x3270-git

maintainer vuillaume · 2 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The non-standard host is used only for fetching a license file, which is non-executable data; the actual source code is securely fetched via git from a project-owned SourceForge repository, and the package builds from source, posing no significant risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The non-standard host is used only for fetching a license file, which is non-executable data; the actual source code is securely fetched via git from a project-owned SourceForge repository, and the package builds from source, posing no significant risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source=("$pkgname::git+https://git.code.sf.net/p/x3270/code"
PKGBUILD:20 $pkgname.license::'https://x3270.miraheze.org/w/api.php?action=parse&format=json&page=X3270_license&utf8=1')

PKGBUILD

2 offending line(s) highlighted

      1# Maintainer: sardo <sardonimous@hotmail.com>
    
      2# Parts copied from x3270 package by tuftedocelot <tuftedocelot@fastmail.fm>
    
      3pkgname=x3270-git
    
      4pkgver=4.2pre1.r2775
    
      5pkgrel=1
    
      6pkgdesc="IBM 3270 terminal emulator for the X Window System"
    
      7arch=('x86_64')
    
      8url="http://x3270.bgp.nu/"
    
      9license=('custom' 'MIT')
    
      10depends=('libxaw' 'openssl' 'bash')
    
      11makedepends=('imake' 'openssl' 'libx11' 'libxaw' 'libxt' 'xbitmaps' 'xorg-bdftopcf')
    
      12provides=("x3270")
    
      13conflicts=("x3270")
    
      14backup=(etc/x3270/ibm_hosts)
    
      15install=x3270.install
    
      16source=("$pkgname::git+https://git.code.sf.net/p/x3270/code"
    
      17        x3270.install
    
      18	x3270.fontpath
    
      19	x3270.desktop
    
      20	$pkgname.license::'https://x3270.miraheze.org/w/api.php?action=parse&format=json&page=X3270_license&utf8=1')
    
      21sha256sums=('SKIP'
    
      22            '1007f7a7a5ad41749dbc70cc7ca6e259ec7c272dd82d210d2dd0f2fca6c18444'
    
      23            '3cbd44463bf70a5a5983f4fa2ef51adaf4d3e0217638fc1f7fc12c1566c31d2b'
    
      24            'c45ded78fe9a2fe2acff1a5df53366647310165931b39bab942ab06296e13b1c'
    
      25            '17850aa5153b728844af4f251d56301281678a701fe32e52f521b45f2dbac9c3')
    
      26pkgver() {
    
      27    cd "${srcdir}/${pkgbase}"
    
      28    printf "%s.r%s" "$(sed -n 's/^version=\"\([^\"]*\)\"/\1/p' Common/version.txt)" "$(git rev-list --count HEAD)"
    
      29}
    
      30build() {
    
      31   sed -e 's/<[^>]*>//g' -e 's/\\n/\n/g' $pkgname.license | sed -e 's/\[edit\]//g' -e 's/\\\"/\"/g' -e '/^License for.*$/,$!d' | head --lines -2 > ${pkgname}/LICENSE
    
      32   cd "${pkgname}" 
    
      33   ./configure --prefix=/usr --sysconfdir=/etc --with-fontdir=/usr/share/fonts/3270
    
      34   make || return 1
    
      35 }
    
      36package() {
    
      37   cd ${pkgname}
    
      38   make DESTDIR="${pkgdir}" install || return 1
    
      39
    
      40   chmod 644 "${pkgdir}"/etc/x3270/ibm_hosts
    
      41
    
      42   mkdir -pm755 "${pkgdir}/etc/X11/xorg.conf.d"
    
      43   mkdir -pm755 "${pkgdir}/usr/share/fonts/3270"
    
      44   mkdir -pm755 "${pkgdir}/usr/share/applications"
    
      45   mkdir -pm755 "${pkgdir}/usr/share/pixmaps"
    
      46   mkdir -pm755 "${pkgdir}/usr/share/licenses/${pkgname}"
    
      47
    
      48   install -m644 "${srcdir}/x3270.fontpath"                   "${pkgdir}/etc/X11/xorg.conf.d/60-${pkgname}.conf"
    
      49   install -m644 "${srcdir}/x3270.desktop"                    "${pkgdir}/usr/share/applications/"
    
      50   install -m644 "${srcdir}/${pkgname}/x3270/x3270-icon2.xpm" "${pkgdir}/usr/share/pixmaps/"
    
      51   install -m644 "${srcdir}/${pkgname}/LICENSE"               "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      52}
    
      53
    
      54

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2