sway-title-animator
MEDIUM
maintainer marang
0 votes
scanned 2026-11-04 18:07:34.859631
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:15
source=("sway-title-animator-$pkgver.tar.gz::https://get.izoone.com/sway-title-animator/v$pkgver/sway-title-animator-00fc5a09935e54c330b340cb71188fa33c44a2d6.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: marang <1550038+marang@users.noreply.github.com>
2
# Release template: the AUR workflow replaces pkgver and sha256sums from the
3
# pushed version tag, resets pkgrel to 1, verifies the resulting source, and
4
# builds it before push.
5
pkgname=sway-title-animator
6
pkgver=0.11.0
7
pkgrel=2
8
pkgdesc="Animated Unicode titlebars for Sway"
9
arch=('x86_64' 'aarch64')
10
url="https://entire.com/et/marang/sway-title-animator"
11
license=('MIT')
12
depends=('sway')
13
makedepends=('go>=1.26.10')
14
options=('!debug')
15
source=("sway-title-animator-$pkgver.tar.gz::https://get.izoone.com/sway-title-animator/v$pkgver/sway-title-animator-00fc5a09935e54c330b340cb71188fa33c44a2d6.tar.gz")
16
sha256sums=('c3ce162478fff664e50042455dec2a3bbb1fc37fa9989ce21feed5b880598d20')
17
18
_go_build_flags=(-buildmode=pie -trimpath -buildvcs=false -mod=readonly -modcacherw)
19
_go_ldflags=(-s -w -buildid=)
20
21
build() {
22
cd "sway-title-animator-00fc5a09935e54c330b340cb71188fa33c44a2d6"
23
if [[ -d cmd/sway-session ]]; then
24
printf '%s\n' 'This animator-only recipe requires split source (v0.10.0 or newer).' 'Use the released v0.9.3 recipe for the combined package, or wait for the v0.10.0 metadata sync.' >&2
25
return 1
26
fi
27
export GOCACHE="$srcdir/go-build"
28
export GOMODCACHE="$srcdir/go-mod"
29
export GOTOOLCHAIN=local
30
31
CGO_ENABLED=0 go build "${_go_build_flags[@]}" -ldflags="${_go_ldflags[*]}" -o sway-title-animator ./cmd/sway-title-animator
32
}
33
34
check() {
35
cd "sway-title-animator-00fc5a09935e54c330b340cb71188fa33c44a2d6"
36
export GOCACHE="$srcdir/go-build"
37
export GOMODCACHE="$srcdir/go-mod"
38
export GOTOOLCHAIN=local
39
40
CGO_ENABLED=0 go test "${_go_build_flags[@]}" -count=1 ./...
41
}
42
43
package() {
44
cd "sway-title-animator-00fc5a09935e54c330b340cb71188fa33c44a2d6"
45
install -Dm755 sway-title-animator "$pkgdir/usr/bin/sway-title-animator"
46
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
47
install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
48
install -Dm644 config.example.toml "$pkgdir/usr/share/doc/$pkgname/config.example.toml"
49
install -Dm644 contrib/sway/45-title-animator.conf "$pkgdir/usr/share/doc/$pkgname/45-title-animator.conf"
50
}
51
Changes since previous scan
--- PKGBUILD @ 2026-11-04 10:06+++ PKGBUILD @ 2026-11-04 18:07@@ -3,23 +3,23 @@ # pushed version tag, resets pkgrel to 1, verifies the resulting source, and # builds it before push. pkgname=sway-title-animator-pkgver=0.10.2-pkgrel=1+pkgver=0.11.0+pkgrel=2 pkgdesc="Animated Unicode titlebars for Sway" arch=('x86_64' 'aarch64')-url="https://automation.izoone.com/releases/sway-title-animator"+url="https://entire.com/et/marang/sway-title-animator" license=('MIT') depends=('sway') makedepends=('go>=1.26.10') options=('!debug')-source=("sway-title-animator-$pkgver.tar.gz::$url/v$pkgver/sway-title-animator-7597ad2be20b3c98a263e78e3dbf9307b409267e.tar.gz")-sha256sums=('b2a81cd9135aac0b21913c96f842bcb669f3f7c11eb39ef059330770fb322628')+source=("sway-title-animator-$pkgver.tar.gz::https://get.izoone.com/sway-title-animator/v$pkgver/sway-title-animator-00fc5a09935e54c330b340cb71188fa33c44a2d6.tar.gz")+sha256sums=('c3ce162478fff664e50042455dec2a3bbb1fc37fa9989ce21feed5b880598d20') _go_build_flags=(-buildmode=pie -trimpath -buildvcs=false -mod=readonly -modcacherw) _go_ldflags=(-s -w -buildid=) build() {- cd "sway-title-animator-7597ad2be20b3c98a263e78e3dbf9307b409267e"+ cd "sway-title-animator-00fc5a09935e54c330b340cb71188fa33c44a2d6" if [[ -d cmd/sway-session ]]; then printf '%s\n' 'This animator-only recipe requires split source (v0.10.0 or newer).' 'Use the released v0.9.3 recipe for the combined package, or wait for the v0.10.0 metadata sync.' >&2 return 1@@ -32,7 +32,7 @@ } check() {- cd "sway-title-animator-7597ad2be20b3c98a263e78e3dbf9307b409267e"+ cd "sway-title-animator-00fc5a09935e54c330b340cb71188fa33c44a2d6" export GOCACHE="$srcdir/go-build" export GOMODCACHE="$srcdir/go-mod" export GOTOOLCHAIN=local@@ -41,7 +41,7 @@ } package() {- cd "sway-title-animator-7597ad2be20b3c98a263e78e3dbf9307b409267e"+ cd "sway-title-animator-00fc5a09935e54c330b340cb71188fa33c44a2d6" install -Dm755 sway-title-animator "$pkgdir/usr/bin/sway-title-animator" install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE" install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-04 18:07:34 | Medium | 1 |
| 2026-11-04 10:06:54 | Clean | 0 |
| 2026-11-02 00:02:06 | Clean | 0 |
| 2026-10-24 15:40:54 | Clean | 0 |
| 2026-09-05 14:00:22 | Clean | 0 |
| 2026-09-05 09:59:47 | Clean | 0 |
| 2026-09-04 23:58:52 | Clean | 0 |
| 2026-09-04 21:58:42 | Clean | 0 |
| 2026-09-03 21:54:41 | Clean | 0 |
| 2026-09-03 17:54:21 | Clean | 0 |
| 2026-09-02 23:51:41 | Clean | 0 |
| 2026-09-02 19:51:22 | Clean | 0 |
| 2026-09-02 09:50:35 | Clean | 0 |
| 2026-09-02 01:49:31 | Clean | 0 |
| 2026-09-01 23:49:29 | Clean | 0 |
| 2026-09-01 21:49:23 | Clean | 0 |
| 2026-08-30 09:42:21 | Clean | 0 |
| 2026-07-27 11:35:00 | Clean | 0 |
| 2026-07-26 23:33:54 | Clean | 0 |
| 2026-07-26 13:32:26 | Clean | 0 |