potool-renamed

LOW
maintainer orphaned 0 votes scanned 2026-11-01 00:21:48.120785
View on AUR
Why flagged

The source is a tarball from a personal domain, but it hosts the project's own source code, and the checksums are verified; building from project-owned source is normal AUR practice.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from a personal domain, but it hosts the project's own source code, and the checksums are verified; building from project-owned source is normal AUR practice.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:12 source=("https://marcin.owsiany.pl/potool/potool-${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Florian Pelz <pelzflorian at pelzflorian.de>
2pkgname=potool-renamed
3pkgver=0.19
4pkgrel=1
5pkgdesc="Program to help editing po files, without poedit name clash"
6arch=('i686' 'x86_64')
7url="https://marcin.owsiany.pl/potool-page"
8license=('GPL')
9depends=('perl' 'glib2')
10provides=('potool')
11conflicts=('potool')
12source=("https://marcin.owsiany.pl/potool/potool-${pkgver}.tar.gz"
13 'poedit-rename.patch'
14 'poedit-test.patch')
15sha256sums=('1251621b5e69b660987e8c9497df9e75e0b3e40bcf8304bdbd26a4fbd37c4384'
16 'b331dde0a64ddac275ce607fe6fff8517b692bb186e2c0ea6ff907acbcb604be'
17 'fed991e63843b265da85708bc3ce75329e5ead0193e73d0527961122bcd43b3b')
18
19prepare() {
20 cd potool-"$pkgver"
21 mv scripts/poedit scripts/potooledit
22 patch -i "$srcdir"/poedit-rename.patch
23 patch -p0 -i "$srcdir"/poedit-test.patch
24}
25
26build() {
27 cd potool-"$pkgver"
28 make
29}
30
31check() {
32 cd potool-"$pkgver"
33 make check
34}
35
36package() {
37 cd "$srcdir"/potool-"$pkgver"
38 make DESTDIR="$pkgdir/usr" install
39 install -Dm644 change-po-charset.1 "$pkgdir"/usr/share/man/man1/change-po-charset.1
40 install -Dm644 change-po-charset.pl.1 "$pkgdir"/usr/share/man/pl/man1/change-po-charset.1
41 install -Dm644 poedit.1 "$pkgdir"/usr/share/man/man1/potooledit.1
42 install -Dm644 poedit.pl.1 "$pkgdir"/usr/share/man/pl/man1/potooledit.1
43 install -Dm644 postats.1 "$pkgdir"/usr/share/man/man1/postats.1
44 install -Dm644 postats.pl.1 "$pkgdir"/usr/share/man/pl/man1/postats.1
45 install -Dm644 potool.1 "$pkgdir"/usr/share/man/man1/potool.1
46 install -Dm644 potool.pl.1 "$pkgdir"/usr/share/man/pl/man1/potool.1
47}
48

Scan history

Scanned at (UTC)SeverityRules
2026-11-01 00:21:48 Low 2
2026-10-31 00:07:41 Low 2
2026-10-30 00:29:30 Low 2
2026-10-29 00:13:55 Low 2
2026-10-28 00:06:54 Low 2
2026-10-27 00:23:28 Low 2
2026-10-26 00:12:40 Low 2
2026-10-25 00:20:48 Low 2
2026-10-24 00:14:55 Low 2
2026-10-23 00:02:19 Low 2
2026-10-22 00:13:10 Low 2
2026-10-21 00:12:50 Low 2
2026-10-20 00:10:31 Low 2
2026-10-19 00:03:55 Low 2
2026-10-18 00:06:55 Low 2
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 00:06:47 Low 2
2026-10-13 00:23:45 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion