perl-http-proxy

maintainer orphaned · 4 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The source is a Perl module tarball from a CPAN mirror, which is a standard and trusted source for Perl packages; building from a non-whitelisted but official-like mirror is normal for AUR packages and poses low risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Perl module tarball from a CPAN mirror, which is a standard and trusted source for Perl packages; building from a non-whitelisted but official-like mirror is normal for AUR packages and poses low risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:10 source=("http://mirror.ibcp.fr/pub/CPAN/authors/id/B/BO/BOOK/HTTP-Proxy-${pkgver}.tar.gz" "HTTP-Proxy-0.304-Support-IPv6.patch" "HTTP-Proxy-0.304-Fix-Empty-Read.patch" "HTTP-Proxy-0.304-Fix-Test.patch")

PKGBUILD

1 offending line(s) highlighted
1# Contributor: zeppelinlg <zeppelinlg DOT quenot AT gmail DOT com>
2pkgname='perl-http-proxy'
3pkgver='0.304'
4pkgrel='3'
5pkgdesc="HTTP proxy"
6arch=('i686' 'x86_64')
7license=('PerlArtistic' 'GPL')
8makedepends=('perl-libwww' 'perl-test-simple')
9url='http://search.cpan.org/dist/HTTP-Proxy'
10source=("http://mirror.ibcp.fr/pub/CPAN/authors/id/B/BO/BOOK/HTTP-Proxy-${pkgver}.tar.gz" "HTTP-Proxy-0.304-Support-IPv6.patch" "HTTP-Proxy-0.304-Fix-Empty-Read.patch" "HTTP-Proxy-0.304-Fix-Test.patch")
11md5sums=('09ac64c5f67b7d8baff4ea135d74af48'
12 'd5065310dd4c4235cfd5421a167b8d1f'
13 '0f95f4272188d3f570d5543abb305282'
14 'b11bb3e0b53587a5105d03fc194968d4')
15_dist_dir="HTTP-Proxy-${pkgver}"
16
17prepare() {
18 cd "$_dist_dir"
19 # Fix bug #120275. https://rt.cpan.org/Public/Bug/Display.html?id=120275
20 patch -Np1 -i "${srcdir}/HTTP-Proxy-0.304-Support-IPv6.patch"
21 # Fix bug. http://www.cpantesters.org/cpan/report/b7d0a086-d278-11e5-a2ee-9fa967b6c32e
22 # https://github.com/book/HTTP-Proxy/issues/7
23 patch -Np1 -i "${srcdir}/HTTP-Proxy-0.304-Fix-Empty-Read.patch"
24 #Patch from https://rt.cpan.org/Public/Bug/Display.html?id=123067
25 patch -Np1 -i "${srcdir}/HTTP-Proxy-0.304-Fix-Test.patch"
26}
27
28build() {
29 ( export PERL_MM_USE_DEFAULT=1 PERL5LIB="" \
30 PERL_AUTOINSTALL=--skipdeps \
31 PERL_MM_OPT="INSTALLDIRS=vendor DESTDIR='$pkgdir'" \
32 PERL_MB_OPT="--installdirs vendor --destdir '$pkgdir'" \
33 MODULEBUILDRC=/dev/null
34
35 cd "$_dist_dir"
36 /usr/bin/perl Makefile.PL
37 make
38 )
39}
40
41check() {
42 cd "$_dist_dir"
43 ( export PERL_MM_USE_DEFAULT=1 PERL5LIB=""
44 make test
45 )
46}
47
48package() {
49 cd "$_dist_dir"
50 make install
51
52 find "$pkgdir" -name .packlist -o -name perllocal.pod -delete
53}
54
55

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion