whisparr-nightly-bin
maintainer txtsd
· 2 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads prebuilt binaries from the project's official domain (whisparr.servarr.com) for self-hosted software, which is normal for AUR packages; the host is not whitelisted but is plausibly official, and checksums are provided and verified.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt binaries from the project's official domain (whisparr.servarr.com) for self-hosted software, which is normal for AUR packages; the host is not whitelisted but is plausibly official, and checksums are provided and verified.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:47
source_x86_64=("Whisparr.nightly.${pkgver}.linux-core-x64.tar.gz::https://whisparr.servarr.com/v1/update/nightly/updatefile?version=${pkgver}&os=linux&runtime=netcore&arch=x64")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: txtsd <aur.archlinux@ihavea.quest>
2
# Maintainer: Donald Webster <fryfrog@gmail.com>
3
# Helpful URL: https://whisparr.servarr.com/v1/update/nightly?version=0.0.0.0&os=linux&runtime=netcore&arch=x64&includeMajorVersion=true
4
5
pkgname=whisparr-nightly-bin
6
pkgver=2.0.0.2151
7
pkgrel=1
8
pkgdesc='Adult movie organizer/manager for usenet and torrent users (nightly builds)'
9
arch=(x86_64 aarch64 armv7h)
10
url='https://whisparr.com'
11
license=('GPL-3.0-or-later')
12
groups=(servarr-nightly-bin)
13
depends=(
14
gcc-libs
15
glibc
16
sqlite
17
zlib
18
)
19
optdepends=(
20
'postgresql: postgresql database'
21
'sabnzbd: usenet downloader'
22
'nzbget: usenet downloader'
23
'qbittorrent: torrent downloader'
24
'deluge: torrent downloader'
25
'rtorrent: torrent downloader'
26
'nodejs-flood: torrent downloader'
27
'vuze: torrent downloader'
28
'aria2: torrent downloader'
29
'transmission-cli: torrent downloader (CLI and daemon)'
30
'transmission-gtk: torrent downloader (GTK+)'
31
'transmission-qt: torrent downloader (Qt)'
32
'jackett: torrent indexer proxy'
33
'nzbhydra2: torznab and usenet indexer proxy'
34
'prowlarr: torrent and usenet indexer proxy'
35
'autobrr: irc, torrent and usenet indexer proxy'
36
)
37
provides=(whisparr)
38
conflicts=(whisparr)
39
options=(!debug)
40
install=whisparr.install
41
source=(
42
package_info
43
whisparr.service
44
whisparr.sysusers
45
whisparr.tmpfiles
46
)
47
source_x86_64=("Whisparr.nightly.${pkgver}.linux-core-x64.tar.gz::https://whisparr.servarr.com/v1/update/nightly/updatefile?version=${pkgver}&os=linux&runtime=netcore&arch=x64")
48
source_aarch64=("Whisparr.nightly.${pkgver}.linux-core-arm64.tar.gz::https://whisparr.servarr.com/v1/update/nightly/updatefile?version=${pkgver}&os=linux&runtime=netcore&arch=arm64")
49
source_armv7h=("Whisparr.nightly.${pkgver}.linux-core-arm.tar.gz::https://whisparr.servarr.com/v1/update/nightly/updatefile?version=${pkgver}&os=linux&runtime=netcore&arch=arm")
50
sha256sums=('50da66b86fb42b6457a84c61fe02af5845599fd67f538c79457713795d96d8ed'
51
'c8c0b16a154e8c7ed47fea616ff0f1bc9319993c0561e0866f0e20faad779de8'
52
'dfe5d421bc8c8bd9cfd46ee0183e61b572c28d31c8114dded887998bc432d22b'
53
'0b235aed73eb0155d77c485ccff415e82e520d27013ba498ac70574e7106a762')
54
sha256sums_x86_64=('65180225fd86195d41f90826621e0e7d7ee731f44174dea9220e6953a43f2824')
55
sha256sums_aarch64=('845676ed50080435bc73ba0ff8d974ae3e93d8245b79ef10c5fe02cd926608bf')
56
sha256sums_armv7h=('f293d8833ec9262acd8dd82b1d8b0732ff8c461a20db14b0741c9dc76a501629')
57
58
package() {
59
install -dm755 "${pkgdir}/usr/lib/whisparr/bin"
60
61
# License
62
install -Dm644 Whisparr/LICENSE "${pkgdir}/usr/share/licenses/${pkgname}"
63
rm Whisparr/LICENSE
64
65
# Remove Service Helpers, and Update files
66
rm Whisparr/ServiceInstall*
67
rm Whisparr/ServiceUninstall*
68
rm -rf Whisparr/Whisparr.Update
69
70
# Disable built in updater.
71
install -Dm644 package_info "${pkgdir}/usr/lib/whisparr"
72
echo "PackageVersion=${pkgver}-${pkgrel}" >> "${pkgdir}/usr/lib/whisparr/package_info"
73
74
# Copy Whisparr
75
cp -dr Whisparr/* "${pkgdir}/usr/lib/whisparr/bin"
76
77
# Systemd
78
install -Dm644 whisparr.service "${pkgdir}/usr/lib/systemd/system/whisparr.service"
79
install -Dm644 whisparr.sysusers "${pkgdir}/usr/lib/sysusers.d/whisparr.conf"
80
install -Dm644 whisparr.tmpfiles "${pkgdir}/usr/lib/tmpfiles.d/whisparr.conf"
81
}
82
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |