nted-docs

maintainer yochananmarqos · 1 votes · base nted · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The non-standard host (vsr.informatik.tu-chemnitz.de) is the project's own official university server as referenced in the package URL, and all sources including Debian patches from salsa.debian.org have verified sha256sums; this is normal AUR packaging of an open-source project.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 80%): The non-standard host (vsr.informatik.tu-chemnitz.de) is the project's own official university server as referenced in the package URL, and all sources including Debian patches from salsa.debian.org have verified sha256sums; this is normal AUR packaging of an open-source project.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:39 source=("https://vsr.informatik.tu-chemnitz.de/staff/jan/nted/sources/$pkgbase-$pkgver.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Mark Wagie <mark dot wagie at proton dot me>
    
      2# Contributor: Sergej Pupykin <pupykin.s+arch@gmail.com>
    
      3# Contributor: Wael Nasreddine <gandalf@siemens-mobiles.org>
    
      4# Contributor: Stefan Husmann <stefan-husmann@t-online.de>
    
      5pkgname=(
    
      6  'nted'
    
      7  'nted-docs'
    
      8)
    
      9pkgbase=nted
    
      10pkgver=1.10.18
    
      11pkgrel=8
    
      12_deb_rel=13.1
    
      13pkgdesc="Musical score editor"
    
      14arch=('x86_64')
    
      15url="https://vsr.informatik.tu-chemnitz.de/staff/jan/nted/nted.xhtml"
    
      16license=('GPL-2.0-or-later')
    
      17depends=(
    
      18  'alsa-lib'
    
      19  'cairo'
    
      20  'freetype2'
    
      21  'gdk-pixbuf2'
    
      22  'glib2'
    
      23  'glibc'
    
      24  'gtk3'
    
      25  'libgcc'
    
      26  'libstdc++'
    
      27  'libx11'
    
      28  'pango'
    
      29)
    
      30makedepends=(
    
      31  'desktop-file-utils'
    
      32  'docbook-xml'  ## docs
    
      33  'docbook-xsl'  ## docs
    
      34  'poxml'  ## docs
    
      35  'xmlto'  ## docs
    
      36  'yelp'  ## docs
    
      37)
    
      38_deb_url="https://salsa.debian.org/debian/nted/-/raw/debian/$pkgver-${_deb_rel}/debian/patches"
    
      39source=("https://vsr.informatik.tu-chemnitz.de/staff/jan/nted/sources/$pkgbase-$pkgver.tar.gz"
    
      40        "${_deb_url}/gtk3.patch"
    
      41        "${_deb_url}/automake.patch"
    
      42        "${_deb_url}/remove-encoding-key-in-desktop-file"
    
      43        "${_deb_url}/linking"
    
      44        "${_deb_url}/doc-requirements"
    
      45        "${_deb_url}/empty_page_reposit.patch"
    
      46        "${_deb_url}/fix-empty-captions.patch"
    
      47        "${_deb_url}/g++-4.7.patch"
    
      48        "${_deb_url}/Werror.patch"
    
      49        "${_deb_url}/fix-midi-import.patch"
    
      50        "${_deb_url}/fix-signage-of-char-arrays.patch"
    
      51        "${_deb_url}/series"
    
      52)
    
      53sha256sums=('808df3c851dbc4b24efdbf96c4e6ed28152deb301c4373268831f2a243e8f1ac'
    
      54            'a0381a01348e9a09e43958cd7d57a138828cfd60e0b12bcb2c0b6771cca3e580'
    
      55            '2d6494363edd25c70aa596f1c098cb428572e8edf90c625abd445add6f9b6dd2'
    
      56            '4ec9fab668621c6cd0a34a04b1ad988ea6fd592e20cbbfe2156379341cd6a009'
    
      57            '727502f1d44179d68028c048960d1ed85586ef843601c9e0ef4f6ff52ca60248'
    
      58            'c23727c130055ec1fde9d961917422e867fd944eca204a6be140e3ef59f53ff5'
    
      59            '5cb47e4e5c7310f26d41e8cc6a5f0cd51dffa65d6f545afcea8b6474d16f567d'
    
      60            'e897fc06cd0dbd5372473f06638257e9f009df08a2dfe4e8448655f544e52f39'
    
      61            '9f5626f15f58627d70f4eb67228d41a230526463b87df979e40166df38d0567d'
    
      62            'd3966f610a68335ddaabdf7188ac67ea3ff028074aeacdffeb4a0183ebe517b0'
    
      63            '63ab3ae361c575ec78feda32f728b3d5e872f643514eae37d549416a83d1f709'
    
      64            '86ad2b6290ca59ba53521868107b458117a9c2cf79e1aea4e5b8a616300545ff'
    
      65            '622599ba493ef7849ca324d01aee39f7595fb5182184f340cb70634f370717e2')
    
      66
    
      67prepare() {
    
      68  cd $pkgbase-$pkgver
    
      69
    
      70  # Debian patches
    
      71  while IFS= read -r patch; do
    
      72    patch -Np1 -i "$srcdir/${patch}"
    
      73  done < "$srcdir/series"
    
      74
    
      75  mv -f configure.in configure.ac
    
      76
    
      77  # Fix icon & remove deprecated category
    
      78  desktop-file-edit --set-icon="$pkgbase" --remove-category=Application \
    
      79    "datafiles/applications/$pkgbase.desktop"
    
      80}
    
      81
    
      82build() {
    
      83  cd "$pkgbase-$pkgver"
    
      84  aclocal
    
      85  automake --add-missing
    
      86  autoreconf
    
      87  ./configure --prefix=/usr
    
      88  make
    
      89}
    
      90
    
      91check() {
    
      92  cd "$pkgbase-$pkgver"
    
      93  desktop-file-validate "datafiles/applications/$pkgname.desktop"
    
      94}
    
      95
    
      96package_nted () {
    
      97  pushd "$pkgbase-$pkgver"
    
      98  make DESTDIR="$pkgdir" install
    
      99  popd
    
      100
    
      101  mkdir -p doc/usr/share
    
      102  mv {"$pkgdir",doc}/usr/share/doc/
    
      103}
    
      104
    
      105package_nted-docs () {
    
      106  pkgdesc+=" (HTML Documentation)"
    
      107  depends=()
    
      108
    
      109  mv doc/* "$pkgdir/"
    
      110}
    
      111

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 00:03:41	LOW	2
2026-08-13 00:17:07	LOW	2
2026-08-12 00:27:08	LOW	2
2026-08-11 23:24:43	LOW	2
2026-08-11 23:21:47	MEDIUM	1