bitcoin-knots

LOW

maintainer Retro_pex 1 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is a tarball from the project's official domain (bitcoinknots.org), which is plausibly the project's own release infrastructure; building from official source is normal AUR packaging and not inherently dangerous.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official domain (bitcoinknots.org), which is plausibly the project's own release infrastructure; building from official source is normal AUR packaging and not inherently dangerous.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 source=("https://bitcoinknots.org/files/29.x/$pkgver/bitcoin-$pkgver.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Léo Haf <leo@haf.ovh>
    
      2pkgname=bitcoin-knots
    
      3pkgver=29.4.1.knots20260508
    
      4pkgrel=2
    
      5epoch=
    
      6pkgdesc="enhanced Bitcoin node/wallet software"
    
      7arch=(x86_64)
    
      8url="https://bitcoinknots.org"
    
      9license=('MIT')
    
      10groups=(bitcoin)
    
      11depends=('gcc-libs' 'sqlite' 'libevent' 'glibc')
    
      12makedepends=('boost' 'cmake')
    
      13checkdepends=('python3')
    
      14conflicts=('bitcoin')
    
      15backup=('etc/bitcoin/bitcoin.conf')
    
      16options=('!debug')
    
      17source=("https://bitcoinknots.org/files/29.x/$pkgver/bitcoin-$pkgver.tar.gz")
    
      18sha256sums=('da43e8c790bed9d8c432d07a10271084537dbd61de3ba0f7bd49f959adcb9b8f')
    
      19validpgpkeys=(
    
      20	'DAED928C727D3E613EC46635F5073C4F4882FFFC' # Léo haf <leo@haf.ovh>
    
      21)
    
      22
    
      23build() {
    
      24	cd "bitcoin-$pkgver"
    
      25	cmake -B build
    
      26	cmake --build build -j "$(nproc)"
    
      27}
    
      28
    
      29check() {
    
      30	cd "bitcoin-$pkgver"
    
      31	ctest --test-dir build
    
      32}
    
      33
    
      34package() {
    
      35	cd "bitcoin-$pkgver"
    
      36	install -dm755 "${pkgdir}/usr/bin"
    
      37	install -Dm755 build/bin/{bitcoin-cli,bitcoin-tx,bitcoin-util,bitcoin-wallet,bitcoind} "${pkgdir}/usr/bin/"
    
      38	
    
      39	install -dm755 "${pkgdir}/usr/share/man/man1"
    
      40	install -Dm755 doc/man/{bitcoin-cli.1,bitcoin-tx.1,bitcoin-util.1,bitcoin-wallet.1,bitcoind.1} "${pkgdir}/usr/share/man/man1/"
    
      41	
    
      42	install -Dm644 share/examples/bitcoin.conf "${pkgdir}/etc/bitcoin/bitcoin.conf"
    
      43	
    
      44	install -Dm644 contrib/init/bitcoind.service "${pkgdir}/etc/systemd/system/bitcoind.service"
    
      45}
    
      46

Changes since previous scan

--- PKGBUILD @ 2026-09-04 00:03
+++ PKGBUILD @ 2026-09-17 00:27
@@ -1,6 +1,6 @@
 # Maintainer: Léo Haf <leo@haf.ovh>
 pkgname=bitcoin-knots
-pkgver=29.3.knots20260508
+pkgver=29.4.1.knots20260508
 pkgrel=2
 epoch=
 pkgdesc="enhanced Bitcoin node/wallet software"
@@ -15,14 +15,14 @@
 backup=('etc/bitcoin/bitcoin.conf')
 options=('!debug')
 source=("https://bitcoinknots.org/files/29.x/$pkgver/bitcoin-$pkgver.tar.gz")
-sha256sums=('8e3aebdacab32f6f6b65d90c98a188952553a12a577e0b58d13525bfd59dd630')
+sha256sums=('da43e8c790bed9d8c432d07a10271084537dbd61de3ba0f7bd49f959adcb9b8f')
 validpgpkeys=(
 	'DAED928C727D3E613EC46635F5073C4F4882FFFC' # Léo haf <leo@haf.ovh>
 )
 
 build() {
 	cd "bitcoin-$pkgver"
-	cmake -B build -D RDTS_CONSENT=RUNTIME_WARN
+	cmake -B build
 	cmake --build build -j "$(nproc)"
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 15:58:02	Medium	1
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2