thunderbird-tbsync

MEDIUM
maintainer Alfred456654 3 votes scanned 2026-10-21 07:31:05.029830
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:17 source=("https://addons.thunderbird.net/thunderbird/downloads/file/${_file}/${_name}-${pkgver}-tb.xpi")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Claudia Pellegrino <aur ät cpellegrino.de>
2# Contributor: Michal Wojdyla < micwoj9292 at gmail dot com>
3# Contributor: Javier Tiá <javier dot tia at gmail dot com>
4
5# https://addons.thunderbird.net/thunderbird/downloads/file/1031856/tbsync-4.11-tb.xpi?src=version-history
6pkgname=thunderbird-tbsync
7_name=tbsync
8_file=1031856
9pkgver=5.3.8
10pkgrel=1
11pkgdesc="Sync contacts, tasks and calendars to thunderbird using Exchange ActiveSync (EAS) and CalDAV/CardDAV"
12arch=('any')
13url="https://github.com/jobisoft/TbSync"
14license=('MPL2')
15groups=('office')
16depends=('thunderbird>=153')
17source=("https://addons.thunderbird.net/thunderbird/downloads/file/${_file}/${_name}-${pkgver}-tb.xpi")
18noextract=("${_name}-${pkgver}-tb.xpi")
19sha512sums=('4e9db58866baa6ffa0811896566c846772fb7a3886db5fc4b14785e59661d3e9d4f868a522e5788a67fede0f2076ba9d0b2ca0b049872838a9aea42c6c67ad48')
20
21package() {
22 _extension_id="tbsync@jobisoft.de"
23 _extension_dest="${pkgdir}/usr/lib/thunderbird/extensions/${_extension_id}"
24 install -Dm644 "${srcdir}/${_name}-${pkgver}-tb.xpi" "${_extension_dest}.xpi"
25}
26

Changes since previous scan

--- PKGBUILD @ 2026-06-19 23:51
+++ PKGBUILD @ 2026-10-21 07:31
@@ -6,14 +6,14 @@
pkgname=thunderbird-tbsync
_name=tbsync
_file=1031856
-pkgver=4.11
+pkgver=5.3.8
pkgrel=1
pkgdesc="Sync contacts, tasks and calendars to thunderbird using Exchange ActiveSync (EAS) and CalDAV/CardDAV"
arch=('any')
url="https://github.com/jobisoft/TbSync"
license=('MPL2')
groups=('office')
-depends=('thunderbird>=128')
+depends=('thunderbird>=153')
source=("https://addons.thunderbird.net/thunderbird/downloads/file/${_file}/${_name}-${pkgver}-tb.xpi")
noextract=("${_name}-${pkgver}-tb.xpi")
sha512sums=('4e9db58866baa6ffa0811896566c846772fb7a3886db5fc4b14785e59661d3e9d4f868a522e5788a67fede0f2076ba9d0b2ca0b049872838a9aea42c6c67ad48')

Scan history

Scanned at (UTC)SeverityRules
2026-10-21 07:31:05 Medium 1
2026-06-19 23:51:18 Clean 2
2026-06-19 19:07:35 Medium 2
2026-06-19 18:54:17 Medium 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion