rxvt-unicode-fontspacing-noinc-vteclear-secondarywheel

LOW

maintainer itoijala 3 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is a tarball from the project's official host (dist.schmorp.de), which is plausibly project-owned despite not being on a standard whitelist; building from official project sources is normal AUR practice and not inherently dangerous.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official host (dist.schmorp.de), which is plausibly project-owned despite not being on a standard whitelist; building from official project sources is normal AUR practice and not inherently dangerous.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:36 "$_pkgbase-$pkgver.tar.bz2::http://dist.schmorp.de/rxvt-unicode/$_pkgbase-$pkgver.tar.bz2"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Ismo Toijala <ismo.toijala@gmail.com>
    
      2# Maintainer: George Rawlinson <grawlinson@archlinux.org>
    
      3# Contributor: Levente Polyak <anthraxx[at]archlinux[dot]org>
    
      4# Contributor: Daniel Micay <danielmicay@gmail.com>
    
      5# Contributor: Sébastien Luttringer <seblu@aur.archlinux.org>
    
      6# Contributor: Angel Velasquez <angvp@archlinux.org>
    
      7# Contributor: tobias <tobias@archlinux.org>
    
      8# Contributor: dibblethewrecker dibblethewrecker.at.jiwe.dot.org
    
      9
    
      10_pkgbase='rxvt-unicode'
    
      11pkgname='rxvt-unicode-fontspacing-noinc-vteclear-secondarywheel'
    
      12pkgver=9.31
    
      13pkgrel=2
    
      14arch=('x86_64')
    
      15url='http://software.schmorp.de/pkg/rxvt-unicode.html'
    
      16pkgdesc='Unicode enabled rxvt-clone terminal emulator (urxvt) with fixed font spacing, no increment resizing, clear patched to behave like VTEs (keep all lines) and secondaryWheel.'
    
      17license=('GPL')
    
      18makedepends=(
    
      19  'libxt'
    
      20  'libxext'
    
      21  'libxmu'
    
      22  'signify'
    
      23)
    
      24depends=(
    
      25  'rxvt-unicode-terminfo'
    
      26  'libxft'
    
      27  'perl'
    
      28  'startup-notification'
    
      29  'libnsl'
    
      30  'libptytty'
    
      31  'libxext'
    
      32  'libxmu'
    
      33)
    
      34optdepends=('gtk2-perl: to use urxvt-tabbed')
    
      35source=(
    
      36  "$_pkgbase-$pkgver.tar.bz2::http://dist.schmorp.de/rxvt-unicode/$_pkgbase-$pkgver.tar.bz2"
    
      37  "$_pkgbase-$pkgver.tar.bz2.signature::http://dist.schmorp.de/rxvt-unicode/$_pkgbase-$pkgver.tar.bz2.sig"
    
      38  "$_pkgbase-$pkgver.pub::http://dist.schmorp.de/signing-key.pub"
    
      39  'perl-5.38.patch'
    
      40  'urxvt.desktop'
    
      41  'urxvtc.desktop'
    
      42  'urxvt-tabbed.desktop'
    
      43  'font-width-fix.patch'
    
      44  'line-spacing-fix.patch'
    
      45  'noinc.diff'
    
      46  'popup-menu-hang.diff'
    
      47  'clear.patch'
    
      48  'secondaryWheel.patch'
    
      49  'starttop.patch'
    
      50)
    
      51provides=('rxvt-unicode')
    
      52conflicts=('rxvt-unicode')
    
      53
    
      54prepare() {
    
      55  # hacking around to validate with signify
    
      56  mv -v "$_pkgbase-$pkgver.tar.bz2."{signature,sig}
    
      57  signify -V -p "$_pkgbase-$pkgver.pub" -m "$_pkgbase-$pkgver.tar.bz2"
    
      58
    
      59  patch -d $_pkgbase-$pkgver -p1 < perl-5.38.patch # Locale fix for perl 5.38
    
      60
    
      61  cd $_pkgbase-$pkgver
    
      62  patch -p0 -i ../font-width-fix.patch
    
      63  patch -p0 -i ../line-spacing-fix.patch
    
      64  patch -p0 -i ../popup-menu-hang.diff
    
      65  patch -p1 -i ../noinc.diff
    
      66  patch -p1 -i ../clear.patch
    
      67  patch -p1 -i ../secondaryWheel.patch
    
      68  # https://bugs.archlinux.org/task/77062
    
      69  patch -p1 -i ../starttop.patch
    
      70}
    
      71
    
      72build() {
    
      73  cd $_pkgbase-$pkgver
    
      74  # we disable smart-resize (FS#34807)
    
      75  # do not specify --with-terminfo (FS#46424)
    
      76  # do not specify --disable-frills (FS#77474)
    
      77  # workaround ncurses --disable-root-access (FS#79143)
    
      78  export TIC="/usr/bin/tic -o${srcdir}/terminfo"
    
      79  ./configure \
    
      80    --prefix=/usr \
    
      81    --enable-256-color \
    
      82    --enable-combining \
    
      83    --enable-fading \
    
      84    --enable-font-styles \
    
      85    --enable-iso14755 \
    
      86    --enable-keepscrolling \
    
      87    --enable-lastlog \
    
      88    --enable-mousewheel \
    
      89    --enable-next-scroll \
    
      90    --enable-perl \
    
      91    --enable-pointer-blank \
    
      92    --enable-rxvt-scroll \
    
      93    --enable-selectionscrolling \
    
      94    --enable-slipwheeling \
    
      95    --disable-smart-resize \
    
      96    --enable-startup-notification \
    
      97    --enable-transparency \
    
      98    --enable-unicode3 \
    
      99    --enable-utmp \
    
      100    --enable-wtmp \
    
      101    --enable-xft \
    
      102    --enable-xim \
    
      103    --enable-xterm-scroll \
    
      104    --disable-pixbuf
    
      105  make
    
      106}
    
      107
    
      108package() {
    
      109  # install freedesktop menu
    
      110  for _f in urxvt urxvtc urxvt-tabbed; do
    
      111    install -Dm 644 ${_f}.desktop "${pkgdir}/usr/share/applications/${_f}.desktop"
    
      112  done
    
      113
    
      114  cd ${_pkgbase}-${pkgver}
    
      115  make DESTDIR="${pkgdir}" install
    
      116  # install the tabbing wrapper ( requires gtk2-perl! )
    
      117  sed -i 's/\"rxvt\"/"urxvt"/' doc/rxvt-tabbed
    
      118  install -Dm 755 doc/rxvt-tabbed "${pkgdir}/usr/bin/urxvt-tabbed"
    
      119}
    
      120
    
      121sha256sums=('aaa13fcbc149fe0f3f391f933279580f74a96fd312d6ed06b8ff03c2d46672e8'
    
      122            'afea78dc25db8cd15da9959baf347b0634f4ef62dd3eeaff0c0a3389986b6a3e'
    
      123            '48ef5720d77a870f25737b8f66fe2c1f88a01810013df70cb8155add904288e4'
    
      124            '4bec0bf559a2eb6649e077b220fe25f532a8bc3da98ac519bc72a39b223e2cc4'
    
      125            '5f9c435d559371216d1c5b49c6ec44bfdb786b12d925d543c286b0764dea0319'
    
      126            '91536bb27c6504d6cb0d33775a0c4709a4b439670b900f0c278c25037f19ad66'
    
      127            'ccd7c436e959bdc9ab4f15801a67c695b382565b31d8c352254362e67412afcb'
    
      128            'ee7ad6f56c22fa7379c1ac2594ff941bf7f99344152da0b813319d3dadd1395b'
    
      129            '8d5f2ee9dae827b7a99757fd5432416927a31cde2093e3ad1aefee0987d6ab8d'
    
      130            '0ee0434eb84b3ce1f62a4e02c0ba6d0940f4c62477e8982eb9219186feb393e3'
    
      131            '64afd103527ce2cb2a8c51fefd815615afd0a63bbb810f2fb5ea38f6280def03'
    
      132            '9df34ba141a9e32d785f63b050ab82e6e6c745b391c5b16e17bec4dcd4a2b087'
    
      133            '70b2c60887df3b335cd9b26a8ec3964845f75cca98099c7c5a6be4fa74770f57'
    
      134            '26bcc874e17db6ab676649dab12f6afd308754fb77673df5e6b5a74d0b89efc7')
    
      135
    
      136# vim: ts=2 sw=2 et:
    
      137

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2