verifpal

MEDIUM
maintainer Fethbita 2 votes scanned 2026-09-17 03:24:22.735270
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:14 "$pkgname-$pkgver-manual.pdf::https://static.verifpal.com/manual.pdf"
  • PKGBUILD:15 "$pkgname-$pkgver-manual-license.txt::https://creativecommons.org/licenses/by-nc-nd/4.0/legalcode.txt")

PKGBUILD

2 offending line(s) highlighted
1# Maintainer: Fethbita <aur AT fethbita DOT com>
2# Contributor: Luis Martinez <luis dot martinez at disroot dot org>
3# Contributor: <philipp.classen@posteo.de>
4
5pkgname=verifpal
6pkgver=1.4.10
7pkgrel=1
8pkgdesc="Cryptographic protocol analysis for real-world protocols."
9arch=('x86_64')
10url="https://verifpal.com"
11license=('GPL3' 'custom:cc-by-nc-nd-4.0')
12makedepends=('rust' 'cargo')
13source=("https://github.com/symbolicsoft/verifpal/archive/refs/tags/v${pkgver}.tar.gz"
14 "$pkgname-$pkgver-manual.pdf::https://static.verifpal.com/manual.pdf"
15 "$pkgname-$pkgver-manual-license.txt::https://creativecommons.org/licenses/by-nc-nd/4.0/legalcode.txt")
16sha256sums=('0767624e67a4987c353df8b2183de394bb776e53a9072ec59e769a2b25586d76'
17 '18cc799eaf23b80916bf23d11066f8af6c5a27d05dd094bf88ef233736337440'
18 '38762e3777f4ec00a6f769062a7c3f704fb78ce08303ecff88558da4c49cf9ea')
19
20build() {
21 cd "$pkgname-$pkgver"
22 export CFLAGS="${CFLAGS:-} -fno-lto"
23 export CXXFLAGS="${CXXFLAGS:-} -fno-lto"
24 cargo build --release --locked
25}
26
27check() {
28 cd "$pkgname-$pkgver"
29 cargo test --release
30}
31
32package() {
33 install -Dm644 "$pkgname-$pkgver-manual.pdf" "${pkgdir}/usr/share/doc/${pkgname}/manual.pdf"
34 install -Dm644 "$pkgname-$pkgver-manual-license.txt" "${pkgdir}/usr/share/licenses/${_pkgname}/manual-LICENSE"
35 cd "$pkgname-$pkgver"
36 install -Dm755 "target/release/${pkgname}" "${pkgdir}/usr/bin/${pkgname}"
37 install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
38 install -Dm644 README.md "${pkgdir}/usr/share/doc/${pkgname}/README.md"
39 install -dm755 "${pkgdir}/usr/share/doc/${pkgname}/examples"
40 cp -r examples/* "${pkgdir}/usr/share/doc/${pkgname}/examples/"
41}
42
43# vim:set ts=2 sw=2 et:
44

Changes since previous scan

--- PKGBUILD @ 2026-09-16 00:03
+++ PKGBUILD @ 2026-09-17 03:24
@@ -14,7 +14,7 @@
"$pkgname-$pkgver-manual.pdf::https://static.verifpal.com/manual.pdf"
"$pkgname-$pkgver-manual-license.txt::https://creativecommons.org/licenses/by-nc-nd/4.0/legalcode.txt")
sha256sums=('0767624e67a4987c353df8b2183de394bb776e53a9072ec59e769a2b25586d76'
- 'eff2f5e06a0c082bc1e474c20ba372b68c36fd5405f9363b8269165c62433788'
+ '18cc799eaf23b80916bf23d11066f8af6c5a27d05dd094bf88ef233736337440'
'38762e3777f4ec00a6f769062a7c3f704fb78ce08303ecff88558da4c49cf9ea')
build() {

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 03:24:22 Medium 1
2026-09-17 00:27:14 Low 2
2026-09-16 03:21:15 Medium 1
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 03:18:52 Medium 1
2026-09-09 00:04:09 Low 2
2026-09-08 03:15:31 Medium 1
2026-09-08 00:18:08 Low 2
2026-09-07 03:13:17 Medium 1
2026-09-07 00:30:15 Low 2
2026-09-06 02:02:01 Medium 1
2026-09-06 00:17:06 Low 2
2026-09-05 01:59:11 Medium 1
2026-09-05 00:16:27 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion