wammu
LOW
maintainer orphaned
3 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a tarball from the project's official domain (wammu.eu) hosted on a subdomain (dl.cihar.com) used for downloads; building from official project-controlled infrastructure is normal for AUR packages.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official domain (wammu.eu) hosted on a subdomain (dl.cihar.com) used for downloads; building from official project-controlled infrastructure is normal for AUR packages.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:27
"https://dl.cihar.com/${pkgname}/v0/${pkgname}-${pkgver}.tar.xz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: dreieck
2
# Contributor: Gasparotto Mattia <gasmat04@gmail.com>
3
4
### Note on python version for wammu 0.44: Python2.
5
6
pkgname=wammu
7
pkgver=0.44
8
pkgrel=14
9
pkgdesc="A wxPython-based GUI for Gammu, a mobile phone manager."
10
arch=('any')
11
url="https://wammu.eu/wammu/"
12
license=('GPL')
13
depends=(
14
'python2-gammu'
15
'python2-six'
16
'wxpython'
17
)
18
makedepends=(
19
'python2-pybluez<0.23'
20
'python2-setuptools'
21
)
22
optdepends=(
23
'gnome-bluetooth: Bluetooth support'
24
'python2-pybluez<0.23: Bluetooth support'
25
)
26
source=(
27
"https://dl.cihar.com/${pkgname}/v0/${pkgname}-${pkgver}.tar.xz"
28
)
29
sha256sums=(
30
'bf8199f888cb60e4a24839e71ec6f8e8deb11fd22f592fe1112e3252bd4b9145'
31
)
32
33
prepare() {
34
cd "${srcdir}/${pkgname}-${pkgver}"
35
for _pyfile in *.py; do
36
msg2 "Patching shabeng line for python2 in '${_pyfile}' ..."
37
sed -E -i '1s|^#!(.*)python$|#!\1python2|' "${_pyfile}"
38
done
39
}
40
41
build() {
42
cd "${srcdir}/${pkgname}-${pkgver}"
43
python2 setup.py build
44
}
45
46
package() {
47
cd "${srcdir}/${pkgname}-${pkgver}"
48
python2 setup.py install --root="${pkgdir}" --optimize=1 --skip-build
49
}
50
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |