cellframe-node
LOW
maintainer orphaned
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package builds from a legitimate project-owned GitLab instance and includes a Python wheel from the project's own domain; while the wheel's host is not on a standard whitelist, it is part of the project's official infrastructure, and the source is otherwise transparent and verifiable.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a legitimate project-owned GitLab instance and includes a Python wheel from the project's own domain; while the wheel's host is not on a standard whitelist, it is part of the project's official infrastructure, and the source is otherwise transparent and verifiable.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:21
source=(git+https://gitlab.demlabs.net/cellframe/$pkgname.git#commit=6641a4cddc9c373cf64e85d5f2dd2eafb19dd0e3 -
PKGBUILD:22
https://pub.cellframe.net/python/python-cellframe/pycfhelpers/master/pycfhelpers-1.0.13-py3-none-any.whl
PKGBUILD
2 offending line(s) highlighted
1
# Maintainer: Mika Hyttinen <mika dot hyttinen+arch ät gmail dot com>
2
pkgname=cellframe-node
3
pkgver=5.7.41
4
pkgrel=1
5
pkgdesc='Cellframe post-quantum blockchain node with SDK'
6
arch=('x86_64' 'aarch64')
7
url='https://cellframe.net'
8
license=('LGPL-3.0-or-later')
9
makedepends=(git cmake libxslt)
10
depends=(libxcrypt-compat gcc-libs glibc sqlite python3)
11
optdepends=('logrotate: For using logrotate to rotate log files')
12
provides=('cellframe-node' 'cellframe-node-cli' 'cellframe-node-tool' 'cellframe-node-config')
13
replaces=('cellframe-node-debug')
14
sha256sums=('SKIP'
15
'ff01e188b169720d6222cac739786da61496dddb7ff270d68af4b34aae4d3434'
16
'5fab0cfadc8366ebd2be9d06ff36dbd3a84b18f679ea3babb3c739e7e13acefd'
17
'cfb98f54679c5f4bcd380b4273731b335abe75dfbb84510654d6a8198b41a5f0'
18
'9b7be4cb912290ed1164dbc3c5f6714c5a9525cc41a4d7ba3115cdbe312a9320'
19
'8e880c7559cee668231e4b59a3dddad8ab4a93435b6d8b08dc68b19eded3695d'
20
'54c6693d76e9ab69d9de1fef9d4a48b1cec16ade86c814a439b1855185e734e2')
21
source=(git+https://gitlab.demlabs.net/cellframe/$pkgname.git#commit=6641a4cddc9c373cf64e85d5f2dd2eafb19dd0e3
22
https://pub.cellframe.net/python/python-cellframe/pycfhelpers/master/pycfhelpers-1.0.13-py3-none-any.whl
23
cellframe-node.logrotate
24
cellframe-node.service
25
cellframe-node-tmpfiles.conf
26
cellframe-node-sysusers.conf
27
cellframe-node-cli.bash)
28
options=(!debug !strip)
29
install=$pkgname.install
30
_executables=("$pkgname-cli" "$pkgname-tool" "$pkgname" "$pkgname-config")
31
32
prepare() {
33
local patchver="${pkgver##*.}"
34
sed -i "s|^VERSION_PATCH=.*|VERSION_PATCH=$patchver|" "$srcdir/$pkgname/version.mk"
35
sed -i 's|url = \.\./\.\./|url = https://gitlab.demlabs.net/|g' "$srcdir/$pkgname/.gitmodules"
36
sed -i 's|url = \.\./|url = https://gitlab.demlabs.net/cellframe/|g' "$srcdir/$pkgname/.gitmodules"
37
cd "$pkgname" && git submodule update --init --recursive --progress
38
}
39
40
build() {
41
cp "$srcdir/$pkgname.service" "$srcdir/$pkgname/dist.linux/share/$pkgname.service"
42
cd "$pkgname"
43
44
local AVX2_SUPPORT=false
45
if grep -q " avx2" /proc/cpuinfo; then
46
AVX2_SUPPORT=true
47
fi
48
49
DEFAULT_BUILD_FLAGS="-DCMAKE_BUILD_TYPE=RelWithDebInfo \
50
-DCMAKE_POLICY_VERSION_MINIMUM=3.5 \
51
-DDAP_MANAGE_CFLAGS=OFF \
52
-Wno-dev"
53
54
if [ "$AVX2_SUPPORT" = true ]; then
55
DEFAULT_BUILD_FLAGS="$DEFAULT_BUILD_FLAGS -DCELLFRAME_NO_OPTIMIZATION=OFF"
56
else
57
DEFAULT_BUILD_FLAGS="$DEFAULT_BUILD_FLAGS -DCELLFRAME_NO_OPTIMIZATION=ON"
58
fi
59
60
cmake -B build $DEFAULT_BUILD_FLAGS
61
62
cmake --build build --clean-first
63
}
64
65
package() {
66
cd "$pkgname"
67
DESTDIR="$pkgdir" cmake --install build
68
69
install -Dm644 "$srcdir/$pkgname/LICENSE" -t "$pkgdir/usr/share/licenses/$pkgname"
70
install -Dm644 "$srcdir/$pkgname.logrotate" "$pkgdir/etc/logrotate.d/$pkgname"
71
install -Dm644 "$srcdir/$pkgname-tmpfiles.conf" "$pkgdir/usr/lib/tmpfiles.d/$pkgname.conf"
72
install -Dm644 "$srcdir/$pkgname-sysusers.conf" "$pkgdir/usr/lib/sysusers.d/$pkgname.conf"
73
74
install -d "$pkgdir/usr/bin"
75
for executable in "${_executables[@]}"; do
76
ln -sf "/opt/$pkgname/bin/$executable" "$pkgdir/usr/bin/$executable"
77
done
78
79
install -d "$pkgdir/opt/$pkgname/share/wheels/"
80
for wheel in "$srcdir"/*.whl; do
81
install -Dm644 "$wheel" "$pkgdir/opt/$pkgname/share/wheels/"
82
done
83
84
install -Dm644 "$srcdir/cellframe-node-cli.bash" \
85
"$pkgdir/usr/share/bash-completion/completions/cellframe-node-cli"
86
}
87
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |