smuxi-server
smuxi
scanned 2026-11-01 00:21:48.120785
The source is a tarball from the project's official website (smuxi.im), which is not on the whitelist but is plausibly the project's own; building from official source is normal AUR packaging and not inherently dangerous.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official website (smuxi.im), which is not on the whitelist but is plausibly the project's own; building from official source is normal AUR packaging and not inherently dangerous.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:18
source=(https://smuxi.im/jaws/data/files/$pkgbase-$pkgver.tar.gz{,.asc}
PKGBUILD
1 offending line(s) highlighted# Maintainer:
# Contributor: Balló György <ballogyor+arch at gmail dot com>
# Contributor: Madek <gonzaloseguel@gmail.com>
# Contributor: Marcelo Cavalcante <marcelo@marcelocavalcante.net>
# Contributor: Jens Kleikamp <jens@codes-concepts.com>
# Contributor: Philipp Gildein <rmbl@openspeak-project.org>
pkgbase=smuxi
pkgname=('smuxi-server' 'smuxi')
pkgver=1.2.1
pkgrel=3
pkgdesc="User-friendly and cross-platform IRC client for sophisticated users for GNOME/GTK+"
arch=('any')
url="https://smuxi.im/"
license=('GPL')
makedepends=('notify-sharp' 'log4net' 'nini' 'gtkspell' 'stfl' 'intltool')
options=('!emptydirs')
source=(https://smuxi.im/jaws/data/files/$pkgbase-$pkgver.tar.gz{,.asc}
0001_settings.patch)
validpgpkeys=('A3712C8E4CE449B9F28C563F33A429E62D907822') # Mirco Bauer
sha256sums=('cb96475e4ec3479b37b4357178cb00a1a404a67ba24d5fc0f6c4fd3fae5816e5'
'SKIP'
'13b90091331972f57e290d838bc2d524bf63cc8c3b1cf91d9fa31d749307ae3e')
prepare() {
cd $pkgbase-$pkgver
sed -i 's|$(datarootdir)/appdata|$(datarootdir)/metainfo|' src/Frontend-GNOME/Makefile.{am,in}
# Patch for not applied settings
patch -Np1 -i "$srcdir"/0001_settings.patch
}
build() {
cd $pkgbase-$pkgver
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var \
--enable-frontend-stfl \
--with-vendor-package-version="Arch Linux $pkgver-$pkgrel"
LANG=C make -j1
}
package_smuxi-server() {
pkgdesc+=" (common files and server)"
depends=('log4net' 'nini' 'stfl')
cd $pkgbase-$pkgver
make DESTDIR="$pkgdir" install
# Split frontend
[[ -d $srcdir/frontend ]] && rm -r "$srcdir/frontend/"
mkdir "$srcdir"/frontend
mv "$pkgdir"/usr/bin/smuxi-frontend-gnome \
"$pkgdir"/usr/lib/smuxi/smuxi-frontend-gnome* \
"$pkgdir"/usr/share/{applications,icons,metainfo} \
"$pkgdir"/usr/share/man/man1/smuxi-frontend-gnome.1 \
"$srcdir/frontend/"
}
package_smuxi() {
pkgdesc+=" (frontend)"
depends=('smuxi-server' 'notify-sharp' 'gtkspell')
cd frontend
mkdir -p "$pkgdir"/usr/{bin,lib/smuxi,share/man/man1}
mv smuxi-frontend-gnome "$pkgdir/usr/bin"
mv smuxi-frontend-gnome.1 "$pkgdir/usr/share/man/man1"
mv smuxi-frontend-gnome* "$pkgdir/usr/lib/smuxi"
mv {applications,icons,metainfo} "$pkgdir/usr/share"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |