nginx-mainline-mod-fancyindex-git
LOW
maintainer RyuaNerin
0 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The package builds an Nginx module from the project's official GitHub repository over HTTPS; the non-whitelisted host is GitHub, which is a standard and trusted source for source code, and no unverifiable prebuilt binaries are involved.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds an Nginx module from the project's official GitHub repository over HTTPS; the non-whitelisted host is GitHub, which is a standard and trusted source for source code, and no unverifiable prebuilt binaries are involved.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:22
https://nginx.org/download/nginx-$_nginxver.tar.gz{,.asc}
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: RyuaNerin <admin@ryuar.in>
2
# Contributor: hdhoang <arch@hdhoang.space>
3
# Contributor: jkl
4
5
pkgname=nginx-mainline-mod-fancyindex-git
6
pkgver=0.5.1
7
pkgrel=1
8
9
_modname="ngx_fancyindex"
10
_nginxver=1.19.3
11
12
pkgdesc='Fancy indexes module for the Nginx web server'
13
arch=('i686' 'x86_64' 'armv7h')
14
makedepends=('git')
15
depends=("nginx-mainline=$_nginxver")
16
provides=('nginx-mainline-mod-fancyindex')
17
conflicts=('nginx-mainline-mod-fancyindex')
18
url="https://github.com/aperezdc/ngx-fancyindex"
19
license=('CUSTOM')
20
21
source=(
22
https://nginx.org/download/nginx-$_nginxver.tar.gz{,.asc}
23
"$_modname::git+https://github.com/aperezdc/ngx-fancyindex.git"
24
)
25
sha256sums=('91e5b74fa17879d2463294e93ad8f6ffc066696ae32ad0478ffe15ba0e9e8df0'
26
'SKIP'
27
'SKIP')
28
validpgpkeys=('B0F4253373F8F6F510D42178520A9993A1C052F8') # Maxim Dounin <mdounin@mdounin.ru>
29
30
prepare() {
31
cd "$srcdir"/$_modname
32
sed 's@/usr/local@/usr@' -i config
33
}
34
35
build() {
36
cd "$srcdir"/nginx-$_nginxver
37
./configure --with-compat \
38
--add-dynamic-module=../$_modname
39
make modules
40
}
41
42
package() {
43
install -Dm644 "$srcdir/"$_modname/LICENSE \
44
"$pkgdir"/usr/share/licenses/$pkgname/LICENSE
45
46
cd "$srcdir"/nginx-$_nginxver/objs
47
for mod in *.so; do
48
install -Dm755 $mod "$pkgdir"/usr/lib/nginx/modules/$mod
49
done
50
}
51
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |