xscreensaver-arch-logo
LOW
maintainer Geballin
213 votes
scanned 2026-09-24 11:42:45.600377
Why flagged
The source is a tarball from the official project domain (jwz.org) which hosts xscreensaver; the non-whitelisted host is the project's own site, and the package only adds Arch branding via harmless image files and a patch to configure.
Triggered rules
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The source is a tarball from the official project domain (jwz.org) which hosts xscreensaver; the non-whitelisted host is the project's own site, and the package only adds Arch branding via harmless image files and a patch to configure.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:33
source=("${pkgname}-${pkgver}.tar.gz::https://www.jwz.org/${pkgname%%-*}/${pkgname%%-*}-${pkgver}.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Morgenstern <charles [at] charlesbwise [dot] com>
2
# Maintainer: Geballin <macniaque [at] free [dot] fr>
3
# Contributor: Thomas Mudrunka <harvie [at] email [dot] cz>
4
# Contributor: Levente Polyak <anthraxx[at]archlinux[dot]org>
5
# Contributor: Eric Bélanger <eric@archlinux.org>
6
7
pkgname=xscreensaver-arch-logo
8
pkgver=6.16
9
pkgrel=1
10
pkgdesc="Screen saver and locker for the X Window System with Arch Linux branding"
11
url="https://www.jwz.org/${pkgname%%-*}/"
12
arch=('x86_64')
13
license=('0BSD')
14
depends=('fontconfig'
15
'glu'
16
'gtk3'
17
'libxmu'
18
'perl-libwww'
19
'xdg-utils'
20
'xorg-appres')
21
makedepends=('bc'
22
'intltool'
23
'libxpm'
24
'systemd')
25
optdepends=('fortune-mod: for fortune file support'
26
'gdm: for login manager support'
27
'noto-fonts: recommended fonts package'
28
'perl-lwp-protocol-https: for MapScroller hack support, per FS #74184'
29
'words: for web collage hack support')
30
conflicts=('xscreensaver')
31
provides=('xscreensaver')
32
backup=('etc/pam.d/xscreensaver')
33
source=("${pkgname}-${pkgver}.tar.gz::https://www.jwz.org/${pkgname%%-*}/${pkgname%%-*}-${pkgver}.tar.gz"
34
LICENSE
35
logo-50.gif
36
logo-180.gif
37
logo-360.gif
38
logo-big.gif
39
logo.pdf
40
logo-32.png
41
logo-50.png
42
logo-180.png
43
logo-360.png
44
logo-512.png
45
logo-50.xpm
46
logo-180.xpm
47
logo-360.xpm
48
"${pkgname%%-*}-${pkgver}-configure-gettext.patch")
49
sha512sums=('537f0c77b2ae88ecd73619e5bb6d883680090070ebb2b1c3efa113cec8a85ad487f03367ab135c590d3ef31076262882fc40efba1a337fd96121291c895e66f3'
50
'529ed9b7904631989803a4e1f306a0f3e496e50a123ebbd6ff77058e52aeb1b2328148d8224e54b547faff14e9d591146b9849c5fb9d1063e6db41f295f3074e'
51
'a63d93f148500eb8ae4a011286c1e762a38575773381d33fa1c79cb1b94df8bdba54b40c52c5861ab865934f1d3a3a225c1ef5758a698a9e587b0779d76a0a34'
52
'4814fa3178d5f37b5422dcfa73b53f94492863e958987590796ea1a5a5df85977033aa2064e2cd6b2b813908751d8f9982e5103b6615d5b60d521d720340483b'
53
'76139b58517487d5f8ae92aad5b2d4702597987b2f3ad17186c4e725bd13cf331225584972d8b1897bccd39ffd378edc39e17f5530e3cb535a6f079f85ebaaf8'
54
'de24901d68d4d979e8027c5cac0f421f4bde82d464e1ae4f17b32264b5d4598c37d041faca3328a42323e18c8bf3e59ae4391e9f86650166be66480451c0539f'
55
'22ab41d8d32faa3b3538d9a931c2733d4efcee9b80ca91bb69798979d3a7c9f083ed79b40915545adaf84de2f8c2dcd648fc3f60972ae9849edab3fd28b82d32'
56
'46036e523f480029bd5bc7f18b2798ff8961d5da9a2753a537992a6a9d4e0284a0c1765c7672313a687ed0368ee78f5ff837fdf2e3cd35c481acf6a22267c580'
57
'609a5a6f4fc75b9662df21a81f67ab290dc0b153bbf1433818a67975e0b8ed85e407c1f1cb7834f190580c5575e1ffc902ff27e9138ffe1568e5a6a2fc64540a'
58
'43981e4a77be2a2049575884edf1ffb85bcc520a80454ae9b5a51c3f8a2616579c85e33834892ad1078e63b275a2c5e28c046b3c2cfc32589f23dcf449f6ce52'
59
'0f24fa0a83228d6a940f52b0d7b8f449df969acd48335b3ede23a573bc396707f2ed4f93281811b834725f3aab597bc129ee4b368ab6638342e8074f82de301b'
60
'e650ad1351107aef023420bcb7422279efb1f2594362e66b737c960e2a1a5444f4925449ecae5b4ffa3a0127d6645f9d466f3b5d17767c865dcaf438b3b0e44f'
61
'abc52d3821deb9b34779c7bea2a3512a2bb015982fa1c196a2da75a74d8bf4d6766402dfb620d34b2eb9e117c1c9e9acc2f579c8acb15a1389d40fe0c5d1c93a'
62
'5b1762bb1b3f01d23d7df14a0773f34fb0b751c013220e5e105916375ff8f094fb5821f2dbdc3c90ec5d10552dc6e8e15c4491ab239f0e5123eec51a2527ec70'
63
'dcbf893a99ad1ad8c4868481eea1921c465737cb09b36fc7cafcdee6b0ec9c8b701051e2a17e215ed9b368d79c72b4a752c532e1ddd565602c0d58782b7cb4a7'
64
'6cf3c80682b996a4e9120371175db0e5442996c99967e0fae2d38fdcdda6360043267558719bdbea09b18244502e7f1cd50fd6df6dda69d3c07bda65e4ece794')
65
66
prepare() {
67
local logos_png
68
local logos
69
70
cd "${srcdir}"
71
logos_png=(logo-32.png
72
logo-50.png
73
logo-180.png
74
logo-360.png)
75
for _pngfile in "${logos_png[@]}"; do
76
install -Dm0644 "${_pngfile}" "${srcdir}/${pkgname%%-*}-${pkgver}/hacks/images/${_pngfile}"
77
done
78
79
logos=(logo.pdf
80
logo-50.gif
81
logo-50.xpm
82
logo-180.gif
83
logo-180.xpm
84
logo-360.gif
85
logo-360.xpm
86
logo-512.png
87
logo-big.gif)
88
for _file in "${logos[@]}"; do
89
install -Dm0644 "${_file}" "${srcdir}/${pkgname%%-*}-${pkgver}/utils/images/${_file}"
90
done
91
92
# Fix xscreensaver-6.16 configure file issue
93
cd "${pkgname%%-*}-${pkgver}"
94
patch -p1 -i "../${pkgname%%-*}-${pkgver}-configure-gettext.patch"
95
}
96
97
build() {
98
cd "${pkgname%%-*}-${pkgver}"
99
./configure \
100
--prefix=/usr \
101
--sysconfdir=/etc \
102
--localstatedir=/var \
103
--libexecdir=/usr/lib \
104
--with-app-defaults=/usr/share/X11/app-defaults \
105
--without-setuid-hacks \
106
--with-pam \
107
--with-login-manager \
108
--with-gtk \
109
--with-gl \
110
--without-gle \
111
--with-pixbuf \
112
--with-jpeg \
113
--with-systemd \
114
--with-wayland=no
115
make
116
}
117
118
package() {
119
cd "${pkgname%%-*}-${pkgver}"
120
install -d "${pkgdir}/etc/pam.d"
121
make DESTDIR="${pkgdir}" install
122
install -vDm0644 ../LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
123
}
124
Changes since previous scan
--- PKGBUILD @ 2026-06-19 19:07+++ PKGBUILD @ 2026-09-24 11:42@@ -5,7 +5,7 @@ # Contributor: Eric Bélanger <eric@archlinux.org> pkgname=xscreensaver-arch-logo-pkgver=6.15+pkgver=6.16 pkgrel=1 pkgdesc="Screen saver and locker for the X Window System with Arch Linux branding" url="https://www.jwz.org/${pkgname%%-*}/"@@ -44,8 +44,9 @@ logo-512.png logo-50.xpm logo-180.xpm- logo-360.xpm)-sha512sums=('2a01c6c450c85e427cf2194b96d85017d3817d7e76821f36db9f643dd0c0a30b5197d431044c6a451dc3c3d74252b77e25bd8b51203a5f5c23ddef6e1bd02fb6'+ logo-360.xpm+ "${pkgname%%-*}-${pkgver}-configure-gettext.patch")+sha512sums=('537f0c77b2ae88ecd73619e5bb6d883680090070ebb2b1c3efa113cec8a85ad487f03367ab135c590d3ef31076262882fc40efba1a337fd96121291c895e66f3' '529ed9b7904631989803a4e1f306a0f3e496e50a123ebbd6ff77058e52aeb1b2328148d8224e54b547faff14e9d591146b9849c5fb9d1063e6db41f295f3074e' 'a63d93f148500eb8ae4a011286c1e762a38575773381d33fa1c79cb1b94df8bdba54b40c52c5861ab865934f1d3a3a225c1ef5758a698a9e587b0779d76a0a34' '4814fa3178d5f37b5422dcfa73b53f94492863e958987590796ea1a5a5df85977033aa2064e2cd6b2b813908751d8f9982e5103b6615d5b60d521d720340483b'@@ -59,7 +60,8 @@ 'e650ad1351107aef023420bcb7422279efb1f2594362e66b737c960e2a1a5444f4925449ecae5b4ffa3a0127d6645f9d466f3b5d17767c865dcaf438b3b0e44f' 'abc52d3821deb9b34779c7bea2a3512a2bb015982fa1c196a2da75a74d8bf4d6766402dfb620d34b2eb9e117c1c9e9acc2f579c8acb15a1389d40fe0c5d1c93a' '5b1762bb1b3f01d23d7df14a0773f34fb0b751c013220e5e105916375ff8f094fb5821f2dbdc3c90ec5d10552dc6e8e15c4491ab239f0e5123eec51a2527ec70'- 'dcbf893a99ad1ad8c4868481eea1921c465737cb09b36fc7cafcdee6b0ec9c8b701051e2a17e215ed9b368d79c72b4a752c532e1ddd565602c0d58782b7cb4a7')+ 'dcbf893a99ad1ad8c4868481eea1921c465737cb09b36fc7cafcdee6b0ec9c8b701051e2a17e215ed9b368d79c72b4a752c532e1ddd565602c0d58782b7cb4a7'+ '6cf3c80682b996a4e9120371175db0e5442996c99967e0fae2d38fdcdda6360043267558719bdbea09b18244502e7f1cd50fd6df6dda69d3c07bda65e4ece794') prepare() { local logos_png@@ -86,6 +88,10 @@ for _file in "${logos[@]}"; do install -Dm0644 "${_file}" "${srcdir}/${pkgname%%-*}-${pkgver}/utils/images/${_file}" done++ # Fix xscreensaver-6.16 configure file issue+ cd "${pkgname%%-*}-${pkgver}"+ patch -p1 -i "../${pkgname%%-*}-${pkgver}-configure-gettext.patch" } build() {Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-24 11:42:45 | Low | 2 |
| 2026-06-19 19:07:35 | Clean | 2 |
| 2026-06-18 16:11:54 | Low | 1 |