dlt-viewer

LOW

maintainer marmis 5 votes scanned 2026-08-31 00:19:57.373659

View on AUR

Why flagged

The package builds from a tagged commit of the official GitHub repository, which is a normal practice for AUR packages; the 'SKIP' checksum is common for git sources and does not imply remote code execution or malicious behavior.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a tagged commit of the official GitHub repository, which is a normal practice for AUR packages; the 'SKIP' checksum is common for git sources and does not imply remote code execution or malicious behavior.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1pkgname=dlt-viewer
    
      2pkgver=2.28.0
    
      3_commit=300a20461e8f1505ff891b211b3b69dc28c04e9a # tags/v2.28.0
    
      4pkgrel=1
    
      5pkgdesc="Diagnostic Log and Trace client viewer"
    
      6url="https://github.com/GENIVI/dlt-viewer/"
    
      7arch=('x86_64' 'i686')
    
      8license=('MPL-2.0')
    
      9depends=(qt6-base qt6-serialport)
    
      10source=("git+https://github.com/GENIVI/dlt-viewer.git#commit=${_commit}")
    
      11sha256sums=('SKIP')
    
      12
    
      13build() {
    
      14    cmake \
    
      15        -B build \
    
      16        -S "${pkgname}" \
    
      17        -DCMAKE_BUILD_TYPE:STRING=Release \
    
      18        -DDLT_USE_STANDARD_INSTALLATION_LOCATION:BOOL=ON \
    
      19        -Wno-dev
    
      20    cmake --build build
    
      21}
    
      22
    
      23package() {
    
      24    DESTDIR="$pkgdir" cmake --install build
    
      25}
    
      26

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-31 00:19:57	Low	2
2026-08-30 23:44:22	Medium	1
2026-06-18 16:11:54	Clean	0