ps3-zlib
LOW
maintainer disc-kuraudo
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source URL is from zlib.net, the official project domain, which is not on the standard whitelist but is legitimate; this is a normal build of the project's own source, posing no execution risk beyond standard AUR packages.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URL is from zlib.net, the official project domain, which is not on the standard whitelist but is legitimate; this is a normal build of the project's own source, posing no execution risk beyond standard AUR packages.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:14
source=("https://zlib.net/fossils/zlib-${pkgver}.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Darjan Krijan [https://disc-kuraudo.eu]
2
3
_target_alias="ppu"
4
_pkgname="zlib"
5
pkgname="ps3-${_pkgname}"
6
pkgver="1.3.1"
7
pkgrel=2
8
pkgdesc="Compression library implementing the deflate compression method found in gzip and PKZIP"
9
arch=(x86_64 aarch64 powerpc64le powerpc64 powerpc riscv64)
10
url="https://www.zlib.net/"
11
license=(custom)
12
depends=(ps3-env ps3-ppu-gcc)
13
options=(!emptydirs !strip staticlibs)
14
source=("https://zlib.net/fossils/zlib-${pkgver}.tar.gz")
15
sha256sums=('9a93b2b7dfdac77ceba5a558a580e74667dd6fede4585b91eefb60f03b72df23')
16
17
source /opt/ps3dev/ps3toolchain.sh
18
19
prepare() {
20
cd "${srcdir}/${_pkgname}-${pkgver}"
21
22
sed -e "s/^static: /static: \$(STATICLIB) # /g" -i Makefile.in
23
}
24
25
build() {
26
cd "${srcdir}/${_pkgname}-${pkgver}"
27
28
export AR="${_target_alias}-ar" CC="${_target_alias}-gcc" RANLIB="${target_alias}-ranlib"
29
export CFLAGS="-O3 -flto=auto -ffat-lto-objects -DNDEBUG"
30
local _configure_flags=(
31
--prefix="${PS3DEV}/portlibs/ppu"
32
--static
33
)
34
./configure "${_configure_flags[@]}"
35
36
make static
37
}
38
39
package() {
40
cd "${srcdir}/${_pkgname}-${pkgver}"
41
42
make DESTDIR="${pkgdir}" install
43
}
44
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |