perl-travel-status-de-efa-git

MEDIUM

maintainer dreieck 0 votes scanned 2026-09-05 16:00:23.828148

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:51 "${_perlmod}::git+http://git.finalrewind.org/${_perlmod}"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: dreieck
    
      2# Contributor: Jens Adam <jra@byte.cx>
    
      3
    
      4_perlmod=Travel-Status-DE-VRR
    
      5_pkgname=perl-travel-status-de-efa
    
      6pkgname="${_pkgname}-git"
    
      7_pkgver='latest'
    
      8epoch=1
    
      9pkgver=3.20+r368.20260419.g259ef20
    
      10pkgrel=1
    
      11pkgdesc='Commandline client and Perl module for EFA-based public transit routing interfaces provided by e.g. VRR or VVO. It can request itineraries for train/tram/bus/ferry connections throughout most of Germany, as well as parts of Austria, Switzerland and UK.'
    
      12url='http://finalrewind.org/projects/Travel-Status-DE-VRR/'
    
      13license=(
    
      14  'Artistic-1.0-Perl'
    
      15  'CC0-1.0'
    
      16)
    
      17arch=('any')
    
      18depends=(
    
      19  'perl>=5.10.1'
    
      20  'perl-class-accessor'
    
      21  'perl-datetime'
    
      22  'perl-datetime-format-strptime'
    
      23  'perl-getopt-long'
    
      24  'perl-json'
    
      25  'perl-lwp-protocol-https'
    
      26)
    
      27makedepends=(
    
      28  'curl>8.7.1' # Because of https://bugs.gentoo.org/930633 / https://github.com/curl/curl/issues/13474
    
      29  'git'
    
      30  'perl-module-build'
    
      31)
    
      32checkdepends=(
    
      33  'perl-file-slurp'
    
      34  'perl-test-pod'
    
      35)
    
      36provides=(
    
      37  "${_pkgname}=${pkgver}"
    
      38  "perl-travel-status-de-vrr-git=${pkgver}"
    
      39  "perl-travel-status-de-vrr=${pkgver}"
    
      40)
    
      41conflicts=(
    
      42  "${_pkgname}"
    
      43  "perl-travel-status-de-vrr"
    
      44)
    
      45replaces=(
    
      46  "perl-travel-status-de-vrr-git"
    
      47)
    
      48options=('!emptydirs')
    
      49# source=("http://finalrewind.org/projects/${_perlmod}/${_perlmod}-${pkgver}.tar.gz"{,.asc})
    
      50source=(
    
      51  "${_perlmod}::git+http://git.finalrewind.org/${_perlmod}"
    
      52  "transport-apis::git+https://github.com/public-transport/transport-apis.git"
    
      53)
    
      54sha256sums=(
    
      55  'SKIP'
    
      56  'SKIP'
    
      57)
    
      58
    
      59prepare() {
    
      60  cd "${srcdir}/${_perlmod}"
    
      61
    
      62  git submodule init
    
      63  git config submodule.ext/transport-apis.url "${srcdir}/transport-apis"
    
      64  git -c protocol.file.allow=always submodule update
    
      65
    
      66  git log > git.log
    
      67}
    
      68
    
      69pkgver() {
    
      70  cd "${srcdir}/${_perlmod}"
    
      71  _descr="$(git describe --tags --long)"
    
      72  _ver="$(printf '%s' "${_descr}" | awk -F '-' '{print $1}')"
    
      73  _rev="r$(git rev-list --count HEAD)"
    
      74  _hash="$(printf '%s' "${_descr}" | awk -F '-' '{print $3}')"
    
      75  _date="$(git log -n 1 --format=tformat:%ci | awk '{print $1}' | tr -d '-')"
    
      76  printf '%s\n' "${_ver}+${_rev}.${_date}.${_hash}"
    
      77}
    
      78
    
      79build() {
    
      80  cd "${srcdir}/${_perlmod}"
    
      81  perl Build.PL installdirs=vendor destdir="${pkgdir}"
    
      82  ./Build
    
      83}
    
      84
    
      85check() {
    
      86  cd "${srcdir}/${_perlmod}"
    
      87  ./Build test
    
      88}
    
      89
    
      90package() {
    
      91  cd "${srcdir}/${_perlmod}"
    
      92  ./Build install
    
      93  install -D -v -m644 COPYING "${pkgdir}/usr/share/licenses/${pkgname}/COPYING.PerlArtistic.txt"
    
      94  install -D -v -m644 README.md "${pkgdir}/usr/share/doc/${_pkgname}/README.md"
    
      95  install -D -v -m644 Changelog "${pkgdir}/usr/share/doc/${_pkgname}/Changelog"
    
      96  install -D -v -m644 git.log "${pkgdir}/usr/share/doc/${_pkgname}/git.log"
    
      97
    
      98  install -D -v -m644 COPYING "${pkgdir}/usr/share/licenses/${pkgname}/COPYING.Travel-Status-DE-DeutscheBahn.PerlArtistic.txt"
    
      99  install -D -v -m644 ext/transport-apis/license "${pkgdir}/usr/share/licenses/${pkgname}/COPYING.git_submodule_transport-apis.CC0.txt"
    
      100}
    
      101

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-09-05 16:00
@@ -6,7 +6,7 @@
 pkgname="${_pkgname}-git"
 _pkgver='latest'
 epoch=1
-pkgver=3.18+r361.20251207.g30554d8
+pkgver=3.20+r368.20260419.g259ef20
 pkgrel=1
 pkgdesc='Commandline client and Perl module for EFA-based public transit routing interfaces provided by e.g. VRR or VVO. It can request itineraries for train/tram/bus/ferry connections throughout most of Germany, as well as parts of Austria, Switzerland and UK.'
 url='http://finalrewind.org/projects/Travel-Status-DE-VRR/'

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-05 16:00:23	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1