ctcs

maintainer orphaned · 4 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from the project's official website on a non-whitelisted host, but it is the original upstream source used to build the software, not an executable or unverifiable binary, and the checksums are provided and valid.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official website on a non-whitelisted host, but it is the original upstream source used to build the software, not an executable or unverifiable binary, and the checksums are provided and valid.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:23 source=("http://www.rahul.net/dholmes/ctorrent/$pkgname-$pkgver.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Contributor:  Leslie P. Polzer <polzer@stardawn.org>
    
      2# Maintainer: aksr <aksr at t-com dot me>
    
      3pkgname=ctcs
    
      4pkgver=1.4.1
    
      5pkgrel=1
    
      6epoch=
    
      7pkgdesc="CTorrent Control Server (CTCS), an interface for monitoring and managing Enhanced CTorrent clients."
    
      8arch=('i686' 'x86_64')
    
      9url="http://www.rahul.net/dholmes/ctorrent/ctcs.html"
    
      10license="GPL"
    
      11groups=()
    
      12depends=()
    
      13makedepends=()
    
      14checkdepends=()
    
      15optdepends=()
    
      16provides=()
    
      17conflicts=()
    
      18replaces=()
    
      19backup=()
    
      20options=()
    
      21install=
    
      22changelog=
    
      23source=("http://www.rahul.net/dholmes/ctorrent/$pkgname-$pkgver.tar.gz")
    
      24noextract=()
    
      25md5sums=('7dfe725e558eb75258a2199f2aa9fdbc')
    
      26sha1sums=('228090d17dbf00d32129f6a2fbc874314f525998')
    
      27sha256sums=('9614e88d07c6b128677d4d2638a4a05ae00812ec5157ae0788012abed3172355')
    
      28
    
      29package() {
    
      30    cd "$srcdir/$pkgname-$pkgver"
    
      31    install -Dm755 ctcs $pkgdir/usr/bin/ctcs
    
      32    install -Dm644 readme.txt $pkgdir/usr/share/doc/$pkgname/readme.txt
    
      33}
    
      34
    
      35

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2