w_scan_cpp
LOW
maintainer ohli
200 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source URLs point to official project repositories (GitHub and a project-owned git domain), and the package builds from source; the non-standard host is part of the project's own infrastructure, posing minimal risk.
Triggered rules
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-07-25) reviewed this and agrees it is LOW (confidence 95%): The source URLs point to official project repositories (GitHub and a project-owned git domain), and the package builds from source; the non-standard host is part of the project's own infrastructure, posing minimal risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:21
"git://git.tvdr.de/vdr.git#commit=$_vdr_gitver"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: ohli <olifriedrich at gmail dot com>
2
# Contributor: Manuel Reimer <manuel.reimer@gmx.de>
3
4
pkgname=w_scan_cpp
5
pkgver=20260515
6
pkgrel=2
7
8
# These are versions of dependencies used by w_scan_cpp
9
_wirbelscan_version=2026.05.15
10
_satip_gitver=ca4104f2f3799fcf497e25e50db1e2807947ac53
11
_vdr_gitver=65ca01c6a0d73426c2c15d85df03ffde2a1bf931
12
13
pkgdesc="A dtv channel scanner based on VDR. Successor of w_scan"
14
arch=('x86_64' 'i686' 'arm' 'armv6h' 'armv7h' 'aarch64')
15
url="https://www.gen2vdr.de/wirbel/w_scan_cpp/index2.html"
16
license=('GPL-1.0-or-later')
17
depends=('freetype2' 'fontconfig' 'pugixml' 'librepfunc' 'libjpeg-turbo' 'curl')
18
makedepends=('git' 'pango')
19
source=("$pkgname-$pkgver.tar.gz::https://github.com/wirbel-at-vdr-portal/w_scan_cpp/archive/refs/tags/$pkgver.tar.gz"
20
"vdr-wirbelscan-$_wirbelscan_version.tar.gz::https://github.com/wirbel-at-vdr-portal/wirbelscan-dev/archive/refs/tags/$_wirbelscan_version.tar.gz"
21
"git://git.tvdr.de/vdr.git#commit=$_vdr_gitver"
22
"vdr-plugin-satip-wirbel::git+https://github.com/wirbel-at-vdr-portal/vdr-plugin-satip.git#commit=$_satip_gitver"
23
)
24
sha256sums=('63a62aa9b793cd5d634886be4930abce367746b57181f62a74ec9546a6800352'
25
'6e4bfb472999e4618b7d015943417024c27fb7baf0d1e11f44f5d9aef2c5495e'
26
'11ec378a3bba5931c5415354d0c55dfd9089dad637db194aa4a845830a207c88'
27
'3b51f4126c0f92b189e0fc5827d458aec562e2c6f47d02f19519e7921ae641df')
28
29
prepare() {
30
cd "$srcdir/$pkgname-$pkgver"
31
32
# Copy VDR source into place
33
cp -a "$srcdir/vdr" .
34
rm -rf "vdr/.git"
35
mkdir -p "vdr/PLUGINS/src"
36
mkdir -p "vdr/PLUGINS/lib"
37
38
# Copy plugin sources into place
39
cp -a "$srcdir/vdr-plugin-satip-wirbel" "vdr/PLUGINS/src"
40
ln -s "vdr-plugin-satip-wirbel" "vdr/PLUGINS/src/satip"
41
cp -a "$srcdir/wirbelscan-dev-$_wirbelscan_version" "vdr/PLUGINS/src"
42
ln -s "wirbelscan-dev-$_wirbelscan_version" "vdr/PLUGINS/src/wirbelscan"
43
}
44
45
build() {
46
cd "$srcdir/$pkgname-$pkgver"
47
make
48
}
49
50
package() {
51
cd "$srcdir/$pkgname-$pkgver"
52
make prefix="$pkgdir/usr" install
53
}
54
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |