python3-xynexdg

LOW

maintainer Xyne 12 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is hosted on the maintainer's own domain, which is also the project's official URL, and the package builds from verifiable source code with matching checksums and PGP signature; the non-whitelisted host is the legitimate project site, so the download is appropriate for AUR.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is hosted on the maintainer's own domain, which is also the project's official URL, and the package builds from verifiable source code with matching checksums and PGP signature; the non-whitelisted host is the legitimate project site, so the download is appropriate for AUR.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 https://xyne.dev/projects/python3-xynexdg/src/python3-xynexdg-2021.tar.xz

PKGBUILD

1 offending line(s) highlighted

      1#Maintainer: Xyne <gro xunilhcra enyx, backwards>
    
      2pkgname=python3-xynexdg
    
      3pkgver=2021
    
      4pkgrel=15
    
      5pkgdesc='Implementation of various freedesktop.org standards, for internal use in Xyne'"'"'s modules.'
    
      6arch=(any)
    
      7license=(GPL)
    
      8url="https://xyne.dev/projects/python3-xynexdg"
    
      9depends=(python3)
    
      10makedepends=(python-setuptools)
    
      11source=(
    
      12  https://xyne.dev/projects/python3-xynexdg/src/python3-xynexdg-2021.tar.xz
    
      13  https://xyne.dev/projects/python3-xynexdg/src/python3-xynexdg-2021.tar.xz.sig
    
      14)
    
      15sha512sums=(
    
      16  68362460ef36164b3e17d294269ecea51ff5a477a1e4f0d6c8eaca29a1bacdb5d2ee733ca0a68c0159774c4354eb968bbcc3a1b2be62b4b7eafd60c09802de67
    
      17  16748c9bf9883a69483bebbba870754208e47344f56f4a30ab610dc422e0c6e2bc2b64e54886105797bce18d6e71d261ce534f294a8c30ef16b5db22f19c364a
    
      18)
    
      19md5sums=(
    
      20  10784cb444bcf29db1a29e386eb67ef0
    
      21  98643ea2db70b127479ffe0eb78fea56
    
      22)
    
      23validpgpkeys=('D89FAAEB4CECAFD199A2F5E612C6F735F7A9A519')
    
      24
    
      25package ()
    
      26{
    
      27  cd "$srcdir/$pkgname-$pkgver"
    
      28  python3 setup.py install --prefix=/usr --root="$pkgdir" --optimize=1
    
      29}
    
      30
    
      31
    
      32# vim: set ts=2 sw=2 et:
    
      33

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2