smuxi

maintainer TrialnError · 2 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The source is a tarball from the project's official website (smuxi.im), which is not on the whitelist but is plausibly the project's own; building from official source is normal AUR packaging and not inherently dangerous.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official website (smuxi.im), which is not on the whitelist but is plausibly the project's own; building from official source is normal AUR packaging and not inherently dangerous.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:18 source=(https://smuxi.im/jaws/data/files/$pkgbase-$pkgver.tar.gz{,.asc}

PKGBUILD

1 offending line(s) highlighted
1# Maintainer:
2# Contributor: Balló György <ballogyor+arch at gmail dot com>
3# Contributor: Madek <gonzaloseguel@gmail.com>
4# Contributor: Marcelo Cavalcante <marcelo@marcelocavalcante.net>
5# Contributor: Jens Kleikamp <jens@codes-concepts.com>
6# Contributor: Philipp Gildein <rmbl@openspeak-project.org>
7
8pkgbase=smuxi
9pkgname=('smuxi-server' 'smuxi')
10pkgver=1.2.1
11pkgrel=3
12pkgdesc="User-friendly and cross-platform IRC client for sophisticated users for GNOME/GTK+"
13arch=('any')
14url="https://smuxi.im/"
15license=('GPL')
16makedepends=('notify-sharp' 'log4net' 'nini' 'gtkspell' 'stfl' 'intltool')
17options=('!emptydirs')
18source=(https://smuxi.im/jaws/data/files/$pkgbase-$pkgver.tar.gz{,.asc}
19 0001_settings.patch)
20validpgpkeys=('A3712C8E4CE449B9F28C563F33A429E62D907822') # Mirco Bauer
21sha256sums=('cb96475e4ec3479b37b4357178cb00a1a404a67ba24d5fc0f6c4fd3fae5816e5'
22 'SKIP'
23 '13b90091331972f57e290d838bc2d524bf63cc8c3b1cf91d9fa31d749307ae3e')
24
25prepare() {
26 cd $pkgbase-$pkgver
27 sed -i 's|$(datarootdir)/appdata|$(datarootdir)/metainfo|' src/Frontend-GNOME/Makefile.{am,in}
28
29 # Patch for not applied settings
30 patch -Np1 -i "$srcdir"/0001_settings.patch
31}
32
33build() {
34 cd $pkgbase-$pkgver
35 ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var \
36 --enable-frontend-stfl \
37 --with-vendor-package-version="Arch Linux $pkgver-$pkgrel"
38 LANG=C make -j1
39}
40
41package_smuxi-server() {
42 pkgdesc+=" (common files and server)"
43 depends=('log4net' 'nini' 'stfl')
44
45 cd $pkgbase-$pkgver
46 make DESTDIR="$pkgdir" install
47
48 # Split frontend
49 [[ -d $srcdir/frontend ]] && rm -r "$srcdir/frontend/"
50 mkdir "$srcdir"/frontend
51 mv "$pkgdir"/usr/bin/smuxi-frontend-gnome \
52 "$pkgdir"/usr/lib/smuxi/smuxi-frontend-gnome* \
53 "$pkgdir"/usr/share/{applications,icons,metainfo} \
54 "$pkgdir"/usr/share/man/man1/smuxi-frontend-gnome.1 \
55 "$srcdir/frontend/"
56}
57
58package_smuxi() {
59 pkgdesc+=" (frontend)"
60 depends=('smuxi-server' 'notify-sharp' 'gtkspell')
61
62 cd frontend
63 mkdir -p "$pkgdir"/usr/{bin,lib/smuxi,share/man/man1}
64 mv smuxi-frontend-gnome "$pkgdir/usr/bin"
65 mv smuxi-frontend-gnome.1 "$pkgdir/usr/share/man/man1"
66 mv smuxi-frontend-gnome* "$pkgdir/usr/lib/smuxi"
67 mv {applications,icons,metainfo} "$pkgdir/usr/share"
68}
69

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion