sway-persistent-workspaces-git
LOW
maintainer 33KK
1 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The source is a git repository from a personal domain for a forked project, which is normal for AUR packages; building from source is expected and the host, while not standard, is plausibly the maintainer's own.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a git repository from a personal domain for a forked project, which is normal for AUR packages; building from source is expected and the host, while not standard, is plausibly the maintainer's own.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:52
source=("${_pkgname}::git+https://code.pepega.club/33KK/sway.git"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: 33KK <marko@pepega.club>
2
# Contributor: GreyXor <greyxor@protonmail.com>
3
# Contributor: Drew DeVault <sir@cmpwn.com>
4
# Contributor: Antonin Décimo <antonin dot decimo at gmail dot com>
5
6
_pkgname=sway
7
pkgname="${_pkgname}-persistent-workspaces-git"
8
pkgver=r7201.7efbd8e2
9
pkgrel=1
10
arch=('x86_64')
11
pkgdesc='Tiling Wayland compositor and replacement for the i3 window manager (fork with persistent workspaces)'
12
url='https://code.pepega.club/33KK/sway/src/branch/persistent-workspaces'
13
license=('MIT')
14
depends=(
15
"cairo"
16
"gdk-pixbuf2"
17
"glib2"
18
"glibc"
19
"json-c"
20
"libevdev"
21
"libinput"
22
"libxcb"
23
"libxkbcommon"
24
"pango"
25
"pcre2"
26
"pixman"
27
"systemd-libs"
28
"wayland"
29
"wlroots-git"
30
"xcb-util-wm"
31
)
32
makedepends=(
33
"git"
34
"libcap"
35
"meson"
36
"scdoc"
37
"wayland-protocols"
38
)
39
optdepends=(
40
'wmenu: Application launcher used in default configuration'
41
'foot: Terminal emulator used in default configuration'
42
'polkit: System privilege control. Required if not using seatd service'
43
'swaybg: Wallpaper tool for sway'
44
'swayidle: Idle management daemon'
45
'swaylock: Screen locker'
46
'xorg-xwayland: X11 support'
47
)
48
install=sway.install
49
provides=("${_pkgname}")
50
conflicts=("${_pkgname}")
51
backup=("etc/sway/config")
52
source=("${_pkgname}::git+https://code.pepega.club/33KK/sway.git"
53
"50-systemd-user.conf")
54
b2sums=('SKIP'
55
'SKIP')
56
57
pkgver() {
58
# Calculate the version dynamically using git information
59
printf "r%s.%s" "$(git -C "$srcdir/${_pkgname}" rev-list --count HEAD)" "$(git -C "$srcdir/${_pkgname}" rev-parse --short HEAD)"
60
}
61
62
build() {
63
arch-meson "${_pkgname}" build -D sd-bus-provider=libsystemd -D werror=false
64
65
meson compile -C build
66
}
67
68
package() {
69
meson install -C build --destdir "$pkgdir"
70
71
install -Dm644 50-systemd-user.conf -t "$pkgdir/etc/sway/config.d/"
72
install -Dm644 "${_pkgname}/LICENSE" "$pkgdir/usr/share/licenses/${_pkgname}/LICENSE"
73
}
74
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |