irccd

LOW

maintainer Peuc 0 votes scanned 2026-11-01 00:21:48.120785

View on AUR

Why flagged

The source is a tarball from the project's own release domain, which is plausibly controlled by the maintainer; building from official project sources is normal for AUR packages and does not constitute a high risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's own release domain, which is plausibly controlled by the maintainer; building from official project sources is normal for AUR packages and does not constitute a high risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:40 source=("http://releases.malikania.fr/$pkgname/$pkgver/$pkgname-$pkgver.tar.xz" 'irccd-sysusers.conf')

PKGBUILD

1 offending line(s) highlighted

      1# irccd packaging script for ArchLinux - Copyright (c) 2013-2022 Pierre Choffet
    
      2
    
      3# Permission is hereby granted, free of charge, to any person obtaining a copy
    
      4# of this software and associated documentation files (the "Software"), to deal
    
      5# in the Software without restriction, including without limitation the rights
    
      6# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
    
      7# copies of the Software, and to permit persons to whom the Software is
    
      8# furnished to do so, subject to the following conditions:
    
      9
    
      10# The above copyright notice and this permission notice shall be included in
    
      11# all copies or substantial portions of the Software.
    
      12
    
      13# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
    
      14# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
    
      15# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
    
      16# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
    
      17# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
    
      18# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
    
      19# THE SOFTWARE.
    
      20
    
      21pkgname=irccd
    
      22pkgver=4.1.1
    
      23pkgrel=1
    
      24epoch=
    
      25pkgdesc='A flexible, fast IRC bot'
    
      26arch=('x86_64')
    
      27url='http://projects.malikania.fr/irccd/'
    
      28license=('custom:ISC')
    
      29groups=()
    
      30depends=()
    
      31makedepends=('bison' 'cmake' 'curl' 'flex' 'mercurial' 'openssl')
    
      32checkdepends=()
    
      33optdepends=()
    
      34provides=()
    
      35conflicts=('irccd-hg')
    
      36replaces=()
    
      37backup=('etc/irccd.conf')
    
      38options=()
    
      39changelog=
    
      40source=("http://releases.malikania.fr/$pkgname/$pkgver/$pkgname-$pkgver.tar.xz" 'irccd-sysusers.conf')
    
      41noextract=()
    
      42md5sums=('47bfc455e31d0d5e9edd90c0a3948ff8'
    
      43         '9a2172be1a0b56ee719048cb0b4ee594')
    
      44
    
      45build() {
    
      46	cmake -S "$pkgname-$pkgver" -B build \
    
      47		-DCMAKE_INSTALL_PREFIX='/usr' \
    
      48		-DCMAKE_INSTALL_SYSCONFDIR='/etc' \
    
      49		-DIRCCD_WITH_SYSTEMD=On \
    
      50		-DIRCCD_WITH_TESTS=Off
    
      51	cmake --build build
    
      52}
    
      53
    
      54package() {
    
      55	DESTDIR="$pkgdir" cmake --install build
    
      56
    
      57	mkdir -p $pkgdir/usr/share/licenses/$pkgname
    
      58	cp "$pkgname-$pkgver"/LICENSE.md $pkgdir/usr/share/licenses/$pkgname/LICENSE
    
      59
    
      60	# Copy default config files and sysusers
    
      61	mv "$pkgdir/etc/irccd.conf.sample" "$pkgdir/etc/irccd.conf"
    
      62	install -D -m 0644 "$srcdir/irccd-sysusers.conf" "$pkgdir/usr/lib/sysusers.d/irccd.conf"
    
      63}
    
      64

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-01 00:21:48	Low	2
2026-10-31 00:07:41	Low	2
2026-10-30 00:29:30	Low	2
2026-10-29 00:13:55	Low	2
2026-10-28 00:06:54	Low	2
2026-10-27 00:23:28	Low	2
2026-10-26 00:12:40	Low	2
2026-10-25 00:20:48	Low	2
2026-10-24 00:14:55	Low	2
2026-10-23 00:02:19	Low	2
2026-10-22 00:13:10	Low	2
2026-10-21 00:12:50	Low	2
2026-10-20 00:10:31	Low	2
2026-10-19 00:03:55	Low	2
2026-10-18 00:06:55	Low	2
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2