x3270-git

LOW

maintainer vuillaume 2 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The non-standard host is used only for fetching a license file, which is non-executable data; the actual source code is securely fetched via git from a project-owned SourceForge repository, and the package builds from source, posing no significant risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The non-standard host is used only for fetching a license file, which is non-executable data; the actual source code is securely fetched via git from a project-owned SourceForge repository, and the package builds from source, posing no significant risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source=("$pkgname::git+https://git.code.sf.net/p/x3270/code"
PKGBUILD:20 $pkgname.license::'https://x3270.miraheze.org/w/api.php?action=parse&format=json&page=X3270_license&utf8=1')

PKGBUILD

2 offending line(s) highlighted

      1# Maintainer: sardo <sardonimous@hotmail.com>
    
      2# Parts copied from x3270 package by tuftedocelot <tuftedocelot@fastmail.fm>
    
      3pkgname=x3270-git
    
      4pkgver=4.2pre1.r2775
    
      5pkgrel=1
    
      6pkgdesc="IBM 3270 terminal emulator for the X Window System"
    
      7arch=('x86_64')
    
      8url="http://x3270.bgp.nu/"
    
      9license=('custom' 'MIT')
    
      10depends=('libxaw' 'openssl' 'bash')
    
      11makedepends=('imake' 'openssl' 'libx11' 'libxaw' 'libxt' 'xbitmaps' 'xorg-bdftopcf')
    
      12provides=("x3270")
    
      13conflicts=("x3270")
    
      14backup=(etc/x3270/ibm_hosts)
    
      15install=x3270.install
    
      16source=("$pkgname::git+https://git.code.sf.net/p/x3270/code"
    
      17        x3270.install
    
      18	x3270.fontpath
    
      19	x3270.desktop
    
      20	$pkgname.license::'https://x3270.miraheze.org/w/api.php?action=parse&format=json&page=X3270_license&utf8=1')
    
      21sha256sums=('SKIP'
    
      22            '1007f7a7a5ad41749dbc70cc7ca6e259ec7c272dd82d210d2dd0f2fca6c18444'
    
      23            '3cbd44463bf70a5a5983f4fa2ef51adaf4d3e0217638fc1f7fc12c1566c31d2b'
    
      24            'c45ded78fe9a2fe2acff1a5df53366647310165931b39bab942ab06296e13b1c'
    
      25            '17850aa5153b728844af4f251d56301281678a701fe32e52f521b45f2dbac9c3')
    
      26pkgver() {
    
      27    cd "${srcdir}/${pkgbase}"
    
      28    printf "%s.r%s" "$(sed -n 's/^version=\"\([^\"]*\)\"/\1/p' Common/version.txt)" "$(git rev-list --count HEAD)"
    
      29}
    
      30build() {
    
      31   sed -e 's/<[^>]*>//g' -e 's/\\n/\n/g' $pkgname.license | sed -e 's/\[edit\]//g' -e 's/\\\"/\"/g' -e '/^License for.*$/,$!d' | head --lines -2 > ${pkgname}/LICENSE
    
      32   cd "${pkgname}" 
    
      33   ./configure --prefix=/usr --sysconfdir=/etc --with-fontdir=/usr/share/fonts/3270
    
      34   make || return 1
    
      35 }
    
      36package() {
    
      37   cd ${pkgname}
    
      38   make DESTDIR="${pkgdir}" install || return 1
    
      39
    
      40   chmod 644 "${pkgdir}"/etc/x3270/ibm_hosts
    
      41
    
      42   mkdir -pm755 "${pkgdir}/etc/X11/xorg.conf.d"
    
      43   mkdir -pm755 "${pkgdir}/usr/share/fonts/3270"
    
      44   mkdir -pm755 "${pkgdir}/usr/share/applications"
    
      45   mkdir -pm755 "${pkgdir}/usr/share/pixmaps"
    
      46   mkdir -pm755 "${pkgdir}/usr/share/licenses/${pkgname}"
    
      47
    
      48   install -m644 "${srcdir}/x3270.fontpath"                   "${pkgdir}/etc/X11/xorg.conf.d/60-${pkgname}.conf"
    
      49   install -m644 "${srcdir}/x3270.desktop"                    "${pkgdir}/usr/share/applications/"
    
      50   install -m644 "${srcdir}/${pkgname}/x3270/x3270-icon2.xpm" "${pkgdir}/usr/share/pixmaps/"
    
      51   install -m644 "${srcdir}/${pkgname}/LICENSE"               "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      52}
    
      53
    
      54

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2