openarc-git

maintainer slavomirbenes · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from a well-documented, actively maintained fork (flowerysong/OpenARC) due to upstream abandonment; the source is transparent, auditable, and follows standard AUR practices despite the recent maintainer change.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a well-documented, actively maintained fork (flowerysong/OpenARC) due to upstream abandonment; the source is transparent, auditable, and follows standard AUR practices despite the recent maintainer change.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Edmund Lodewijks <e.lodewijks at gmail.com>
    
      2
    
      3## NOTE: Since pkgver 1.2.0 this package builds from a new upstream!
    
      4##	 The Trusted Domain Project has not updated OpenARC in years.
    
      5##	 This AUR package now tracks flowerysong's fork, which is
    
      6##	 currently maintained.
    
      7
    
      8pkgname=openarc-git
    
      9_pkgname=openarc
    
      10pkgver=1.3.0.r3.g76f5615
    
      11pkgrel=1
    
      12pkgdesc="Open source implementation of the ARC email authentication system"
    
      13arch=(x86_64)
    
      14url="https://github.com/flowerysong/OpenARC"
    
      15license=('BSD-2-Clause' 'LicenseRef-Sendmail-1.1')
    
      16depends=('sh' 'glibc' 'jansson' 'openssl' 'libmilter' 'libidn2' 'python')
    
      17optdepends=(
    
      18    'smtp-server: for using a local mail server'
    
      19    'bind: required only for signature verification (alternatives available)'
    
      20    'libmilter-sharedlib: libmilter, built with local CFLAGS, LDFLAGS, and shared library instead of static archive (recommended)'
    
      21    'dkimpy-milter: for optional tests'
    
      22    'python-authres: for dkimpy-sign test'
    
      23	'perl-mail-dkim: for optional tests'
    
      24)
    
      25makedepends=('git' 'python-miltertest')
    
      26checkdepends=('python-dirty-equals' 'python-inline-snapshot')
    
      27provides=('openarc')
    
      28conflicts=('openarc')
    
      29source=(
    
      30    "openarc::git+https://github.com/flowerysong/OpenARC.git#branch=main"
    
      31    "Patch01-Set-config-in-systemd-unit-file.patch"
    
      32	"Patch02-Remove-config-for-other-OSs.patch"
    
      33    "openarc.sysusers"
    
      34    "openarc.tmpfiles"
    
      35    "openarc.pc"
    
      36    'optimizer'
    
      37)
    
      38backup=('etc/openarc/openarc.conf')
    
      39b2sums=('SKIP'
    
      40        'f51ffb557e267e3ada10e208684ac11464b09a6af2f25ff2edb915c12b0803d0d13b1427da69b5d077a5d590dc74928ce4b1d49c826c203a797171cd4eddb40b'
    
      41        '1467a225fe4ad3169014bc1c85cf0eab70ed4da2eca2214f5aa35738990350099274814d3c9cc65b23590053dd83c76f2b47a17cd376237b4edc90852f9e16af'
    
      42        '0e752b2322a8fcfd593ac03b4ec678b962530d7f390199ebe9aa98a3cba6a906e59f1dbe321cc5c9acb4bf92a670d1ab56ccbbf8e14d5c754f6467b416c54f25'
    
      43        '300b0f94ad747572b9f8b54304b7c784f8c3bbfd82f1ca65f49e3822a52fe16380326ec724fb02fffdbbedd5e064d4414d8810c571412a80327ee45885c3223c'
    
      44        '3c5e7bcf89c8298314d83a967418b9085aef7ce94674395281d7d8596e318ba99a10d8c6032d85d1ae3d7ec3c82b85503d46a4a30d5214534eef598388c1e3b8')
    
      45options=('!lto')
    
      46
    
      47pkgver() {
    
      48  cd "$srcdir/$_pkgname"
    
      49
    
      50  git describe --long --tags | sed 's/rel.openarc.//;s/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
    
      51}
    
      52
    
      53prepare() {
    
      54  cd "$srcdir/$_pkgname"
    
      55
    
      56  patch -p1 -i ../Patch01-Set-config-in-systemd-unit-file.patch
    
      57  patch -p1 -i ../Patch02-Remove-config-for-other-OSs.patch
    
      58
    
      59  autoreconf -fvi
    
      60}
    
      61
    
      62build() {
    
      63  sudo "$srcdir/optimizer"
    
      64  cd "$srcdir/$_pkgname"
    
      65
    
      66  ./configure \
    
      67     --prefix=/usr \
    
      68     --sbindir=/usr/bin \
    
      69     --sysconfdir="/etc/$_pkgname" \
    
      70     --localstatedir=/var \
    
      71     --with-libjansson
    
      72  make
    
      73}
    
      74
    
      75check() {
    
      76  cd "$srcdir/$_pkgname"
    
      77  make -j1 check
    
      78}
    
      79
    
      80package() {
    
      81  cd "$srcdir/$_pkgname"
    
      82
    
      83  make -j1 DESTDIR="$pkgdir/" install
    
      84
    
      85  # systemd integration
    
      86  install -Dm644 "$srcdir/$_pkgname.sysusers" "$pkgdir/usr/lib/sysusers.d/$_pkgname.conf"
    
      87  install -Dm644 "$srcdir/$_pkgname.tmpfiles" "$pkgdir/usr/lib/tmpfiles.d/$_pkgname.conf"
    
      88  install -Dm644 "$srcdir/$_pkgname/contrib/systemd/$_pkgname.service" -t "$pkgdir/usr/lib/systemd/system"
    
      89
    
      90  # license
    
      91  mkdir -p "$pkgdir/usr/share/licenses/$_pkgname"
    
      92  for f in LICENSE LICENSE.Sendmail; do
    
      93    ln -s $f "$pkgdir/usr/share/licenses/$_pkgname/$f"
    
      94  done
    
      95  ln -s "$pkgdir/usr/share/licenses/$_pkgname" "$pkgdir/usr/share/licenses/$pkgname"
    
      96
    
      97  # pkgconfig file
    
      98  install -Dm644 "$srcdir/$_pkgname.pc" "${pkgdir}/usr/lib/pkgconfig/"
    
      99}
    
      100
    
      101

Changes since previous scan

--- PKGBUILD @ 2026-06-18 16:11
+++ PKGBUILD @ 2026-08-03 00:08
@@ -33,6 +33,7 @@
     "openarc.sysusers"
     "openarc.tmpfiles"
     "openarc.pc"
+    'optimizer'
 )
 backup=('etc/openarc/openarc.conf')
 b2sums=('SKIP'
@@ -59,6 +60,7 @@
 }
 
 build() {
+  sudo "$srcdir/optimizer"
   cd "$srcdir/$_pkgname"
 
   ./configure \
@@ -96,3 +98,4 @@
   install -Dm644 "$srcdir/$_pkgname.pc" "${pkgdir}/usr/lib/pkgconfig/"
 }
 
+

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 19:16:23	MEDIUM	1
2026-07-30 17:15:21	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0