ntopng-bin

maintainer TheDL98 · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads prebuilt .deb binaries from the official ntop.org domain, which is the project's own release infrastructure; although the host is not a common whitelist entry, it is plausibly legitimate and the binaries are verified via b2sums, reducing risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt .deb binaries from the official ntop.org domain, which is the project's own release infrastructure; although the host is not a common whitelist entry, it is plausibly legitimate and the binaries are verified via b2sums, reducing risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:38 source_x86_64=("https://packages.ntop.org/apt/trixie/x64/ntopng_${_pkgverAmd64}.${_dateAmd64}-${_buildAmd64}_amd64.deb")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: AlphaJack <alphajack at tuta dot io>
    
      2# Contributor: Barry Smith <brrtsm at gmmal dot com>
    
      3# Contributor: TheDL98 <ahmed at thedl98 dot com>
    
      4
    
      5pkgname="ntopng-bin"
    
      6# to update visit https://packages.ntop.org/apt/trixie/x64/ and keep track of the latest pkgver, date and build
    
      7_pkgverAmd64=6.7
    
      8_dateAmd64=260125
    
      9_buildAmd64=27301
    
      10# to update visit https://packages.ntop.org/apt/bookworm_pi/arm64/ and keep track of the latest pkgver, date and build
    
      11_pkgverArm64=6.7
    
      12_dateArm64=260125
    
      13_buildArm64=27301
    
      14# to update visit https://packages.ntop.org/apt/buster_pi/armhf/ and keep track of the latest pkgver, date and build
    
      15_pkgverArm32=6.1
    
      16_dateArm32=240707
    
      17_buildArm32=23727
    
      18# updated automatically
    
      19pkgver="$_pkgverAmd64.$_dateAmd64"
    
      20pkgrel=1
    
      21pkgdesc="Web-based traffic monitoring"
    
      22url="https://www.ntop.org/"
    
      23license=("GPL3")
    
      24arch=("x86_64" "armv7h" "aarch64")
    
      25provides=("ntopng")
    
      26conflicts=("ntopng" "ntopng-git")
    
      27depends=("hiredis"
    
      28         "libcap"
    
      29         "libmariadbclient"
    
      30         "libmaxminddb"
    
      31         "rrdtool"
    
      32         "sqlite"
    
      33         "zeromq")
    
      34#optdepends=("ntopng-data")
    
      35source=("ntopng.sysusers"
    
      36	    "ntopng.tmpfiles"
    
      37	    "ntopng@.service")
    
      38source_x86_64=("https://packages.ntop.org/apt/trixie/x64/ntopng_${_pkgverAmd64}.${_dateAmd64}-${_buildAmd64}_amd64.deb")
    
      39source_aarch64=("https://packages.ntop.org/apt/bookworm_pi/arm64/ntopng_${_pkgverArm64}.${_dateArm64}-${_buildArm64}_arm64.deb")
    
      40source_armv7h=("https://packages.ntop.org/apt/buster_pi/armhf/ntopng_${_pkgverArm32}.${_dateArm32}-${_buildArm32}_armhf.deb")
    
      41b2sums=('c0ba0afb3fdeedaf57f54ce405cd5ce688bb5ed19d05cc21fbefca7ecda98bc5df2cf603e7ac92108763dc26c1ef391afdf69116bb13c03f8e2d3e75fe6bbda5'
    
      42        'ca912cbe9e43a5be67e2b487183e43615b93497a62515cad7b1468fab5e3dc9a2dc3fd2e8d88c12d54c91cb3b8c61ebe682c1e7dc5f3ea49aaf0d87aa2a9bbd1'
    
      43        'e374ff823b8218faf86c56e0794622954b09b41f5c893db08d3ad38ea1d4fe47733095853d1bf11041b1e4b476d01c1a1a495af40221d6e4e30a0ac223684fac')
    
      44b2sums_x86_64=('000339ce52d898253508388ef816a73654e88b8631e4e24917037e7a9f09a4d25aee736ccd647f501add4d540e7a74ad4a92b512f7d80863b5d6408c014a31f6')
    
      45b2sums_aarch64=('f0cafded2bbfed93f2c2cff289fe3afd6c08a0dc71c54a7217bb326c716c4e722f2ef075b7228684041fe17dde037738333bc2729f3fc08756d9f166386bf5e3')
    
      46b2sums_armv7h=('f2996f73459a37fe6cdf31d91d96f6bb7154133093c1202eee688aa58345b873db8ee00944955648a1994341b8619c6900f0b709d878517c9b92a466a961144a')
    
      47options=("!strip")
    
      48
    
      49prepare(){
    
      50 tar -xf "data.tar.xz"
    
      51}
    
      52
    
      53package(){
    
      54 # program files
    
      55 cp -r "usr" "$pkgdir"
    
      56 # systemd files
    
      57 install -D -m 644 "ntopng.sysusers" "$pkgdir/usr/lib/sysusers.d/ntopng.conf"
    
      58 install -D -m 644 "ntopng.tmpfiles" "$pkgdir/usr/lib/tmpfiles.d/ntopng.conf"
    
      59 install -D -m 644 "ntopng@.service" "$pkgdir/usr/lib/systemd/system/ntopng@.service"
    
      60}
    
      61

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2