nginx-rtmp-sergey-git
maintainer orphaned
· 3 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The source uses a non-whitelisted host (GitHub) for the nginx-rtmp-module, but it is a legitimate project fork with a pinned commit; the module is built from source and not executed remotely, posing minimal risk.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source uses a non-whitelisted host (GitHub) for the nginx-rtmp-module, but it is a legitimate project fork with a pinned commit; the module is built from source and not executed remotely, posing minimal risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:26
source=(https://nginx.org/download/nginx-$_nginx_ver.tar.gz
PKGBUILD
1 offending line(s) highlighted
1
# PKGBUILD Author: Hui Yiqun <huiyiqun@gmail.com>
2
# Maintainer: pan93412 <pan93412@gmail.com>
3
4
_pkgname=nginx
5
pkgname=$_pkgname-rtmp-sergey-git
6
_nginx_ver=1.18.0
7
_rtmp_commit_id=23ec4ce
8
pkgver=$_nginx_ver"_"$_rtmp_commit_id
9
pkgrel=0
10
pkgdesc='NGINX-based Media Streaming Server, forked by Sergey Dryabzhinsky.'
11
arch=(x86_64)
12
url='https://github.com/sergey-dryabzhinsky/nginx-rtmp-module'
13
license=(custom)
14
depends=(pcre zlib openssl geoip mailcap)
15
makedepends=(git)
16
backup=(etc/nginx/fastcgi.conf
17
etc/nginx/fastcgi_params
18
etc/nginx/koi-win
19
etc/nginx/koi-utf
20
etc/nginx/nginx.conf
21
etc/nginx/scgi_params
22
etc/nginx/uwsgi_params
23
etc/nginx/win-utf
24
etc/logrotate.d/nginx)
25
install=nginx.install
26
source=(https://nginx.org/download/nginx-$_nginx_ver.tar.gz
27
"nginx-rtmp-module-$_rtmp_commit_id::git+https://github.com/sergey-dryabzhinsky/nginx-rtmp-module#commit=$_rtmp_commit_id"
28
service
29
logrotate)
30
provides=('nginx')
31
conflicts=('nginx')
32
sha256sums=('4c373e7ab5bf91d34a4f11a0c9496561061ba5eee6020db272a17a7228d35f99'
33
'SKIP'
34
'65f5af0f27ce3c5263d99d70a57fd3b0cb62aa99df786205029e68563e41e1ee'
35
'06ebe161af3e761f2e2e35a67c6c0af27bf61aea7cd4ba8b28372ced5e3b3175')
36
37
_common_flags=(
38
--with-compat
39
--with-file-aio
40
--with-http_addition_module
41
--with-http_auth_request_module
42
--with-http_dav_module
43
--with-http_degradation_module
44
--with-http_flv_module
45
--with-http_geoip_module
46
--with-http_gunzip_module
47
--with-http_gzip_static_module
48
--with-http_mp4_module
49
--with-http_realip_module
50
--with-http_secure_link_module
51
--with-http_slice_module
52
--with-http_ssl_module
53
--with-http_stub_status_module
54
--with-http_sub_module
55
--with-http_v2_module
56
--with-mail
57
--with-mail_ssl_module
58
--with-pcre-jit
59
--with-stream
60
--with-stream_geoip_module
61
--with-stream_realip_module
62
--with-stream_ssl_module
63
--with-stream_ssl_preread_module
64
--with-threads
65
)
66
67
_stable_flags=(
68
)
69
70
build() {
71
cd $_pkgname-$_nginx_ver
72
73
./configure \
74
--prefix=/etc/nginx \
75
--conf-path=/etc/nginx/nginx.conf \
76
--sbin-path=/usr/bin/nginx \
77
--pid-path=/run/nginx.pid \
78
--lock-path=/run/lock/nginx.lock \
79
--user=http \
80
--group=http \
81
--http-log-path=/var/log/nginx/access.log \
82
--error-log-path=stderr \
83
--http-client-body-temp-path=/var/lib/nginx/client-body \
84
--http-proxy-temp-path=/var/lib/nginx/proxy \
85
--http-fastcgi-temp-path=/var/lib/nginx/fastcgi \
86
--http-scgi-temp-path=/var/lib/nginx/scgi \
87
--http-uwsgi-temp-path=/var/lib/nginx/uwsgi \
88
--add-module=$srcdir/nginx-rtmp-module-$_rtmp_commit_id \
89
${_common_flags[@]} \
90
${_stable_flags[@]}
91
92
make
93
}
94
95
package() {
96
cd $_pkgname-$_nginx_ver
97
make DESTDIR="$pkgdir" install
98
99
sed -e 's|\<user\s\+\w\+;|user html;|g' \
100
-e '44s|html|/usr/share/nginx/html|' \
101
-e '54s|html|/usr/share/nginx/html|' \
102
-i "$pkgdir"/etc/nginx/nginx.conf
103
104
rm "$pkgdir"/etc/nginx/*.default
105
rm "$pkgdir"/etc/nginx/mime.types # in mailcap
106
107
install -d "$pkgdir"/var/lib/nginx
108
install -dm700 "$pkgdir"/var/lib/nginx/proxy
109
110
chmod 755 "$pkgdir"/var/log/nginx
111
chown root:root "$pkgdir"/var/log/nginx
112
113
install -d "$pkgdir"/usr/share/nginx
114
mv "$pkgdir"/etc/nginx/html/ "$pkgdir"/usr/share/nginx
115
116
install -Dm644 ../logrotate "$pkgdir"/etc/logrotate.d/nginx
117
install -Dm644 ../service "$pkgdir"/usr/lib/systemd/system/nginx.service
118
install -Dm644 LICENSE "$pkgdir"/usr/share/licenses/$_pkgname/LICENSE
119
install -Dm644 ../nginx-rtmp-module-$_rtmp_commit_id/LICENSE "$pkgdir"/usr/share/licenses/nginx-rtmp-sergey-git/LICENSE
120
121
rmdir "$pkgdir"/run
122
123
install -d "$pkgdir"/usr/share/man/man8/
124
gzip -9c man/nginx.8 > "$pkgdir"/usr/share/man/man8/nginx.8.gz
125
126
for i in ftdetect indent syntax; do
127
install -Dm644 contrib/vim/$i/nginx.vim \
128
"$pkgdir/usr/share/vim/vimfiles/$i/nginx.vim"
129
done
130
}
131
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |