nted-docs
LOW
maintainer yochananmarqos
1 votes
base
nted
scanned 2026-10-02 00:00:32.890515
Why flagged
The non-standard host (vsr.informatik.tu-chemnitz.de) is the project's own official university server as referenced in the package URL, and all sources including Debian patches from salsa.debian.org have verified sha256sums; this is normal AUR packaging of an open-source project.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 80%): The non-standard host (vsr.informatik.tu-chemnitz.de) is the project's own official university server as referenced in the package URL, and all sources including Debian patches from salsa.debian.org have verified sha256sums; this is normal AUR packaging of an open-source project.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:39
source=("https://vsr.informatik.tu-chemnitz.de/staff/jan/nted/sources/$pkgbase-$pkgver.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Mark Wagie <mark dot wagie at proton dot me>
2
# Contributor: Sergej Pupykin <pupykin.s+arch@gmail.com>
3
# Contributor: Wael Nasreddine <gandalf@siemens-mobiles.org>
4
# Contributor: Stefan Husmann <stefan-husmann@t-online.de>
5
pkgname=(
6
'nted'
7
'nted-docs'
8
)
9
pkgbase=nted
10
pkgver=1.10.18
11
pkgrel=8
12
_deb_rel=13.1
13
pkgdesc="Musical score editor"
14
arch=('x86_64')
15
url="https://vsr.informatik.tu-chemnitz.de/staff/jan/nted/nted.xhtml"
16
license=('GPL-2.0-or-later')
17
depends=(
18
'alsa-lib'
19
'cairo'
20
'freetype2'
21
'gdk-pixbuf2'
22
'glib2'
23
'glibc'
24
'gtk3'
25
'libgcc'
26
'libstdc++'
27
'libx11'
28
'pango'
29
)
30
makedepends=(
31
'desktop-file-utils'
32
'docbook-xml' ## docs
33
'docbook-xsl' ## docs
34
'poxml' ## docs
35
'xmlto' ## docs
36
'yelp' ## docs
37
)
38
_deb_url="https://salsa.debian.org/debian/nted/-/raw/debian/$pkgver-${_deb_rel}/debian/patches"
39
source=("https://vsr.informatik.tu-chemnitz.de/staff/jan/nted/sources/$pkgbase-$pkgver.tar.gz"
40
"${_deb_url}/gtk3.patch"
41
"${_deb_url}/automake.patch"
42
"${_deb_url}/remove-encoding-key-in-desktop-file"
43
"${_deb_url}/linking"
44
"${_deb_url}/doc-requirements"
45
"${_deb_url}/empty_page_reposit.patch"
46
"${_deb_url}/fix-empty-captions.patch"
47
"${_deb_url}/g++-4.7.patch"
48
"${_deb_url}/Werror.patch"
49
"${_deb_url}/fix-midi-import.patch"
50
"${_deb_url}/fix-signage-of-char-arrays.patch"
51
"${_deb_url}/series"
52
)
53
sha256sums=('808df3c851dbc4b24efdbf96c4e6ed28152deb301c4373268831f2a243e8f1ac'
54
'a0381a01348e9a09e43958cd7d57a138828cfd60e0b12bcb2c0b6771cca3e580'
55
'2d6494363edd25c70aa596f1c098cb428572e8edf90c625abd445add6f9b6dd2'
56
'4ec9fab668621c6cd0a34a04b1ad988ea6fd592e20cbbfe2156379341cd6a009'
57
'727502f1d44179d68028c048960d1ed85586ef843601c9e0ef4f6ff52ca60248'
58
'c23727c130055ec1fde9d961917422e867fd944eca204a6be140e3ef59f53ff5'
59
'5cb47e4e5c7310f26d41e8cc6a5f0cd51dffa65d6f545afcea8b6474d16f567d'
60
'e897fc06cd0dbd5372473f06638257e9f009df08a2dfe4e8448655f544e52f39'
61
'9f5626f15f58627d70f4eb67228d41a230526463b87df979e40166df38d0567d'
62
'd3966f610a68335ddaabdf7188ac67ea3ff028074aeacdffeb4a0183ebe517b0'
63
'63ab3ae361c575ec78feda32f728b3d5e872f643514eae37d549416a83d1f709'
64
'86ad2b6290ca59ba53521868107b458117a9c2cf79e1aea4e5b8a616300545ff'
65
'622599ba493ef7849ca324d01aee39f7595fb5182184f340cb70634f370717e2')
66
67
prepare() {
68
cd $pkgbase-$pkgver
69
70
# Debian patches
71
while IFS= read -r patch; do
72
patch -Np1 -i "$srcdir/${patch}"
73
done < "$srcdir/series"
74
75
mv -f configure.in configure.ac
76
77
# Fix icon & remove deprecated category
78
desktop-file-edit --set-icon="$pkgbase" --remove-category=Application \
79
"datafiles/applications/$pkgbase.desktop"
80
}
81
82
build() {
83
cd "$pkgbase-$pkgver"
84
aclocal
85
automake --add-missing
86
autoreconf
87
./configure --prefix=/usr
88
make
89
}
90
91
check() {
92
cd "$pkgbase-$pkgver"
93
desktop-file-validate "datafiles/applications/$pkgname.desktop"
94
}
95
96
package_nted () {
97
pushd "$pkgbase-$pkgver"
98
make DESTDIR="$pkgdir" install
99
popd
100
101
mkdir -p doc/usr/share
102
mv {"$pkgdir",doc}/usr/share/doc/
103
}
104
105
package_nted-docs () {
106
pkgdesc+=" (HTML Documentation)"
107
depends=()
108
109
mv doc/* "$pkgdir/"
110
}
111
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-02 00:00:32 | Low | 2 |
| 2026-10-01 00:02:06 | Low | 2 |
| 2026-09-30 00:20:07 | Low | 2 |
| 2026-09-29 00:07:46 | Low | 2 |
| 2026-09-28 00:28:32 | Low | 2 |
| 2026-09-27 00:07:07 | Low | 2 |
| 2026-09-26 00:12:15 | Low | 2 |
| 2026-09-25 00:03:36 | Low | 2 |
| 2026-09-24 00:24:14 | Low | 2 |
| 2026-09-23 00:28:13 | Low | 2 |
| 2026-09-22 00:15:14 | Low | 2 |
| 2026-09-21 00:26:32 | Low | 2 |
| 2026-09-20 00:25:31 | Low | 2 |
| 2026-09-19 00:25:36 | Low | 2 |
| 2026-09-18 00:17:11 | Low | 2 |
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |