irccd

maintainer Peuc · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from the project's own release domain, which is plausibly controlled by the maintainer; building from official project sources is normal for AUR packages and does not constitute a high risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's own release domain, which is plausibly controlled by the maintainer; building from official project sources is normal for AUR packages and does not constitute a high risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:40 source=("http://releases.malikania.fr/$pkgname/$pkgver/$pkgname-$pkgver.tar.xz" 'irccd-sysusers.conf')

PKGBUILD

1 offending line(s) highlighted

      1# irccd packaging script for ArchLinux - Copyright (c) 2013-2022 Pierre Choffet
    
      2
    
      3# Permission is hereby granted, free of charge, to any person obtaining a copy
    
      4# of this software and associated documentation files (the "Software"), to deal
    
      5# in the Software without restriction, including without limitation the rights
    
      6# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
    
      7# copies of the Software, and to permit persons to whom the Software is
    
      8# furnished to do so, subject to the following conditions:
    
      9
    
      10# The above copyright notice and this permission notice shall be included in
    
      11# all copies or substantial portions of the Software.
    
      12
    
      13# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
    
      14# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
    
      15# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
    
      16# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
    
      17# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
    
      18# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
    
      19# THE SOFTWARE.
    
      20
    
      21pkgname=irccd
    
      22pkgver=4.1.1
    
      23pkgrel=1
    
      24epoch=
    
      25pkgdesc='A flexible, fast IRC bot'
    
      26arch=('x86_64')
    
      27url='http://projects.malikania.fr/irccd/'
    
      28license=('custom:ISC')
    
      29groups=()
    
      30depends=()
    
      31makedepends=('bison' 'cmake' 'curl' 'flex' 'mercurial' 'openssl')
    
      32checkdepends=()
    
      33optdepends=()
    
      34provides=()
    
      35conflicts=('irccd-hg')
    
      36replaces=()
    
      37backup=('etc/irccd.conf')
    
      38options=()
    
      39changelog=
    
      40source=("http://releases.malikania.fr/$pkgname/$pkgver/$pkgname-$pkgver.tar.xz" 'irccd-sysusers.conf')
    
      41noextract=()
    
      42md5sums=('47bfc455e31d0d5e9edd90c0a3948ff8'
    
      43         '9a2172be1a0b56ee719048cb0b4ee594')
    
      44
    
      45build() {
    
      46	cmake -S "$pkgname-$pkgver" -B build \
    
      47		-DCMAKE_INSTALL_PREFIX='/usr' \
    
      48		-DCMAKE_INSTALL_SYSCONFDIR='/etc' \
    
      49		-DIRCCD_WITH_SYSTEMD=On \
    
      50		-DIRCCD_WITH_TESTS=Off
    
      51	cmake --build build
    
      52}
    
      53
    
      54package() {
    
      55	DESTDIR="$pkgdir" cmake --install build
    
      56
    
      57	mkdir -p $pkgdir/usr/share/licenses/$pkgname
    
      58	cp "$pkgname-$pkgver"/LICENSE.md $pkgdir/usr/share/licenses/$pkgname/LICENSE
    
      59
    
      60	# Copy default config files and sysusers
    
      61	mv "$pkgdir/etc/irccd.conf.sample" "$pkgdir/etc/irccd.conf"
    
      62	install -D -m 0644 "$srcdir/irccd-sysusers.conf" "$pkgdir/usr/lib/sysusers.d/irccd.conf"
    
      63}
    
      64

Changes since previous scan

--- PKGBUILD @ 2026-06-20 00:50
+++ PKGBUILD @ 2026-08-03 00:08
@@ -19,7 +19,7 @@
 # THE SOFTWARE.
 
 pkgname=irccd
-pkgver=4.0.4
+pkgver=4.1.1
 pkgrel=1
 epoch=
 pkgdesc='A flexible, fast IRC bot'
@@ -39,7 +39,7 @@
 changelog=
 source=("http://releases.malikania.fr/$pkgname/$pkgver/$pkgname-$pkgver.tar.xz" 'irccd-sysusers.conf')
 noextract=()
-md5sums=('c149069751082689dd6f26f4a483d2dd'
+md5sums=('47bfc455e31d0d5e9edd90c0a3948ff8'
          '9a2172be1a0b56ee719048cb0b4ee594')
 
 build() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 15:55:03	MEDIUM	1
2026-06-20 00:50:07	CLEAN	2
2026-06-20 00:18:46	MEDIUM	1