nweb

LOW

maintainer TrialnError 4 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The external download in prepare() fetches only license text from the project's official website, not executable code, posing minimal risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The external download in prepare() fetches only license text from the project's official website, not executable code, posing minimal risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium External download from an untrusted host, not in source=() external_download_not_in_source

curl/wget fetches a URL on a non-allowlisted host that is not part of source=(), so it is not checksum-verified by makepkg.

PKGBUILD:17 curl "https://nmon.sourceforge.io/pmwiki.php?n=Site.Nweb" | grep license > LICENSE

PKGBUILD

1 offending line(s) highlighted

      1# Contributor: Lex Black <autumn-wind@web.de>
    
      2# Contributor: Alexander Rødseth <rodseth@gmail.com>
    
      3
    
      4pkgname=nweb
    
      5pkgver=25
    
      6pkgrel=1
    
      7pkgdesc='Tiny web server for serving static pages'
    
      8arch=('x86_64' 'i686')
    
      9url='https://nmon.sourceforge.io/pmwiki.php?n=Site.Nweb'
    
      10license=('custom')
    
      11depends=(glibc)
    
      12source=(https://sourceforge.net/projects/nmon/files/nweb${pkgver}.c)
    
      13sha256sums=('5f22d4b27854a3a08fed21c46d68f49b3a2ee666cd9c5664705ace3f047b3553')
    
      14
    
      15
    
      16prepare() {
    
      17  curl "https://nmon.sourceforge.io/pmwiki.php?n=Site.Nweb" | grep license > LICENSE
    
      18}
    
      19
    
      20build() {
    
      21  gcc -std=c11 -O3 -DLINUX nweb${pkgver}.c -o nweb -w
    
      22}
    
      23
    
      24package() {
    
      25  install -Dm755 nweb "$pkgdir/usr/bin/nweb"
    
      26  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      27}
    
      28
    
      29# vim:set ts=2 sw=2 et:
    
      30

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2