wanpipe

LOW

maintainer thotypous 1 votes scanned 2026-10-07 00:21:34.957174

View on AUR

Why flagged

The source is a tarball from the official project's domain (sangoma.com), which is a standard and trusted host for this software; building from project-owned infrastructure is normal AUR practice even if not on a whitelist.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the official project's domain (sangoma.com), which is a standard and trusted host for this software; building from project-owned infrastructure is normal AUR practice even if not on a whitelist.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:19 "https://ftp.sangoma.com/linux/current_wanpipe/${pkgname}-${pkgver}.tgz"

PKGBUILD

1 offending line(s) highlighted

      1pkgname=wanpipe
    
      2pkgver=7.0.38
    
      3pkgrel=10
    
      4pkgdesc='Sangoma WANPIPE drivers and utilities for DAHDI'
    
      5arch=(x86_64)
    
      6url=https://ftp.sangoma.com/linux/current_wanpipe/
    
      7license=(GPL-2.0-or-later)
    
      8makedepends=(
    
      9  autoconf
    
      10  automake
    
      11  bison
    
      12  dahdi-linux
    
      13  flex
    
      14  libtool
    
      15  linux-headers
    
      16)
    
      17backup=(etc/wanpipe/wanrouter.rc)
    
      18source=(
    
      19  "https://ftp.sangoma.com/linux/current_wanpipe/${pkgname}-${pkgver}.tgz"
    
      20  arch-kernel-compat.patch
    
      21  wanpipe.service
    
      22)
    
      23sha256sums=(
    
      24  95266edd83bd8bb427f47f7a39365795936acc0d6e2e3a1e482bd015bba90fa2
    
      25  4b1fabab743cd59a60f4dd8bca1a8dc36264c875ed9090515594281187cb1588
    
      26  59b6f271556eadc0a4f71454ab3ec015478cbf3b81cf0446d9bb9cba62d2e0d6
    
      27)
    
      28
    
      29_kernelver() {
    
      30  pacman -Q linux-headers | cut -f2 -d ' ' | sed 's/\.arch/-arch/'
    
      31}
    
      32
    
      33_linuxpkgver() {
    
      34  pacman -Q linux-headers | cut -f2 -d ' '
    
      35}
    
      36
    
      37prepare() {
    
      38  cd "${pkgname}-${pkgver}"
    
      39  patch -Np1 -i "${srcdir}/arch-kernel-compat.patch"
    
      40}
    
      41
    
      42build() {
    
      43  cd "${pkgname}-${pkgver}"
    
      44  local kernelver="$(_kernelver)"
    
      45  [[ -e /usr/include/dahdi/kernel.h ]]
    
      46  make dahdi DAHDI_DIR=/usr KVER="${kernelver}" KDIR="/usr/lib/modules/${kernelver}/build"
    
      47}
    
      48
    
      49package() {
    
      50  depends=(
    
      51    dahdi-linux
    
      52    glibc
    
      53    "linux=$(_linuxpkgver)"
    
      54    ncurses
    
      55    net-tools
    
      56  )
    
      57
    
      58  cd "${pkgname}-${pkgver}"
    
      59  local kernelver="$(_kernelver)"
    
      60
    
      61  make DESTDIR="${pkgdir}" install_etc
    
      62  make DESTDIR="${pkgdir}" install_util
    
      63  make DESTDIR="${pkgdir}" install_inc
    
      64  make DESTDIR="${pkgdir}" install_lib
    
      65  rm -f "${pkgdir}"/etc/wanpipe/api/{libsangoma,libstelephony}/{config.log,config.status,Makefile}
    
      66
    
      67  if [[ -d "${pkgdir}/usr/sbin" ]]; then
    
      68    install -d "${pkgdir}/usr/bin"
    
      69    mv "${pkgdir}"/usr/sbin/* "${pkgdir}/usr/bin/"
    
      70    rm -rf "${pkgdir}/usr/sbin"
    
      71  fi
    
      72  if [[ -d "${pkgdir}/usr/local/sbin" ]]; then
    
      73    install -d "${pkgdir}/usr/bin"
    
      74    mv "${pkgdir}"/usr/local/sbin/* "${pkgdir}/usr/bin/"
    
      75    rm -rf "${pkgdir}/usr/local"
    
      76  fi
    
      77
    
      78  install -Dm0644 patches/kdrivers/src/net/sdladrv.ko \
    
      79    "${pkgdir}/usr/lib/modules/${kernelver}/kernel/drivers/net/wan/sdladrv.ko"
    
      80  install -Dm0644 patches/kdrivers/src/net/wanpipe.ko \
    
      81    "${pkgdir}/usr/lib/modules/${kernelver}/kernel/drivers/net/wan/wanpipe.ko"
    
      82  install -Dm0644 patches/kdrivers/src/net/wanrouter.ko \
    
      83    "${pkgdir}/usr/lib/modules/${kernelver}/kernel/net/wanrouter/wanrouter.ko"
    
      84  install -Dm0644 patches/kdrivers/src/net/wanec.ko \
    
      85    "${pkgdir}/usr/lib/modules/${kernelver}/kernel/net/wanrouter/wanec.ko"
    
      86  install -Dm0644 patches/kdrivers/src/net/wan_aften.ko \
    
      87    "${pkgdir}/usr/lib/modules/${kernelver}/kernel/net/wanrouter/wan_aften.ko"
    
      88  install -Dm0644 "${srcdir}/wanpipe.service" \
    
      89    "${pkgdir}/usr/lib/systemd/system/wanpipe.service"
    
      90
    
      91  rm -f "${pkgdir}"/usr/lib/*.la
    
      92}
    
      93

Changes since previous scan

--- PKGBUILD @ 2026-06-19 23:51
+++ PKGBUILD @ 2026-10-07 00:21
@@ -1,6 +1,6 @@
 pkgname=wanpipe
 pkgver=7.0.38
-pkgrel=9
+pkgrel=10
 pkgdesc='Sangoma WANPIPE drivers and utilities for DAHDI'
 arch=(x86_64)
 url=https://ftp.sangoma.com/linux/current_wanpipe/
@@ -22,7 +22,7 @@
 )
 sha256sums=(
   95266edd83bd8bb427f47f7a39365795936acc0d6e2e3a1e482bd015bba90fa2
-  57390f6d7991614af7671297ecc4bd062889d4f51403e7c99353658d8cc61e0f
+  4b1fabab743cd59a60f4dd8bca1a8dc36264c875ed9090515594281187cb1588
   59b6f271556eadc0a4f71454ab3ec015478cbf3b81cf0446d9bb9cba62d2e0d6
 )
 
@@ -36,7 +36,7 @@
 
 prepare() {
   cd "${pkgname}-${pkgver}"
-  patch -Np5 -i "${srcdir}/arch-kernel-compat.patch"
+  patch -Np1 -i "${srcdir}/arch-kernel-compat.patch"
 }
 
 build() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-07 00:21:34	Low	2
2026-10-07 00:04:18	Medium	1
2026-06-19 23:51:18	Clean	2
2026-06-19 19:07:35	Low	2
2026-06-19 18:54:17	Low	2
2026-06-18 16:11:54	Medium	1