iocaine-nsoe
maintainer tazz4843
· 0 votes
· scanned 2026-08-18 00:03:42.021799
LOW
View on AUR ↗
Why flagged
Downloads a tarball of configuration/script files (.roto) from the project's own Gitea instance (git.madhouse-project.org) with SKIP'd checksum due to a known upstream versioning issue; the installed files are config/data files for the 'iocaine' package, not executed binaries, so the worst-case impact of a swapped source is limited to config tampering rather than code execution.
Triggered rules
LOW
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 75%): Downloads a tarball of configuration/script files (.roto) from the project's own Gitea instance (git.madhouse-project.org) with SKIP'd checksum due to a known upstream versioning issue; the installed files are config/data files for the 'iocaine' package, not executed binaries, so the worst-case impact of a swapped source is limited to config tampering rather than code execution.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:33
"${pkgname}-${pkgver}.tar.zst::https://git.madhouse-project.org/api/packages/iocaine/generic/nam-shub-of-enki/latest/nam-shub-of-enki-latest.tar.zst"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Niko <archpkgs@niko.lgbt>
2
3
pkgname=iocaine-nsoe
4
pkgver=20260802
5
pkgrel=1
6
pkgdesc='Iocaine config - Nam Shub of Enki'
7
arch=('any')
8
url='https://3.nam-shub-of-enki.iocaine.madhouse-project.org/'
9
license=('MIT')
10
depends=('iocaine')
11
backup=(
12
'etc/iocaine/nam-shub-of-enki/init/pkg.roto'
13
'etc/iocaine/nam-shub-of-enki/init/nam_shub_of_enki/mod.roto'
14
'etc/iocaine/nam-shub-of-enki/init/nam_shub_of_enki/configuration.roto'
15
16
'etc/iocaine/nam-shub-of-enki/main/pkg.roto'
17
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/mod.roto'
18
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/configuration.roto'
19
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/responses.roto'
20
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/templates.roto'
21
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/verdicts.roto'
22
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/classify/mod.roto'
23
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/detect/mod.roto'
24
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/detect/bad_browser.roto'
25
26
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/tests/mod.roto'
27
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/tests/config/mod.roto'
28
)
29
30
# we needn't add a conflicts array because this installs to its own unique directory so this and QMK can coexist safely
31
32
source=(
33
"${pkgname}-${pkgver}.tar.zst::https://git.madhouse-project.org/api/packages/iocaine/generic/nam-shub-of-enki/latest/nam-shub-of-enki-latest.tar.zst"
34
)
35
36
# unfortunately NSOE currently has no fixed tarball versioning so we must use the current date and skip integrity checks
37
# see upstream issue 54: https://git.madhouse-project.org/iocaine/nam-shub-of-enki/issues/54
38
sha256sums=('SKIP')
39
pkgver() {
40
date +%Y%m%d
41
}
42
43
package() {
44
cd "${srcdir}/nam-shub-of-enki/"
45
46
install -Dm755 -d "${pkgdir}/etc/iocaine/nam-shub-of-enki/init/nam_shub_of_enki" "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki" "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/classify" "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/detect" "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/tests/config"
47
48
install -Dm644 "init/pkg.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/init/"
49
install -Dm644 "init/nam_shub_of_enki/mod.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/init/nam_shub_of_enki"
50
install -Dm644 "init/nam_shub_of_enki/configuration.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/init/nam_shub_of_enki"
51
52
install -Dm644 "main/pkg.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/"
53
install -Dm644 "main/nam_shub_of_enki/mod.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki"
54
install -Dm644 "main/nam_shub_of_enki/configuration.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki"
55
install -Dm644 "main/nam_shub_of_enki/responses.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki"
56
install -Dm644 "main/nam_shub_of_enki/templates.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki"
57
install -Dm644 "main/nam_shub_of_enki/verdicts.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki"
58
install -Dm644 "main/nam_shub_of_enki/classify/mod.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/classify"
59
install -Dm644 "main/nam_shub_of_enki/detect/mod.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/detect"
60
install -Dm644 "main/nam_shub_of_enki/detect/bad_browser.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/detect"
61
62
install -Dm644 "main/nam_shub_of_enki/tests/mod.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/tests"
63
install -Dm644 "main/nam_shub_of_enki/tests/config/mod.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/tests/config"
64
}
65
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-18 00:03:42 | LOW | 3 |
| 2026-08-17 00:18:29 | LOW | 3 |
| 2026-08-16 00:03:42 | LOW | 3 |
| 2026-08-15 00:26:13 | LOW | 3 |
| 2026-08-14 00:03:41 | LOW | 3 |
| 2026-08-13 00:17:07 | LOW | 3 |
| 2026-08-12 23:27:50 | LOW | 3 |
| 2026-08-12 23:25:14 | MEDIUM | 2 |