searxng-uwsgi-git
LOW
maintainer 30p87
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The pip installs are part of building the project from its own source (git checkout); the dependencies are declared in requirements.txt and used to build a wheel from the same source, which is normal for Python packages.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The pip installs are part of building the project from its own source (git checkout); the dependencies are declared in requirements.txt and used to build a wheel from the same source, which is normal for Python packages.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
pip install of an external package
pip_install_external
`pip install <package>` fetches an unpinned package from PyPI at build time, outside source=() and makepkg's checksums.
-
PKGBUILD:42
pip install --upgrade pip build installer wheel setuptools -
PKGBUILD:44
pip install -r requirements.txt -
PKGBUILD:65
pip install virtualenv-tools4
PKGBUILD
3 offending line(s) highlighted
1
# Maintainer: 30p87 <aur@30p87.de>
2
# Based on: HLFH <gaspard@dhautefeuille.eu>
3
4
pkgname=searxng-uwsgi-git
5
_pkgname=searxng
6
pkgver=r9660.e8e710e
7
pkgrel=1
8
pkgdesc='A privacy-respecting, hackable metasearch engine'
9
arch=('any')
10
url='https://searxng.github.io/searxng/'
11
license=('AGPL-3.0-or-later')
12
makedepends=('git')
13
depends=('uwsgi' 'uwsgi-plugin-python' 'valkey')
14
provides=('searxng')
15
conflicts=('searx' 'searx-git' 'searxng-git' 'searxng-uwsgi-novenv-git' 'searxng-uwsgi')
16
replaces=('searxng-uwsgi')
17
backup=('etc/searxng/settings.yml' 'etc/uwsgi/searxng.ini')
18
_giturl='https://github.com/searxng/searxng'
19
_gitbranch='master'
20
source=("git+${_giturl}#branch=${_gitbranch}"
21
'nginx.example.conf'
22
'uwsgi.ini'
23
'sysusers.conf'
24
'tmpfiles.conf'
25
'settings.yml')
26
b2sums=('SKIP'
27
'3cab48a25dc02f6bb861f32d2e33bd670b4447745c3c56b8bbd7f4183e38c2464c14b8257d9bebb332646ca892575b9090afdae771a9174517ac7d303cde7a69'
28
'0cea85bfd713b68da71da0651f80f1c2cdb9231d092684f95ca4bba572124e82f00dc8e666a45b76344f1b5dc67d216978a24850bf0a86e9a053514a1c030ed5'
29
'3487c220d6c538dba60671aaaf0927746d8ede4d47f901e01542efdf74dc067ade3d3ee30b500f08d3ef00c2ceba460961e0f4329a4afc32b83e42d8761d5e41'
30
'65f66920c96dfd8d68570fb48adb4f74894f188d2a71b1b9214372b43d4b34ab029404ea2eeb3709cce190276d375a2a816e5b7fc3b39210b447337c361bb8d9'
31
'99bb7a7dfdab65a8844beb7dd4924601e2f9e85aacacc526a18881dc53e1fa270ff2653c5ada2ce0f92ecebac8917afa974116c09b3e61977b21d70b0f6a4d37')
32
33
pkgver() {
34
cd searxng
35
printf 'r%s.%s' "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
36
}
37
38
build() {
39
cd "${srcdir}/${_pkgname}"
40
python -m venv venv
41
source venv/bin/activate
42
pip install --upgrade pip build installer wheel setuptools
43
44
pip install -r requirements.txt
45
46
export SEARXNG_SETTINGS_PATH='../settings.yml'
47
python -m searx.version freeze
48
sed -i "s|GIT_URL =.*|GIT_URL = \"${_giturl}\"|g" searx/version_frozen.py
49
sed -i "s|GIT_BRANCH =.*|GIT_BRANCH = \"${_gitbranch}\"|g" searx/version_frozen.py
50
51
# Build the package
52
python -m build --wheel --no-isolation
53
}
54
55
package() {
56
cd "${srcdir}/${_pkgname}"
57
source venv/bin/activate
58
59
local site_packages="$(python -c 'import site, os; print(os.path.relpath(site.getsitepackages()[0]))')"
60
61
# Install package
62
python -m installer dist/*.whl
63
64
# Update the venv path
65
pip install virtualenv-tools4
66
cd venv
67
virtualenv-tools --update-path /var/lib/searxng/venv/
68
sed -i "s|$(pwd)|/var/lib/searxng/venv/|g" bin/* pyvenv.cfg
69
70
# Copy the venv directory
71
install -d -m 750 "${pkgdir}/var/lib/searxng/venv"
72
cp -r . "${pkgdir}/var/lib/searxng/venv"
73
ln -s "/var/lib/searxng/venv/lib/$(basename ${pkgdir}/var/lib/searxng/venv/lib/python3.*)/site-packages/searx/static" "${pkgdir}/var/lib/searxng/static"
74
75
76
install -Dm644 "${srcdir}/uwsgi.ini" "${pkgdir}/etc/uwsgi/searxng.ini"
77
install -dm750 "${pkgdir}/etc/searxng"
78
install -Dm640 "${srcdir}/settings.yml" "${pkgdir}/etc/searxng/settings.yml"
79
install -Dm640 "${srcdir}/searxng/searx/limiter.toml" "${pkgdir}/etc/searxng/limiter.toml"
80
install -dm750 "${pkgdir}/var/lib/searxng"
81
install -Dm640 "${srcdir}/searxng/searx/version_frozen.py" "${pkgdir}/var/lib/searxng/${site_packages}/searx/version_frozen.py"
82
install -Dm644 "${srcdir}/searxng/LICENSE" "${pkgdir}/usr/share/licenses/searxng/LICENSE"
83
install -Dm644 "${srcdir}/nginx.example.conf" "${pkgdir}/usr/share/doc/searxng/nginx.example.conf"
84
85
install -Dm644 "${srcdir}/sysusers.conf" "${pkgdir}/usr/lib/sysusers.d/searxng.conf"
86
install -Dm644 "${srcdir}/tmpfiles.conf" "${pkgdir}/usr/lib/tmpfiles.d/searxng.conf"
87
}
88
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |