wammu
LOW
maintainer orphaned
3 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The source is a tarball from the project's official domain (wammu.eu) hosted on a subdomain (dl.cihar.com) used for downloads; building from official project-controlled infrastructure is normal for AUR packages.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official domain (wammu.eu) hosted on a subdomain (dl.cihar.com) used for downloads; building from official project-controlled infrastructure is normal for AUR packages.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:27
"https://dl.cihar.com/${pkgname}/v0/${pkgname}-${pkgver}.tar.xz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: dreieck
2
# Contributor: Gasparotto Mattia <gasmat04@gmail.com>
3
4
### Note on python version for wammu 0.44: Python2.
5
6
pkgname=wammu
7
pkgver=0.44
8
pkgrel=14
9
pkgdesc="A wxPython-based GUI for Gammu, a mobile phone manager."
10
arch=('any')
11
url="https://wammu.eu/wammu/"
12
license=('GPL')
13
depends=(
14
'python2-gammu'
15
'python2-six'
16
'wxpython'
17
)
18
makedepends=(
19
'python2-pybluez<0.23'
20
'python2-setuptools'
21
)
22
optdepends=(
23
'gnome-bluetooth: Bluetooth support'
24
'python2-pybluez<0.23: Bluetooth support'
25
)
26
source=(
27
"https://dl.cihar.com/${pkgname}/v0/${pkgname}-${pkgver}.tar.xz"
28
)
29
sha256sums=(
30
'bf8199f888cb60e4a24839e71ec6f8e8deb11fd22f592fe1112e3252bd4b9145'
31
)
32
33
prepare() {
34
cd "${srcdir}/${pkgname}-${pkgver}"
35
for _pyfile in *.py; do
36
msg2 "Patching shabeng line for python2 in '${_pyfile}' ..."
37
sed -E -i '1s|^#!(.*)python$|#!\1python2|' "${_pyfile}"
38
done
39
}
40
41
build() {
42
cd "${srcdir}/${pkgname}-${pkgver}"
43
python2 setup.py build
44
}
45
46
package() {
47
cd "${srcdir}/${pkgname}-${pkgver}"
48
python2 setup.py install --root="${pkgdir}" --optimize=1 --skip-build
49
}
50
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |