xfce4-panel-devel

LOW

maintainer twa022 24 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The source is a development release tarball from archive.xfce.org, which is the official archive host for Xfce projects; despite not being on a whitelist, it is a legitimate and expected source for this package, posing minimal risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a development release tarball from archive.xfce.org, which is the official archive host for Xfce projects; despite not being on a whitelist, it is a legitimate and expected source for this package, posing minimal risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:18 source=("https://archive.xfce.org/src/xfce/$_pkgname/${pkgver%.*}/${_pkgname}-${pkgver}.tar.xz")

PKGBUILD

1 offending line(s) highlighted

      1# Contributor: twa022 <twa022 at gmail dot com>
    
      2
    
      3_pkgname=xfce4-panel
    
      4pkgname=${_pkgname}-devel
    
      5pkgver=4.21.3
    
      6pkgrel=1
    
      7pkgdesc="Panel for the Xfce desktop environment (development release)"
    
      8arch=('i686' 'x86_64' 'armv7h' 'aarch64')
    
      9url="https://docs.xfce.org/xfce/xfce4-panel/start"
    
      10license=('GPL-2.0-or-later')
    
      11groups=('xfce4-devel')
    
      12depends=('garcon' 'libxfce4ui>=4.21.8' 'xfconf' 'xfce4-session>=4.21.2' 'hicolor-icon-theme' 
    
      13         'desktop-file-utils' 'libdbusmenu-gtk3' 'libxfce4windowing' 'gtk-layer-shell')
    
      14makedepends=('meson' 'xfce4-dev-tools' 'gtk-doc' 'gobject-introspection' 'vala' 'glib2-devel')
    
      15provides=("${_pkgname}=${pkgver}")
    
      16conflicts=("${_pkgname}" 'xfce4-statusnotifier-plugin')
    
      17replaces=('xfce4-statusnotifier-plugin')
    
      18source=("https://archive.xfce.org/src/xfce/$_pkgname/${pkgver%.*}/${_pkgname}-${pkgver}.tar.xz")
    
      19sha256sums=('daa277162735e024552586dac0df24bf9e0ed3fdcaa3bc4210b97c0679013db3')
    
      20
    
      21build() {
    
      22  local meson_options=(
    
      23    -D gtk-doc=true
    
      24    -D x11=enabled
    
      25    -D wayland=enabled
    
      26  )
    
      27
    
      28  arch-meson "${_pkgname}-${pkgver}" build "${meson_options[@]}"
    
      29  meson compile -C build
    
      30}
    
      31
    
      32package() {
    
      33  meson install -C build --destdir "$pkgdir"
    
      34}
    
      35

Changes since previous scan

--- PKGBUILD @ 2026-10-10 00:11
+++ PKGBUILD @ 2026-10-17 00:21
@@ -2,21 +2,21 @@
 
 _pkgname=xfce4-panel
 pkgname=${_pkgname}-devel
-pkgver=4.21.1
+pkgver=4.21.3
 pkgrel=1
 pkgdesc="Panel for the Xfce desktop environment (development release)"
 arch=('i686' 'x86_64' 'armv7h' 'aarch64')
 url="https://docs.xfce.org/xfce/xfce4-panel/start"
 license=('GPL-2.0-or-later')
 groups=('xfce4-devel')
-depends=('garcon' 'libxfce4ui>=4.21.3' 'xfconf' 'hicolor-icon-theme' 
+depends=('garcon' 'libxfce4ui>=4.21.8' 'xfconf' 'xfce4-session>=4.21.2' 'hicolor-icon-theme' 
          'desktop-file-utils' 'libdbusmenu-gtk3' 'libxfce4windowing' 'gtk-layer-shell')
 makedepends=('meson' 'xfce4-dev-tools' 'gtk-doc' 'gobject-introspection' 'vala' 'glib2-devel')
 provides=("${_pkgname}=${pkgver}")
 conflicts=("${_pkgname}" 'xfce4-statusnotifier-plugin')
 replaces=('xfce4-statusnotifier-plugin')
 source=("https://archive.xfce.org/src/xfce/$_pkgname/${pkgver%.*}/${_pkgname}-${pkgver}.tar.xz")
-sha256sums=('c940dae515bef4af08a126011d2fd873ce99e815157ba8cef5332195bb60e51e')
+sha256sums=('daa277162735e024552586dac0df24bf9e0ed3fdcaa3bc4210b97c0679013db3')
 
 build() {
   local meson_options=(

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 02:12:41	Medium	1
2026-10-10 00:11:52	Low	2
2026-10-09 00:05:33	Low	2
2026-10-08 00:28:03	Low	2
2026-10-07 00:21:34	Low	2
2026-10-06 00:13:36	Low	2
2026-10-05 00:08:03	Low	2
2026-10-04 00:18:08	Low	2
2026-10-03 00:23:04	Low	2
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2