smuxi-server
smuxi
scanned 2026-09-17 00:27:14.276658
The source is a tarball from the project's official website (smuxi.im), which is not on the whitelist but is plausibly the project's own; building from official source is normal AUR packaging and not inherently dangerous.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official website (smuxi.im), which is not on the whitelist but is plausibly the project's own; building from official source is normal AUR packaging and not inherently dangerous.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:18
source=(https://smuxi.im/jaws/data/files/$pkgbase-$pkgver.tar.gz{,.asc}
PKGBUILD
1 offending line(s) highlighted# Maintainer:
# Contributor: Balló György <ballogyor+arch at gmail dot com>
# Contributor: Madek <gonzaloseguel@gmail.com>
# Contributor: Marcelo Cavalcante <marcelo@marcelocavalcante.net>
# Contributor: Jens Kleikamp <jens@codes-concepts.com>
# Contributor: Philipp Gildein <rmbl@openspeak-project.org>
pkgbase=smuxi
pkgname=('smuxi-server' 'smuxi')
pkgver=1.2.1
pkgrel=3
pkgdesc="User-friendly and cross-platform IRC client for sophisticated users for GNOME/GTK+"
arch=('any')
url="https://smuxi.im/"
license=('GPL')
makedepends=('notify-sharp' 'log4net' 'nini' 'gtkspell' 'stfl' 'intltool')
options=('!emptydirs')
source=(https://smuxi.im/jaws/data/files/$pkgbase-$pkgver.tar.gz{,.asc}
0001_settings.patch)
validpgpkeys=('A3712C8E4CE449B9F28C563F33A429E62D907822') # Mirco Bauer
sha256sums=('cb96475e4ec3479b37b4357178cb00a1a404a67ba24d5fc0f6c4fd3fae5816e5'
'SKIP'
'13b90091331972f57e290d838bc2d524bf63cc8c3b1cf91d9fa31d749307ae3e')
prepare() {
cd $pkgbase-$pkgver
sed -i 's|$(datarootdir)/appdata|$(datarootdir)/metainfo|' src/Frontend-GNOME/Makefile.{am,in}
# Patch for not applied settings
patch -Np1 -i "$srcdir"/0001_settings.patch
}
build() {
cd $pkgbase-$pkgver
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var \
--enable-frontend-stfl \
--with-vendor-package-version="Arch Linux $pkgver-$pkgrel"
LANG=C make -j1
}
package_smuxi-server() {
pkgdesc+=" (common files and server)"
depends=('log4net' 'nini' 'stfl')
cd $pkgbase-$pkgver
make DESTDIR="$pkgdir" install
# Split frontend
[[ -d $srcdir/frontend ]] && rm -r "$srcdir/frontend/"
mkdir "$srcdir"/frontend
mv "$pkgdir"/usr/bin/smuxi-frontend-gnome \
"$pkgdir"/usr/lib/smuxi/smuxi-frontend-gnome* \
"$pkgdir"/usr/share/{applications,icons,metainfo} \
"$pkgdir"/usr/share/man/man1/smuxi-frontend-gnome.1 \
"$srcdir/frontend/"
}
package_smuxi() {
pkgdesc+=" (frontend)"
depends=('smuxi-server' 'notify-sharp' 'gtkspell')
cd frontend
mkdir -p "$pkgdir"/usr/{bin,lib/smuxi,share/man/man1}
mv smuxi-frontend-gnome "$pkgdir/usr/bin"
mv smuxi-frontend-gnome.1 "$pkgdir/usr/share/man/man1"
mv smuxi-frontend-gnome* "$pkgdir/usr/lib/smuxi"
mv {applications,icons,metainfo} "$pkgdir/usr/share"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |