unarj: mark as broken

And ‘maintain’ to help keep an eye on it.

Closes #7332.

pkgs/tools/archivers/unarj/default.nix

···
     sed -i -e s,/usr/local/bin,$out/bin, Makefile
   '';
 
-  meta = {
+  meta = with stdenv.lib; {
     description = "Unarchiver of ARJ files";
-    license = stdenv.lib.licenses.free;
+    license = licenses.free;
+    maintainers = with maintainers; [ nckx ];
+    # Vulnerable to CVE-2015-0557 & possibly CVE-2015-0556, CVE-2015-2782:
+    broken = true;
   };
 }