vev-bin

MEDIUM

maintainer bnema 0 votes scanned 2026-10-22 07:34:22.999679

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:14 source_aarch64=("${pkgname}_${pkgver}_aarch64.tar.gz::https://git.bnema.dev/vev/releases/download/v${pkgver}/vev_linux_arm64.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# This file was generated by GoReleaser. DO NOT EDIT.
    
      2# Maintainer: bnema <b at bnema dot dev>
    
      3
    
      4pkgname='vev-bin'
    
      5pkgver=0.9.1
    
      6pkgrel=1
    
      7pkgdesc='Terminal multiplexer with a per-user daemon, server-side rendering, and minimal socket/SSH diffs'
    
      8url='https://git.bnema.dev/vev'
    
      9arch=('aarch64' 'x86_64')
    
      10license=('MIT')
    
      11provides=('vev')
    
      12conflicts=('vev')
    
      13
    
      14source_aarch64=("${pkgname}_${pkgver}_aarch64.tar.gz::https://git.bnema.dev/vev/releases/download/v${pkgver}/vev_linux_arm64.tar.gz")
    
      15sha256sums_aarch64=('8195551e9a7157bb56cadb96f30df0ba3a90c2c82eda6a371fbd0e04c0c77b31')
    
      16
    
      17source_x86_64=("${pkgname}_${pkgver}_x86_64.tar.gz::https://git.bnema.dev/vev/releases/download/v${pkgver}/vev_linux_x86_64.tar.gz")
    
      18sha256sums_x86_64=('e2fadc0db00bdc8f7754e38dd53f30d8e3e6de408d3974dacb10fd537848a876')
    
      19
    
      20package() {
    
      21  install -Dm755 "./vev" "${pkgdir}/usr/bin/vev"
    
      22  install -Dm755 "./scripts/vev-bar-top-right" "${pkgdir}/usr/bin/vev-bar-top-right"
    
      23  install -Dm755 "./scripts/vev-bar-bottom-right" "${pkgdir}/usr/bin/vev-bar-bottom-right"
    
      24  install -Dm644 "./LICENSE" "${pkgdir}/usr/share/licenses/vev-bin/LICENSE"
    
      25}
    
      26

Changes since previous scan

--- PKGBUILD @ 2026-10-16 17:16
+++ PKGBUILD @ 2026-10-22 07:34
@@ -2,20 +2,20 @@
 # Maintainer: bnema <b at bnema dot dev>
 
 pkgname='vev-bin'
-pkgver=0.9.0
+pkgver=0.9.1
 pkgrel=1
 pkgdesc='Terminal multiplexer with a per-user daemon, server-side rendering, and minimal socket/SSH diffs'
-url='https://github.com/bnema/vev'
+url='https://git.bnema.dev/vev'
 arch=('aarch64' 'x86_64')
 license=('MIT')
 provides=('vev')
 conflicts=('vev')
 
-source_aarch64=("${pkgname}_${pkgver}_aarch64.tar.gz::https://github.com/bnema/vev/releases/download/v${pkgver}/vev_linux_arm64.tar.gz")
-sha256sums_aarch64=('206bced3f6d7d60991b0b4b72ae17c5adb1720c528c9e023dca1a46f18a7e4cf')
+source_aarch64=("${pkgname}_${pkgver}_aarch64.tar.gz::https://git.bnema.dev/vev/releases/download/v${pkgver}/vev_linux_arm64.tar.gz")
+sha256sums_aarch64=('8195551e9a7157bb56cadb96f30df0ba3a90c2c82eda6a371fbd0e04c0c77b31')
 
-source_x86_64=("${pkgname}_${pkgver}_x86_64.tar.gz::https://github.com/bnema/vev/releases/download/v${pkgver}/vev_linux_x86_64.tar.gz")
-sha256sums_x86_64=('ed70d6a76cae0f6582904b48bc63b56d490bad40ece48036c0428a2ded60a1ac')
+source_x86_64=("${pkgname}_${pkgver}_x86_64.tar.gz::https://git.bnema.dev/vev/releases/download/v${pkgver}/vev_linux_x86_64.tar.gz")
+sha256sums_x86_64=('e2fadc0db00bdc8f7754e38dd53f30d8e3e6de408d3974dacb10fd537848a876')
 
 package() {
   install -Dm755 "./vev" "${pkgdir}/usr/bin/vev"

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-22 07:34:22	Medium	1
2026-10-16 17:16:11	Clean	0
2026-10-15 05:10:54	Clean	0
2026-10-08 22:09:59	Clean	0
2026-10-08 06:08:09	Clean	0
2026-10-05 23:40:58	Clean	0
2026-09-27 17:19:13	Clean	0
2026-08-12 07:23:13	Clean	0
2026-07-30 00:17:23	Clean	2
2026-07-29 07:10:52	Low	1