pa-dlna-git

maintainer dreieck · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The non-standard host is readthedocs.io, which hosts documentation; the downloaded PDF is non-executable data, posing no code execution risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The non-standard host is readthedocs.io, which hosts documentation; the downloaded PDF is non-executable data, posing no code execution risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:59 "pa-dlna-${pkgver}.pdf::https://pa-dlna.readthedocs.io/_/downloads/en/latest/pdf/"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer:  dreieck (https://aur.archlinux.org/account/dreieck)
    
      2# Contributor: pika02 (https://aur.archlinux.org/account/pika02, <pikakolendo02 ät gmail döt com>)
    
      3# Contributor: Cygn
    
      4# Contributor: masmu
    
      5
    
      6_pkgname=pa-dlna
    
      7pkgname="${_pkgname}-git"
    
      8pkgver=1.1+3.r448.20251004.b401cdf
    
      9pkgrel=2
    
      10pkgdesc="Forwards audio streams to DLNA devices. For PulseAudio or PipeWira (via 'python-libpulse'). Latest git checkout."
    
      11arch=(
    
      12  'any'
    
      13)
    
      14url="https://gitlab.com/xdegaye/pa-dlna"
    
      15license=('MIT')
    
      16provides=(
    
      17  "pa-dlna=${pkgver}"
    
      18  "upnp-cmd=${pkgver}"
    
      19  "upnp-cmd-git=${pkgver}"
    
      20  "pa-dlna-doc=${pkgver}"
    
      21  "pa-dlna-doc-git=${pkgver}"
    
      22  "python-pa_dlna=${pkgver}"
    
      23  "python-pa_dlna-git=${pkgver}"
    
      24  "PULSEAUDIO-DLNA-SINK"
    
      25)
    
      26conflicts=(
    
      27  "pa-dlna"
    
      28  "upnp-cmd"
    
      29  "python-pa_dlna"
    
      30  "pa-dlna-doc"
    
      31)
    
      32depends=(
    
      33  'libpulse' # For `parec` executable
    
      34  'python>=3.8'
    
      35  'python-psutil'
    
      36  'python-libpulse'
    
      37)
    
      38makedepends=(
    
      39  'git'
    
      40  'python-build'
    
      41  'python-flit-core'
    
      42  'python-installer'
    
      43  # 'python-setuptools'
    
      44  'python-sphinx'
    
      45  'python-sphinx_rtd_theme'
    
      46  'python-wheel'
    
      47  'texinfo'
    
      48)
    
      49optdepends=(
    
      50  'ffmpeg: multiple formats support'
    
      51  'flac: flac transcoding support'
    
      52  'lame: mp3 transcoding support'
    
      53  'pipewire-pulse: To be used by a local pipewire implementation'
    
      54  'pulse-native-provider: To be used by a local pulseaudio implementation'
    
      55  'python-systemd: For systemd support.'
    
      56)
    
      57source=(
    
      58  "${_pkgname}::git+${url}.git"
    
      59  "pa-dlna-${pkgver}.pdf::https://pa-dlna.readthedocs.io/_/downloads/en/latest/pdf/"
    
      60  "systemd-add-startup-delay.patch"
    
      61)
    
      62sha256sums=(
    
      63  'SKIP'
    
      64  'SKIP'
    
      65  'bc5a81514fea014b6179e2819f6fe9caed3f3983d910e34675ed41ea9a52f268'
    
      66)
    
      67
    
      68prepare() {
    
      69  cd "${srcdir}"
    
      70
    
      71  if [ -e "pa-dlna.pdf" ]; then
    
      72    rm "pa-dlna.pdf"
    
      73  fi
    
      74  ln -s "pa-dlna-${pkgver}.pdf" "pa-dlna.pdf"
    
      75
    
      76  cd "${srcdir}/${_pkgname}"
    
      77
    
      78  for _patch in "${srcdir}"/systemd-add-startup-delay.patch; do
    
      79    plain "Applying patch '$(basename "${_patch}" ...)'"
    
      80    patch -Np1 --follow-symlinks -i "${_patch}"
    
      81  done
    
      82
    
      83  git log > git.log
    
      84}
    
      85
    
      86pkgver() {
    
      87  cd "${srcdir}/${_pkgname}"
    
      88
    
      89  _ver="$(git describe  --tags | sed -E -e 's|^pa-dlna-||' -e 's|^[vV]||' | sed 's|-g[0-9a-fA-F]*$||' | tr '-' '+')"
    
      90  _rev="$(git rev-list --count HEAD)"
    
      91  _date="$(git log -1 --date=format:"%Y%m%d" --format="%ad")"
    
      92  _hash="$(git rev-parse --short HEAD)"
    
      93
    
      94  if [ -z "${_ver}" ]; then
    
      95    error "Version could not be determined."
    
      96    return 1
    
      97  else
    
      98    printf '%s' "${_ver}.r${_rev}.${_date}.${_hash}"
    
      99  fi
    
      100}
    
      101
    
      102build() {
    
      103  cd "${srcdir}/${_pkgname}"
    
      104
    
      105  python -m build --wheel --no-isolation
    
      106
    
      107  cd docs
    
      108  for _target in man info text html; do # qthelp # latexpdf (do not build here since it needs a lot of dependencies; we download prebuilt PDF from upstream instead.)
    
      109    make -j1 "${_target}"
    
      110  done
    
      111  gzip -9 build/man/*
    
      112  gzip -9 build/texinfo/*.info
    
      113}
    
      114
    
      115package() {
    
      116  cd "${srcdir}/${_pkgname}"
    
      117
    
      118  python -m installer --destdir="${pkgdir}" dist/*.whl
    
      119
    
      120  install -Dvm644 -t "${pkgdir}/usr/lib/systemd/user/" systemd/pa-dlna.service
    
      121
    
      122  _docfiles=(
    
      123    README.rst
    
      124    git.log
    
      125    "${srcdir}/pa-dlna.pdf"
    
      126    # docs/build/latex/pa-dlna.pdf
    
      127  )
    
      128  _docdirs=(
    
      129    docs/build/html
    
      130    # docs/build/qthelp
    
      131    docs/build/text
    
      132  )
    
      133  _manfiles=(
    
      134    docs/build/man/*.gz
    
      135  )
    
      136  _infofiles=(
    
      137    docs/build/texinfo/*.info.gz
    
      138  )
    
      139  _licensefiles=(
    
      140    LICENSE
    
      141  )
    
      142  install -dvm755 "${pkgdir}/usr/share/doc/${_pkgname}"
    
      143  for _docfile in "${_docfiles[@]}"; do
    
      144    install -Dvm644 -t "${pkgdir}/usr/share/doc/${_pkgname}" "${_docfile}"
    
      145  done
    
      146  for _docdir in "${_docdirs[@]}"; do
    
      147    cp -rv "${_docdir}" "${pkgdir}/usr/share/doc/${_pkgname}"/
    
      148  done
    
      149  for _manfile in "${_manfiles[@]}"; do
    
      150    _section="$(basename "${_manfile}" .gz | sed -E -e 's|^.*\.([^.]*)$|\1|')"
    
      151    install -Dvm644 -t "${pkgdir}/usr/share/man/man${_section}" "${_manfile}"
    
      152  done
    
      153  for _infofile in "${_infofiles[@]}"; do
    
      154    install -Dvm644 -t "${pkgdir}/usr/share/info" "${_infofile}"
    
      155  done
    
      156  for _licensefile in "${_licensefiles[@]}"; do
    
      157    install -Dvm644 -t "${pkgdir}/usr/share/licenses/${pkgname}" "${_licensefile}"
    
      158    ln -svr "${pkgdir}/usr/share/licenses/${pkgname}/$(basename "${_licensefile}")" "${pkgdir}/usr/share/doc/${_pkgname}"/
    
      159  done
    
      160}
    
      161
    
      162

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2