perl-http-proxy
LOW
maintainer orphaned
4 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a Perl module tarball from a CPAN mirror, which is a standard and trusted source for Perl packages; building from a non-whitelisted but official-like mirror is normal for AUR packages and poses low risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Perl module tarball from a CPAN mirror, which is a standard and trusted source for Perl packages; building from a non-whitelisted but official-like mirror is normal for AUR packages and poses low risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:10
source=("http://mirror.ibcp.fr/pub/CPAN/authors/id/B/BO/BOOK/HTTP-Proxy-${pkgver}.tar.gz" "HTTP-Proxy-0.304-Support-IPv6.patch" "HTTP-Proxy-0.304-Fix-Empty-Read.patch" "HTTP-Proxy-0.304-Fix-Test.patch")
PKGBUILD
1 offending line(s) highlighted
1
# Contributor: zeppelinlg <zeppelinlg DOT quenot AT gmail DOT com>
2
pkgname='perl-http-proxy'
3
pkgver='0.304'
4
pkgrel='3'
5
pkgdesc="HTTP proxy"
6
arch=('i686' 'x86_64')
7
license=('PerlArtistic' 'GPL')
8
makedepends=('perl-libwww' 'perl-test-simple')
9
url='http://search.cpan.org/dist/HTTP-Proxy'
10
source=("http://mirror.ibcp.fr/pub/CPAN/authors/id/B/BO/BOOK/HTTP-Proxy-${pkgver}.tar.gz" "HTTP-Proxy-0.304-Support-IPv6.patch" "HTTP-Proxy-0.304-Fix-Empty-Read.patch" "HTTP-Proxy-0.304-Fix-Test.patch")
11
md5sums=('09ac64c5f67b7d8baff4ea135d74af48'
12
'd5065310dd4c4235cfd5421a167b8d1f'
13
'0f95f4272188d3f570d5543abb305282'
14
'b11bb3e0b53587a5105d03fc194968d4')
15
_dist_dir="HTTP-Proxy-${pkgver}"
16
17
prepare() {
18
cd "$_dist_dir"
19
# Fix bug #120275. https://rt.cpan.org/Public/Bug/Display.html?id=120275
20
patch -Np1 -i "${srcdir}/HTTP-Proxy-0.304-Support-IPv6.patch"
21
# Fix bug. http://www.cpantesters.org/cpan/report/b7d0a086-d278-11e5-a2ee-9fa967b6c32e
22
# https://github.com/book/HTTP-Proxy/issues/7
23
patch -Np1 -i "${srcdir}/HTTP-Proxy-0.304-Fix-Empty-Read.patch"
24
#Patch from https://rt.cpan.org/Public/Bug/Display.html?id=123067
25
patch -Np1 -i "${srcdir}/HTTP-Proxy-0.304-Fix-Test.patch"
26
}
27
28
build() {
29
( export PERL_MM_USE_DEFAULT=1 PERL5LIB="" \
30
PERL_AUTOINSTALL=--skipdeps \
31
PERL_MM_OPT="INSTALLDIRS=vendor DESTDIR='$pkgdir'" \
32
PERL_MB_OPT="--installdirs vendor --destdir '$pkgdir'" \
33
MODULEBUILDRC=/dev/null
34
35
cd "$_dist_dir"
36
/usr/bin/perl Makefile.PL
37
make
38
)
39
}
40
41
check() {
42
cd "$_dist_dir"
43
( export PERL_MM_USE_DEFAULT=1 PERL5LIB=""
44
make test
45
)
46
}
47
48
package() {
49
cd "$_dist_dir"
50
make install
51
52
find "$pkgdir" -name .packlist -o -name perllocal.pod -delete
53
}
54
55
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |