irccd

LOW

maintainer Peuc 0 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is a tarball from the project's own release domain, which is plausibly controlled by the maintainer; building from official project sources is normal for AUR packages and does not constitute a high risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's own release domain, which is plausibly controlled by the maintainer; building from official project sources is normal for AUR packages and does not constitute a high risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:40 source=("http://releases.malikania.fr/$pkgname/$pkgver/$pkgname-$pkgver.tar.xz" 'irccd-sysusers.conf')

PKGBUILD

1 offending line(s) highlighted

      1# irccd packaging script for ArchLinux - Copyright (c) 2013-2022 Pierre Choffet
    
      2
    
      3# Permission is hereby granted, free of charge, to any person obtaining a copy
    
      4# of this software and associated documentation files (the "Software"), to deal
    
      5# in the Software without restriction, including without limitation the rights
    
      6# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
    
      7# copies of the Software, and to permit persons to whom the Software is
    
      8# furnished to do so, subject to the following conditions:
    
      9
    
      10# The above copyright notice and this permission notice shall be included in
    
      11# all copies or substantial portions of the Software.
    
      12
    
      13# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
    
      14# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
    
      15# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
    
      16# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
    
      17# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
    
      18# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
    
      19# THE SOFTWARE.
    
      20
    
      21pkgname=irccd
    
      22pkgver=4.1.1
    
      23pkgrel=1
    
      24epoch=
    
      25pkgdesc='A flexible, fast IRC bot'
    
      26arch=('x86_64')
    
      27url='http://projects.malikania.fr/irccd/'
    
      28license=('custom:ISC')
    
      29groups=()
    
      30depends=()
    
      31makedepends=('bison' 'cmake' 'curl' 'flex' 'mercurial' 'openssl')
    
      32checkdepends=()
    
      33optdepends=()
    
      34provides=()
    
      35conflicts=('irccd-hg')
    
      36replaces=()
    
      37backup=('etc/irccd.conf')
    
      38options=()
    
      39changelog=
    
      40source=("http://releases.malikania.fr/$pkgname/$pkgver/$pkgname-$pkgver.tar.xz" 'irccd-sysusers.conf')
    
      41noextract=()
    
      42md5sums=('47bfc455e31d0d5e9edd90c0a3948ff8'
    
      43         '9a2172be1a0b56ee719048cb0b4ee594')
    
      44
    
      45build() {
    
      46	cmake -S "$pkgname-$pkgver" -B build \
    
      47		-DCMAKE_INSTALL_PREFIX='/usr' \
    
      48		-DCMAKE_INSTALL_SYSCONFDIR='/etc' \
    
      49		-DIRCCD_WITH_SYSTEMD=On \
    
      50		-DIRCCD_WITH_TESTS=Off
    
      51	cmake --build build
    
      52}
    
      53
    
      54package() {
    
      55	DESTDIR="$pkgdir" cmake --install build
    
      56
    
      57	mkdir -p $pkgdir/usr/share/licenses/$pkgname
    
      58	cp "$pkgname-$pkgver"/LICENSE.md $pkgdir/usr/share/licenses/$pkgname/LICENSE
    
      59
    
      60	# Copy default config files and sysusers
    
      61	mv "$pkgdir/etc/irccd.conf.sample" "$pkgdir/etc/irccd.conf"
    
      62	install -D -m 0644 "$srcdir/irccd-sysusers.conf" "$pkgdir/usr/lib/sysusers.d/irccd.conf"
    
      63}
    
      64

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2