swiftly-bin

MEDIUM
maintainer speedorama 5 votes scanned 2026-09-15 21:20:38.565393
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:16 source_x86_64=("https://download.swift.org/${_pkgname}/linux/${_pkgname}-${pkgver}-x86_64.tar.gz")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Mark <speedorama1 at gmail dot com>
2
3_pkgname=swiftly
4pkgname=swiftly-bin
5pkgver=1.1.4
6pkgrel=1
7pkgdesc="A Swift toolchain installer and manager, written in Swift."
8arch=('x86_64' 'aarch64')
9url="https://swiftlang.github.io/swiftly/"
10license=('apache')
11depends=('util-linux-libs' 'libxml2-legacy' 'ncurses' 'gcc')
12optdepends=('python39: required for REPL' 'gnupg: required for toolchain verification')
13options=('!strip')
14provides=(swift-language)
15conflicts=(swift-language)
16source_x86_64=("https://download.swift.org/${_pkgname}/linux/${_pkgname}-${pkgver}-x86_64.tar.gz")
17source_aarch64=("https://download.swift.org/${_pkgname}/linux/${_pkgname}-${pkgver}-aarch64.tar.gz")
18sha256sums_x86_64=('243af08fa4a216a1d57f62851ae2a6b6eed215130779ce4635fd03adb230044f')
19sha256sums_aarch64=('f0bece813e2dcee1501ed966a85233f842c31f936dd44219eadb08595a65f968')
20
21package() {
22 install -D -m 0755 ${_pkgname} ${pkgdir}/usr/bin/${_pkgname}
23
24 # setting up symlinks to existing ncurses libs (no ncurses5-compat-libs needed!)
25 mkdir -p ${pkgdir}/usr/lib
26 ln -s /usr/lib/libncursesw.so.6 ${pkgdir}/usr/lib/libncurses.so.6
27 ln -s /usr/lib/libformw.so.6 ${pkgdir}/usr/lib/libform.so.6
28 ln -s /usr/lib/libpanelw.so.6 ${pkgdir}/usr/lib/libpanel.so.6
29
30 echo "This package is meant to be used with RHEL 9 (ubi9) Swift releases."
31}
32

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-09-15 21:20
@@ -2,7 +2,7 @@
_pkgname=swiftly
pkgname=swiftly-bin
-pkgver=1.1.3
+pkgver=1.1.4
pkgrel=1
pkgdesc="A Swift toolchain installer and manager, written in Swift."
arch=('x86_64' 'aarch64')
@@ -15,8 +15,8 @@
conflicts=(swift-language)
source_x86_64=("https://download.swift.org/${_pkgname}/linux/${_pkgname}-${pkgver}-x86_64.tar.gz")
source_aarch64=("https://download.swift.org/${_pkgname}/linux/${_pkgname}-${pkgver}-aarch64.tar.gz")
-sha256sums_x86_64=('4c4adb7b7ad7910f38c52b94a938c309586fe395e1fe1538c397384ee36bfff0')
-sha256sums_aarch64=('cc4f912fff6c7f53704fc6d22f9e8ee7fdf6bd574ad276998f7502418bf5a45a')
+sha256sums_x86_64=('243af08fa4a216a1d57f62851ae2a6b6eed215130779ce4635fd03adb230044f')
+sha256sums_aarch64=('f0bece813e2dcee1501ed966a85233f842c31f936dd44219eadb08595a65f968')
package() {
install -D -m 0755 ${_pkgname} ${pkgdir}/usr/bin/${_pkgname}

Scan history

Scanned at (UTC)SeverityRules
2026-09-15 21:20:38 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 18:04:49 Clean 2
2026-06-18 17:53:10 Medium 1
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion