sway-persistent-workspaces-git

LOW
maintainer 33KK 1 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The source is a git repository from a personal domain for a forked project, which is normal for AUR packages; building from source is expected and the host, while not standard, is plausibly the maintainer's own.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a git repository from a personal domain for a forked project, which is normal for AUR packages; building from source is expected and the host, while not standard, is plausibly the maintainer's own.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:52 source=("${_pkgname}::git+https://code.pepega.club/33KK/sway.git"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: 33KK <marko@pepega.club>
2# Contributor: GreyXor <greyxor@protonmail.com>
3# Contributor: Drew DeVault <sir@cmpwn.com>
4# Contributor: Antonin Décimo <antonin dot decimo at gmail dot com>
5
6_pkgname=sway
7pkgname="${_pkgname}-persistent-workspaces-git"
8pkgver=r7201.7efbd8e2
9pkgrel=1
10arch=('x86_64')
11pkgdesc='Tiling Wayland compositor and replacement for the i3 window manager (fork with persistent workspaces)'
12url='https://code.pepega.club/33KK/sway/src/branch/persistent-workspaces'
13license=('MIT')
14depends=(
15 "cairo"
16 "gdk-pixbuf2"
17 "glib2"
18 "glibc"
19 "json-c"
20 "libevdev"
21 "libinput"
22 "libxcb"
23 "libxkbcommon"
24 "pango"
25 "pcre2"
26 "pixman"
27 "systemd-libs"
28 "wayland"
29 "wlroots-git"
30 "xcb-util-wm"
31)
32makedepends=(
33 "git"
34 "libcap"
35 "meson"
36 "scdoc"
37 "wayland-protocols"
38)
39optdepends=(
40 'wmenu: Application launcher used in default configuration'
41 'foot: Terminal emulator used in default configuration'
42 'polkit: System privilege control. Required if not using seatd service'
43 'swaybg: Wallpaper tool for sway'
44 'swayidle: Idle management daemon'
45 'swaylock: Screen locker'
46 'xorg-xwayland: X11 support'
47)
48install=sway.install
49provides=("${_pkgname}")
50conflicts=("${_pkgname}")
51backup=("etc/sway/config")
52source=("${_pkgname}::git+https://code.pepega.club/33KK/sway.git"
53 "50-systemd-user.conf")
54b2sums=('SKIP'
55 'SKIP')
56
57pkgver() {
58 # Calculate the version dynamically using git information
59 printf "r%s.%s" "$(git -C "$srcdir/${_pkgname}" rev-list --count HEAD)" "$(git -C "$srcdir/${_pkgname}" rev-parse --short HEAD)"
60}
61
62build() {
63 arch-meson "${_pkgname}" build -D sd-bus-provider=libsystemd -D werror=false
64
65 meson compile -C build
66}
67
68package() {
69 meson install -C build --destdir "$pkgdir"
70
71 install -Dm644 50-systemd-user.conf -t "$pkgdir/etc/sway/config.d/"
72 install -Dm644 "${_pkgname}/LICENSE" "$pkgdir/usr/share/licenses/${_pkgname}/LICENSE"
73}
74

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion