nginx-rtmp-sergey-git
LOW
maintainer orphaned
3 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source uses a non-whitelisted host (GitHub) for the nginx-rtmp-module, but it is a legitimate project fork with a pinned commit; the module is built from source and not executed remotely, posing minimal risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source uses a non-whitelisted host (GitHub) for the nginx-rtmp-module, but it is a legitimate project fork with a pinned commit; the module is built from source and not executed remotely, posing minimal risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:26
source=(https://nginx.org/download/nginx-$_nginx_ver.tar.gz
PKGBUILD
1 offending line(s) highlighted
1
# PKGBUILD Author: Hui Yiqun <huiyiqun@gmail.com>
2
# Maintainer: pan93412 <pan93412@gmail.com>
3
4
_pkgname=nginx
5
pkgname=$_pkgname-rtmp-sergey-git
6
_nginx_ver=1.18.0
7
_rtmp_commit_id=23ec4ce
8
pkgver=$_nginx_ver"_"$_rtmp_commit_id
9
pkgrel=0
10
pkgdesc='NGINX-based Media Streaming Server, forked by Sergey Dryabzhinsky.'
11
arch=(x86_64)
12
url='https://github.com/sergey-dryabzhinsky/nginx-rtmp-module'
13
license=(custom)
14
depends=(pcre zlib openssl geoip mailcap)
15
makedepends=(git)
16
backup=(etc/nginx/fastcgi.conf
17
etc/nginx/fastcgi_params
18
etc/nginx/koi-win
19
etc/nginx/koi-utf
20
etc/nginx/nginx.conf
21
etc/nginx/scgi_params
22
etc/nginx/uwsgi_params
23
etc/nginx/win-utf
24
etc/logrotate.d/nginx)
25
install=nginx.install
26
source=(https://nginx.org/download/nginx-$_nginx_ver.tar.gz
27
"nginx-rtmp-module-$_rtmp_commit_id::git+https://github.com/sergey-dryabzhinsky/nginx-rtmp-module#commit=$_rtmp_commit_id"
28
service
29
logrotate)
30
provides=('nginx')
31
conflicts=('nginx')
32
sha256sums=('4c373e7ab5bf91d34a4f11a0c9496561061ba5eee6020db272a17a7228d35f99'
33
'SKIP'
34
'65f5af0f27ce3c5263d99d70a57fd3b0cb62aa99df786205029e68563e41e1ee'
35
'06ebe161af3e761f2e2e35a67c6c0af27bf61aea7cd4ba8b28372ced5e3b3175')
36
37
_common_flags=(
38
--with-compat
39
--with-file-aio
40
--with-http_addition_module
41
--with-http_auth_request_module
42
--with-http_dav_module
43
--with-http_degradation_module
44
--with-http_flv_module
45
--with-http_geoip_module
46
--with-http_gunzip_module
47
--with-http_gzip_static_module
48
--with-http_mp4_module
49
--with-http_realip_module
50
--with-http_secure_link_module
51
--with-http_slice_module
52
--with-http_ssl_module
53
--with-http_stub_status_module
54
--with-http_sub_module
55
--with-http_v2_module
56
--with-mail
57
--with-mail_ssl_module
58
--with-pcre-jit
59
--with-stream
60
--with-stream_geoip_module
61
--with-stream_realip_module
62
--with-stream_ssl_module
63
--with-stream_ssl_preread_module
64
--with-threads
65
)
66
67
_stable_flags=(
68
)
69
70
build() {
71
cd $_pkgname-$_nginx_ver
72
73
./configure \
74
--prefix=/etc/nginx \
75
--conf-path=/etc/nginx/nginx.conf \
76
--sbin-path=/usr/bin/nginx \
77
--pid-path=/run/nginx.pid \
78
--lock-path=/run/lock/nginx.lock \
79
--user=http \
80
--group=http \
81
--http-log-path=/var/log/nginx/access.log \
82
--error-log-path=stderr \
83
--http-client-body-temp-path=/var/lib/nginx/client-body \
84
--http-proxy-temp-path=/var/lib/nginx/proxy \
85
--http-fastcgi-temp-path=/var/lib/nginx/fastcgi \
86
--http-scgi-temp-path=/var/lib/nginx/scgi \
87
--http-uwsgi-temp-path=/var/lib/nginx/uwsgi \
88
--add-module=$srcdir/nginx-rtmp-module-$_rtmp_commit_id \
89
${_common_flags[@]} \
90
${_stable_flags[@]}
91
92
make
93
}
94
95
package() {
96
cd $_pkgname-$_nginx_ver
97
make DESTDIR="$pkgdir" install
98
99
sed -e 's|\<user\s\+\w\+;|user html;|g' \
100
-e '44s|html|/usr/share/nginx/html|' \
101
-e '54s|html|/usr/share/nginx/html|' \
102
-i "$pkgdir"/etc/nginx/nginx.conf
103
104
rm "$pkgdir"/etc/nginx/*.default
105
rm "$pkgdir"/etc/nginx/mime.types # in mailcap
106
107
install -d "$pkgdir"/var/lib/nginx
108
install -dm700 "$pkgdir"/var/lib/nginx/proxy
109
110
chmod 755 "$pkgdir"/var/log/nginx
111
chown root:root "$pkgdir"/var/log/nginx
112
113
install -d "$pkgdir"/usr/share/nginx
114
mv "$pkgdir"/etc/nginx/html/ "$pkgdir"/usr/share/nginx
115
116
install -Dm644 ../logrotate "$pkgdir"/etc/logrotate.d/nginx
117
install -Dm644 ../service "$pkgdir"/usr/lib/systemd/system/nginx.service
118
install -Dm644 LICENSE "$pkgdir"/usr/share/licenses/$_pkgname/LICENSE
119
install -Dm644 ../nginx-rtmp-module-$_rtmp_commit_id/LICENSE "$pkgdir"/usr/share/licenses/nginx-rtmp-sergey-git/LICENSE
120
121
rmdir "$pkgdir"/run
122
123
install -d "$pkgdir"/usr/share/man/man8/
124
gzip -9c man/nginx.8 > "$pkgdir"/usr/share/man/man8/nginx.8.gz
125
126
for i in ftdetect indent syntax; do
127
install -Dm644 contrib/vim/$i/nginx.vim \
128
"$pkgdir/usr/share/vim/vimfiles/$i/nginx.vim"
129
done
130
}
131
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |