w_scan_cpp
maintainer ohli
· 200 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The source URLs point to official project repositories (GitHub and a project-owned git domain), and the package builds from source; the non-standard host is part of the project's own infrastructure, posing minimal risk.
Triggered rules
LOW
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-07-25) reviewed this and agrees it is LOW (confidence 95%): The source URLs point to official project repositories (GitHub and a project-owned git domain), and the package builds from source; the non-standard host is part of the project's own infrastructure, posing minimal risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:21
"git://git.tvdr.de/vdr.git#commit=$_vdr_gitver"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: ohli <olifriedrich at gmail dot com>
2
# Contributor: Manuel Reimer <manuel.reimer@gmx.de>
3
4
pkgname=w_scan_cpp
5
pkgver=20260515
6
pkgrel=2
7
8
# These are versions of dependencies used by w_scan_cpp
9
_wirbelscan_version=2026.05.15
10
_satip_gitver=ca4104f2f3799fcf497e25e50db1e2807947ac53
11
_vdr_gitver=65ca01c6a0d73426c2c15d85df03ffde2a1bf931
12
13
pkgdesc="A dtv channel scanner based on VDR. Successor of w_scan"
14
arch=('x86_64' 'i686' 'arm' 'armv6h' 'armv7h' 'aarch64')
15
url="https://www.gen2vdr.de/wirbel/w_scan_cpp/index2.html"
16
license=('GPL-1.0-or-later')
17
depends=('freetype2' 'fontconfig' 'pugixml' 'librepfunc' 'libjpeg-turbo' 'curl')
18
makedepends=('git' 'pango')
19
source=("$pkgname-$pkgver.tar.gz::https://github.com/wirbel-at-vdr-portal/w_scan_cpp/archive/refs/tags/$pkgver.tar.gz"
20
"vdr-wirbelscan-$_wirbelscan_version.tar.gz::https://github.com/wirbel-at-vdr-portal/wirbelscan-dev/archive/refs/tags/$_wirbelscan_version.tar.gz"
21
"git://git.tvdr.de/vdr.git#commit=$_vdr_gitver"
22
"vdr-plugin-satip-wirbel::git+https://github.com/wirbel-at-vdr-portal/vdr-plugin-satip.git#commit=$_satip_gitver"
23
)
24
sha256sums=('63a62aa9b793cd5d634886be4930abce367746b57181f62a74ec9546a6800352'
25
'6e4bfb472999e4618b7d015943417024c27fb7baf0d1e11f44f5d9aef2c5495e'
26
'11ec378a3bba5931c5415354d0c55dfd9089dad637db194aa4a845830a207c88'
27
'3b51f4126c0f92b189e0fc5827d458aec562e2c6f47d02f19519e7921ae641df')
28
29
prepare() {
30
cd "$srcdir/$pkgname-$pkgver"
31
32
# Copy VDR source into place
33
cp -a "$srcdir/vdr" .
34
rm -rf "vdr/.git"
35
mkdir -p "vdr/PLUGINS/src"
36
mkdir -p "vdr/PLUGINS/lib"
37
38
# Copy plugin sources into place
39
cp -a "$srcdir/vdr-plugin-satip-wirbel" "vdr/PLUGINS/src"
40
ln -s "vdr-plugin-satip-wirbel" "vdr/PLUGINS/src/satip"
41
cp -a "$srcdir/wirbelscan-dev-$_wirbelscan_version" "vdr/PLUGINS/src"
42
ln -s "wirbelscan-dev-$_wirbelscan_version" "vdr/PLUGINS/src/wirbelscan"
43
}
44
45
build() {
46
cd "$srcdir/$pkgname-$pkgver"
47
make
48
}
49
50
package() {
51
cd "$srcdir/$pkgname-$pkgver"
52
make prefix="$pkgdir/usr" install
53
}
54
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |