udefrag

LOW
maintainer pingwin840 15 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The source is hosted on the project maintainer's plausible personal domain, which is not on the whitelist, but the package builds from source code (not a prebuilt binary) and the checksums are provided, making it a low-risk, typical AUR package.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is hosted on the project maintainer's plausible personal domain, which is not on the whitelist, but the package builds from source code (not a prebuilt binary) and the checksums are provided, making it a low-risk, typical AUR package.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:13 source=("http://jp-andre.pagesperso-orange.fr/ultradefrag-${pkgver}.zip" "udefrag.patch")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: frimen <frimen.c@gmail.com>
2# Contributor: 100best
3
4pkgname=udefrag
5pkgver=5.0.0AB.8
6pkgrel=1
7pkgdesc="Ultradefrag 5.0 console for GNU/Linux to defragment a NTFS filesystem"
8url="http://jp-andre.pagesperso-orange.fr/advanced-ntfs-3g.html"
9arch=('x86_64')
10license=('GPL')
11makedepends=('unzip')
12depends=('ncurses' 'ntfs-3g')
13source=("http://jp-andre.pagesperso-orange.fr/ultradefrag-${pkgver}.zip" "udefrag.patch")
14md5sums=('e6de75d30f92d4c5e211470f6fe28be5'
15 'f9813005670f6657417fb65769683257')
16
17prepare() {
18 patch -p 1 -i udefrag.patch
19}
20
21build() {
22 cd $srcdir/ultradefrag-${pkgver}/src
23 make
24}
25
26package() {
27 cd $srcdir/ultradefrag-${pkgver}/src
28 mkdir -p $pkgdir/usr/bin
29 cp udefrag $pkgdir/usr/bin
30}
31

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion