nginx-mainline-mod-fancyindex-git
LOW
maintainer RyuaNerin
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package builds an Nginx module from the project's official GitHub repository over HTTPS; the non-whitelisted host is GitHub, which is a standard and trusted source for source code, and no unverifiable prebuilt binaries are involved.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds an Nginx module from the project's official GitHub repository over HTTPS; the non-whitelisted host is GitHub, which is a standard and trusted source for source code, and no unverifiable prebuilt binaries are involved.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:22
https://nginx.org/download/nginx-$_nginxver.tar.gz{,.asc}
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: RyuaNerin <admin@ryuar.in>
2
# Contributor: hdhoang <arch@hdhoang.space>
3
# Contributor: jkl
4
5
pkgname=nginx-mainline-mod-fancyindex-git
6
pkgver=0.5.1
7
pkgrel=1
8
9
_modname="ngx_fancyindex"
10
_nginxver=1.19.3
11
12
pkgdesc='Fancy indexes module for the Nginx web server'
13
arch=('i686' 'x86_64' 'armv7h')
14
makedepends=('git')
15
depends=("nginx-mainline=$_nginxver")
16
provides=('nginx-mainline-mod-fancyindex')
17
conflicts=('nginx-mainline-mod-fancyindex')
18
url="https://github.com/aperezdc/ngx-fancyindex"
19
license=('CUSTOM')
20
21
source=(
22
https://nginx.org/download/nginx-$_nginxver.tar.gz{,.asc}
23
"$_modname::git+https://github.com/aperezdc/ngx-fancyindex.git"
24
)
25
sha256sums=('91e5b74fa17879d2463294e93ad8f6ffc066696ae32ad0478ffe15ba0e9e8df0'
26
'SKIP'
27
'SKIP')
28
validpgpkeys=('B0F4253373F8F6F510D42178520A9993A1C052F8') # Maxim Dounin <mdounin@mdounin.ru>
29
30
prepare() {
31
cd "$srcdir"/$_modname
32
sed 's@/usr/local@/usr@' -i config
33
}
34
35
build() {
36
cd "$srcdir"/nginx-$_nginxver
37
./configure --with-compat \
38
--add-dynamic-module=../$_modname
39
make modules
40
}
41
42
package() {
43
install -Dm644 "$srcdir/"$_modname/LICENSE \
44
"$pkgdir"/usr/share/licenses/$pkgname/LICENSE
45
46
cd "$srcdir"/nginx-$_nginxver/objs
47
for mod in *.so; do
48
install -Dm755 $mod "$pkgdir"/usr/lib/nginx/modules/$mod
49
done
50
}
51
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |