verifpal-bin

MEDIUM
maintainer Fethbita 0 votes scanned 2026-09-17 01:24:19.570146
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:14 "$pkgname-$pkgver-manual.pdf::https://static.verifpal.com/manual.pdf"
  • PKGBUILD:15 "$pkgname-$pkgver-manual-license.txt::https://creativecommons.org/licenses/by-nc-nd/4.0/legalcode.txt")

PKGBUILD

2 offending line(s) highlighted
1# Maintainer: Fethbita <aur AT fethbita DOT com>
2
3pkgname=verifpal-bin
4_pkgname=verifpal
5pkgver=1.4.10
6pkgrel=1
7pkgdesc="Cryptographic protocol analysis for real-world protocols."
8arch=('x86_64')
9url="https://verifpal.com"
10license=('GPL3' 'custom:cc-by-nc-nd-4.0')
11provides=('verifpal')
12conflicts=('verifpal')
13source=("https://github.com/symbolicsoft/verifpal/releases/download/v${pkgver}/verifpal_${pkgver}_linux_amd64.zip"
14 "$pkgname-$pkgver-manual.pdf::https://static.verifpal.com/manual.pdf"
15 "$pkgname-$pkgver-manual-license.txt::https://creativecommons.org/licenses/by-nc-nd/4.0/legalcode.txt")
16sha256sums=('da118378f3f5e38117c2b6c6b88d28835eaced212d8e5b67ff1a0c58a9d4cbf3'
17 '18cc799eaf23b80916bf23d11066f8af6c5a27d05dd094bf88ef233736337440'
18 '38762e3777f4ec00a6f769062a7c3f704fb78ce08303ecff88558da4c49cf9ea')
19
20package() {
21 install -Dm644 "$pkgname-$pkgver-manual.pdf" "${pkgdir}/usr/share/doc/${_pkgname}/manual.pdf"
22 install -Dm644 "$pkgname-$pkgver-manual-license.txt" "${pkgdir}/usr/share/licenses/${_pkgname}/manual-LICENSE"
23 install -Dm755 "${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
24 install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${_pkgname}/LICENSE"
25 install -Dm644 README.md "${pkgdir}/usr/share/doc/${_pkgname}/README.md"
26 install -dm755 "${pkgdir}/usr/share/doc/${_pkgname}/examples"
27 cp -r examples/* "${pkgdir}/usr/share/doc/${_pkgname}/examples/"
28}
29
30# vim:set ts=2 sw=2 et:
31

Changes since previous scan

--- PKGBUILD @ 2026-09-16 00:03
+++ PKGBUILD @ 2026-09-17 01:24
@@ -14,7 +14,7 @@
"$pkgname-$pkgver-manual.pdf::https://static.verifpal.com/manual.pdf"
"$pkgname-$pkgver-manual-license.txt::https://creativecommons.org/licenses/by-nc-nd/4.0/legalcode.txt")
sha256sums=('da118378f3f5e38117c2b6c6b88d28835eaced212d8e5b67ff1a0c58a9d4cbf3'
- 'eff2f5e06a0c082bc1e474c20ba372b68c36fd5405f9363b8269165c62433788'
+ '18cc799eaf23b80916bf23d11066f8af6c5a27d05dd094bf88ef233736337440'
'38762e3777f4ec00a6f769062a7c3f704fb78ce08303ecff88558da4c49cf9ea')
package() {

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 01:24:19 Medium 1
2026-09-17 00:27:14 Low 2
2026-09-16 01:20:46 Medium 1
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 01:18:32 Medium 1
2026-09-09 00:04:09 Low 2
2026-09-08 01:15:25 Medium 1
2026-09-08 00:18:08 Low 2
2026-09-07 01:12:52 Medium 1
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 14:00:22 Medium 1
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion