Risk 0/5 · Safe
.nvchecker.toml
Result #1617
Comment
The change only updates nvchecker metadata to point at Asterisk's official download host and adjusts the regex to match signed tarball filenames. This does not introduce build-time code execution, new sources, privilege changes, or packaging logic. The new URL is HTTPS and appears to be an upstream location rather than a suspicious mirror. No security red flags are evident in this diff alone.
@@ -1,4 +1,4 @@
[asterisk]
-source = "regex"
-url = "https://www.asterisk.org/downloads/asterisk/all-asterisk-versions/"
-regex = 'Download Latest - (\d+\.\d+\.\d+)'
+source = 'regex'
+url = 'https://downloads.asterisk.org/pub/telephony/asterisk/'
+regex = 'asterisk-(\d+\.\d+\.\d+).tar.gz.asc'