    
      26	git describe --long --tags --abbrev=7 --exclude='*-*' | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
    
      27}
    
      28
    
      29prepare() {
    
      30	cd nefercap
    
      31	export GOPATH="$srcdir/gopath" GOFLAGS='-mod=readonly -modcacherw' GOTOOLCHAIN=local
    
      32	go mod download
    
      33}
    
      34
    
      35build() {
    
      36	cd nefercap
    
      37	export GOPATH="$srcdir/gopath" CGO_ENABLED=0 GOTOOLCHAIN=local GOPROXY=off
    
      38	export GOFLAGS='-mod=readonly -modcacherw -trimpath -buildvcs=false -buildmode=pie'
    
      39	go build -ldflags "-X main.version=$pkgver" -o nefercap ./cmd/nefercap
    
      40}
    
      41
    
      42check() {
    
      43	cd nefercap
    
      44	./nefercap version
    
      45}
    
      46
    
      47package() {
    
      48	cd nefercap
    
      49	install -Dm755 nefercap "$pkgdir/usr/bin/nefercap"
    
      50	install -Dm644 README.md "$pkgdir/usr/share/doc/nefercap/README.md"
    
      51	install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      52}
    
      53

Changes since previous scan

--- PKGBUILD @ 2026-10-18 11:22
+++ PKGBUILD @ 2026-10-22 17:35
@@ -2,11 +2,11 @@
 # The release workflow sets pkgver and publishes this file to the AUR on every
 # release tag, so the AUR version never falls behind the latest tag.
 pkgname=nefercap-git
-pkgver=0.5.1.r0.g1218e29
+pkgver=0.6.1.r0.g3d41bc5
 pkgrel=1
 pkgdesc='Screenshots and silent screen recording for Wayland, from one shortcut (git version)'
 arch=('x86_64' 'aarch64')
-url='https://github.com/bnema/nefercap'
+url='https://git.bnema.dev/nefercap'
 license=('GPL-3.0-only')
 # Loaded at runtime (purego, no cgo): not seen by makepkg's library scan.
 depends=('glibc' 'wayland' 'libxkbcommon' 'vulkan-icd-loader' 'vulkan-driver')
@@ -16,7 +16,7 @@
 	'neferwl: hidden-workspace capture, HUD exclusion and capture indicator')
 provides=('nefercap')
 conflicts=('nefercap' 'nefercap-bin')
-source=('git+https://github.com/bnema/nefercap.git')
+source=('git+https://git.bnema.dev/nefercap.git')
 sha256sums=('SKIP')
 
 pkgver() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-22 17:35:31	Medium	1
2026-10-18 11:22:05	Clean	0
2026-10-17 21:19:24	Clean	0
2026-10-17 19:19:13	Clean	0
2026-10-15 17:12:54	Clean	0
2026-10-06 00:13:36	Clean	2
2026-10-05 23:40:58	Low	1