qmmp-plugin-pack

MEDIUM
maintainer ava1ar 31 votes scanned 2026-10-17 05:17:05.948410
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:16 source=(https://qmmp.ylsoftware.com/files/qmmp-plugin-pack/${pkgver:0:3}/${pkgname}-${pkgver}.tar.bz2)

PKGBUILD

1 offending line(s) highlighted
1# Contributor: Andrew Panchenko <panchenkoac at gmail>
2# Contributor: ava1ar <mail(at)ava1ar(dot)me>
3# Maintainer: Self Denial <selfdenial at pm dot me>
4
5pkgname=qmmp-plugin-pack
6pkgver=2.4.0
7pkgrel=1
8pkgdesc='Qmmp Plugin Pack'
9arch=('x86_64')
10url='http://qmmp.ylsoftware.com'
11license=('GPL-1.0-or-later')
12depends=("qmmp>=$pkgver" 'taglib>=1.12.0' 'qt6-base')
13optdepends=('libmodplug>=0.8.4' 'libsamplerate>=0.1.2' 'ffmpeg>=3.4.0' 'yt-dlp')
14makedepends=('cmake>=3.18.0' 'qt6-tools' 'taglib>=1.12.0' 'libmodplug>=0.8.4'
15 'libsamplerate>=0.1.2' 'ffmpeg>=3.4.0' 'yt-dlp')
16source=(https://qmmp.ylsoftware.com/files/qmmp-plugin-pack/${pkgver:0:3}/${pkgname}-${pkgver}.tar.bz2)
17b2sums=('3886c9ff0b05dd554be9284e198eb7efc59ea907f2a3e8a75391877f3df4e8633cd277200954bef5b9a2fea79a176f1b2ad4207a6895622d197e4f7cbef22c3d')
18
19build() {
20 local cmake_options=(
21 -G 'Unix Makefiles'
22 -B "${srcdir}/${pkgname}-${pkgver}/build"
23 -S "${srcdir}/${pkgname}-${pkgver}"
24 -DCMAKE_INSTALL_PREFIX='/usr'
25 -DCMAKE_INSTALL_LIBDIR='/usr/lib'
26 -DCMAKE_BUILD_TYPE='None'
27 -Wno-dev
28 )
29
30 cmake "${cmake_options[@]}"
31 cd "${srcdir}/${pkgname}-${pkgver}/build"
32 make
33}
34
35package() {
36 cd "${srcdir}/${pkgname}-${pkgver}/build"
37 make DESTDIR="${pkgdir}" install
38}
39

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-17 05:17
@@ -3,8 +3,8 @@
# Maintainer: Self Denial <selfdenial at pm dot me>
pkgname=qmmp-plugin-pack
-pkgver=2.3.0
-pkgrel=2
+pkgver=2.4.0
+pkgrel=1
pkgdesc='Qmmp Plugin Pack'
arch=('x86_64')
url='http://qmmp.ylsoftware.com'
@@ -14,7 +14,7 @@
makedepends=('cmake>=3.18.0' 'qt6-tools' 'taglib>=1.12.0' 'libmodplug>=0.8.4'
'libsamplerate>=0.1.2' 'ffmpeg>=3.4.0' 'yt-dlp')
source=(https://qmmp.ylsoftware.com/files/qmmp-plugin-pack/${pkgver:0:3}/${pkgname}-${pkgver}.tar.bz2)
-b2sums=('3c6623aaf0e27dab485e517bebf557033083a30044fb13c3e37a524c6a407775304dd9f9a91107842f445f50dc59f88fc0a9b73e62fbcb6945da3ce880c534ba')
+b2sums=('3886c9ff0b05dd554be9284e198eb7efc59ea907f2a3e8a75391877f3df4e8633cd277200954bef5b9a2fea79a176f1b2ad4207a6895622d197e4f7cbef22c3d')
build() {
local cmake_options=(

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 05:17:05 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion