searxng-uwsgi-git
maintainer 30p87
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The pip installs are for building the project's own source from its official repository, using requirements.txt and building a wheel; this is normal for Python packages and poses no additional supply-chain risk.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The pip installs are for building the project's own source from its official repository, using requirements.txt and building a wheel; this is normal for Python packages and poses no additional supply-chain risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
pip install of an external package
pip_install_external
`pip install <package>` fetches an unpinned package from PyPI at build time, outside source=() and makepkg's checksums.
-
PKGBUILD:42
pip install --upgrade pip build installer wheel setuptools -
PKGBUILD:44
pip install -r requirements.txt -
PKGBUILD:65
pip install virtualenv-tools4
PKGBUILD
3 offending line(s) highlighted
1
# Maintainer: 30p87 <aur@30p87.de>
2
# Based on: HLFH <gaspard@dhautefeuille.eu>
3
4
pkgname=searxng-uwsgi-git
5
_pkgname=searxng
6
pkgver=r9209.b5bb27f
7
pkgrel=3
8
pkgdesc='A privacy-respecting, hackable metasearch engine'
9
arch=('any')
10
url='https://searxng.github.io/searxng/'
11
license=('AGPL-3.0-or-later')
12
makedepends=('git')
13
depends=('uwsgi' 'uwsgi-plugin-python' 'valkey')
14
provides=('searxng')
15
conflicts=('searx' 'searx-git' 'searxng-git' 'searxng-uwsgi-novenv-git' 'searxng-uwsgi')
16
replaces=('searxng-uwsgi')
17
backup=('etc/searxng/settings.yml' 'etc/uwsgi/searxng.ini')
18
_giturl='https://github.com/searxng/searxng'
19
_gitbranch='master'
20
source=("git+${_giturl}#branch=${_gitbranch}"
21
'nginx.example.conf'
22
'uwsgi.ini'
23
'sysusers.conf'
24
'tmpfiles.conf'
25
'settings.yml')
26
b2sums=('SKIP'
27
'3cab48a25dc02f6bb861f32d2e33bd670b4447745c3c56b8bbd7f4183e38c2464c14b8257d9bebb332646ca892575b9090afdae771a9174517ac7d303cde7a69'
28
'0cea85bfd713b68da71da0651f80f1c2cdb9231d092684f95ca4bba572124e82f00dc8e666a45b76344f1b5dc67d216978a24850bf0a86e9a053514a1c030ed5'
29
'3487c220d6c538dba60671aaaf0927746d8ede4d47f901e01542efdf74dc067ade3d3ee30b500f08d3ef00c2ceba460961e0f4329a4afc32b83e42d8761d5e41'
30
'65f66920c96dfd8d68570fb48adb4f74894f188d2a71b1b9214372b43d4b34ab029404ea2eeb3709cce190276d375a2a816e5b7fc3b39210b447337c361bb8d9'
31
'99bb7a7dfdab65a8844beb7dd4924601e2f9e85aacacc526a18881dc53e1fa270ff2653c5ada2ce0f92ecebac8917afa974116c09b3e61977b21d70b0f6a4d37')
32
33
pkgver() {
34
cd searxng
35
printf 'r%s.%s' "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
36
}
37
38
build() {
39
cd "${srcdir}/${_pkgname}"
40
python -m venv venv
41
source venv/bin/activate
42
pip install --upgrade pip build installer wheel setuptools
43
44
pip install -r requirements.txt
45
46
export SEARXNG_SETTINGS_PATH='../settings.yml'
47
python -m searx.version freeze
48
sed -i "s|GIT_URL =.*|GIT_URL = \"${_giturl}\"|g" searx/version_frozen.py
49
sed -i "s|GIT_BRANCH =.*|GIT_BRANCH = \"${_gitbranch}\"|g" searx/version_frozen.py
50
51
# Build the package
52
python -m build --wheel --no-isolation
53
}
54
55
package() {
56
cd "${srcdir}/${_pkgname}"
57
source venv/bin/activate
58
59
local site_packages="$(python -c 'import site, os; print(os.path.relpath(site.getsitepackages()[0]))')"
60
61
# Install package
62
python -m installer dist/*.whl
63
64
# Update the venv path
65
pip install virtualenv-tools4
66
cd venv
67
virtualenv-tools --update-path /var/lib/searxng/venv/
68
sed -i "s|$(pwd)|/var/lib/searxng/venv/|g" bin/* pyvenv.cfg
69
70
# Copy the venv directory
71
install -d -m 750 "${pkgdir}/var/lib/searxng/venv"
72
cp -r . "${pkgdir}/var/lib/searxng/venv"
73
ln -s "/var/lib/searxng/venv/lib/$(basename ${pkgdir}/var/lib/searxng/venv/lib/python3.*)/site-packages/searx/static" "${pkgdir}/var/lib/searxng/static"
74
75
76
install -Dm644 "${srcdir}/uwsgi.ini" "${pkgdir}/etc/uwsgi/searxng.ini"
77
install -dm750 "${pkgdir}/etc/searxng"
78
install -Dm640 "${srcdir}/settings.yml" "${pkgdir}/etc/searxng/settings.yml"
79
install -Dm640 "${srcdir}/searxng/searx/limiter.toml" "${pkgdir}/etc/searxng/limiter.toml"
80
install -dm750 "${pkgdir}/var/lib/searxng"
81
install -Dm640 "${srcdir}/searxng/searx/version_frozen.py" "${pkgdir}/var/lib/searxng/${site_packages}/searx/version_frozen.py"
82
install -Dm644 "${srcdir}/searxng/LICENSE" "${pkgdir}/usr/share/licenses/searxng/LICENSE"
83
install -Dm644 "${srcdir}/nginx.example.conf" "${pkgdir}/usr/share/doc/searxng/nginx.example.conf"
84
85
install -Dm644 "${srcdir}/sysusers.conf" "${pkgdir}/usr/lib/sysusers.d/searxng.conf"
86
install -Dm644 "${srcdir}/tmpfiles.conf" "${pkgdir}/usr/lib/tmpfiles.d/searxng.conf"
87
}
88
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |