iocaine-nsoe
LOW
maintainer tazz4843
0 votes
scanned 2026-10-02 00:00:32.890515
Why flagged
Downloads a tarball of configuration/script files (.roto) from the project's own Gitea instance (git.madhouse-project.org) with SKIP'd checksum due to a known upstream versioning issue; the installed files are config/data files for the 'iocaine' package, not executed binaries, so the worst-case impact of a swapped source is limited to config tampering rather than code execution.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 75%): Downloads a tarball of configuration/script files (.roto) from the project's own Gitea instance (git.madhouse-project.org) with SKIP'd checksum due to a known upstream versioning issue; the installed files are config/data files for the 'iocaine' package, not executed binaries, so the worst-case impact of a swapped source is limited to config tampering rather than code execution.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:33
"${pkgname}-${pkgver}.tar.zst::https://git.madhouse-project.org/api/packages/iocaine/generic/nam-shub-of-enki/latest/nam-shub-of-enki-latest.tar.zst"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Niko <archpkgs@niko.lgbt>
2
3
pkgname=iocaine-nsoe
4
pkgver=20260802
5
pkgrel=1
6
pkgdesc='Iocaine config - Nam Shub of Enki'
7
arch=('any')
8
url='https://3.nam-shub-of-enki.iocaine.madhouse-project.org/'
9
license=('MIT')
10
depends=('iocaine')
11
backup=(
12
'etc/iocaine/nam-shub-of-enki/init/pkg.roto'
13
'etc/iocaine/nam-shub-of-enki/init/nam_shub_of_enki/mod.roto'
14
'etc/iocaine/nam-shub-of-enki/init/nam_shub_of_enki/configuration.roto'
15
16
'etc/iocaine/nam-shub-of-enki/main/pkg.roto'
17
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/mod.roto'
18
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/configuration.roto'
19
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/responses.roto'
20
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/templates.roto'
21
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/verdicts.roto'
22
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/classify/mod.roto'
23
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/detect/mod.roto'
24
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/detect/bad_browser.roto'
25
26
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/tests/mod.roto'
27
'etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/tests/config/mod.roto'
28
)
29
30
# we needn't add a conflicts array because this installs to its own unique directory so this and QMK can coexist safely
31
32
source=(
33
"${pkgname}-${pkgver}.tar.zst::https://git.madhouse-project.org/api/packages/iocaine/generic/nam-shub-of-enki/latest/nam-shub-of-enki-latest.tar.zst"
34
)
35
36
# unfortunately NSOE currently has no fixed tarball versioning so we must use the current date and skip integrity checks
37
# see upstream issue 54: https://git.madhouse-project.org/iocaine/nam-shub-of-enki/issues/54
38
sha256sums=('SKIP')
39
pkgver() {
40
date +%Y%m%d
41
}
42
43
package() {
44
cd "${srcdir}/nam-shub-of-enki/"
45
46
install -Dm755 -d "${pkgdir}/etc/iocaine/nam-shub-of-enki/init/nam_shub_of_enki" "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki" "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/classify" "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/detect" "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/tests/config"
47
48
install -Dm644 "init/pkg.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/init/"
49
install -Dm644 "init/nam_shub_of_enki/mod.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/init/nam_shub_of_enki"
50
install -Dm644 "init/nam_shub_of_enki/configuration.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/init/nam_shub_of_enki"
51
52
install -Dm644 "main/pkg.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/"
53
install -Dm644 "main/nam_shub_of_enki/mod.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki"
54
install -Dm644 "main/nam_shub_of_enki/configuration.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki"
55
install -Dm644 "main/nam_shub_of_enki/responses.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki"
56
install -Dm644 "main/nam_shub_of_enki/templates.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki"
57
install -Dm644 "main/nam_shub_of_enki/verdicts.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki"
58
install -Dm644 "main/nam_shub_of_enki/classify/mod.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/classify"
59
install -Dm644 "main/nam_shub_of_enki/detect/mod.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/detect"
60
install -Dm644 "main/nam_shub_of_enki/detect/bad_browser.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/detect"
61
62
install -Dm644 "main/nam_shub_of_enki/tests/mod.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/tests"
63
install -Dm644 "main/nam_shub_of_enki/tests/config/mod.roto" -t "${pkgdir}/etc/iocaine/nam-shub-of-enki/main/nam_shub_of_enki/tests/config"
64
}
65
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-02 00:00:32 | Low | 2 |
| 2026-10-01 00:02:06 | Low | 2 |
| 2026-09-30 00:20:07 | Low | 2 |
| 2026-09-29 00:07:46 | Low | 2 |
| 2026-09-28 00:28:32 | Low | 2 |
| 2026-09-27 00:07:07 | Low | 2 |
| 2026-09-26 00:12:15 | Low | 2 |
| 2026-09-25 00:03:36 | Low | 2 |
| 2026-09-24 00:24:14 | Low | 2 |
| 2026-09-23 00:28:13 | Low | 2 |
| 2026-09-22 00:15:14 | Low | 2 |
| 2026-09-21 00:26:32 | Low | 2 |
| 2026-09-20 00:25:31 | Low | 2 |
| 2026-09-19 00:25:36 | Low | 2 |
| 2026-09-18 00:17:11 | Low | 2 |
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |