keymasq
LOW
maintainer nyrda
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a tarball from the project's own release infrastructure (repo.keymasq.tools), which is plausibly official; building from project-owned sources is normal for AUR packages, even on non-whitelisted hosts, and the checksum is verified.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's own release infrastructure (repo.keymasq.tools), which is plausibly official; building from project-owned sources is normal for AUR packages, even on non-whitelisted hosts, and the checksum is verified.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:39
source=("$pkgname-$pkgver.tar.gz::https://repo.keymasq.tools/releases/keymasq-0.18.0.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# Generated by `python3 packaging/pacman/render.py`.
2
# Do not edit this file directly; update `packaging/pacman/templates/`.
3
4
# Maintainer: nyrda <nyrda@keymasq.tools>
5
pkgname=keymasq
6
pkgver=0.18.0
7
pkgrel=1
8
pkgdesc="Keyboard and mouse remapper with GUI configuration, per-window profiles, and macros"
9
arch=(
10
'any'
11
)
12
url="https://keymasq.tools"
13
license=(
14
'MIT'
15
)
16
depends=(
17
'acl'
18
'slurp'
19
'python>=3.12'
20
'python-evdev>=1.6.0'
21
'python-tomli-w>=1.0.0'
22
'python-dbus-next>=0.2.3'
23
'python-uvloop'
24
'python-xlib>=0.33'
25
'python-gobject>=3.42.0'
26
'python-cairo'
27
'gtk4'
28
'libadwaita'
29
'polkit'
30
'systemd'
31
)
32
makedepends=(
33
'python-setuptools>=61.0'
34
'python-wheel'
35
'python-build'
36
'python-installer'
37
)
38
install="$pkgname.install"
39
source=("$pkgname-$pkgver.tar.gz::https://repo.keymasq.tools/releases/keymasq-0.18.0.tar.gz")
40
sha256sums=('78ea1d713836a1d37a0970358dcecbbb9cc565159d222dc0d6add7382d2545c0')
41
42
43
build() {
44
local build_root="$srcdir/$pkgname-$pkgver"
45
46
rm -rf "$srcdir/python-dist"
47
mkdir -p "$srcdir/python-dist"
48
49
cd "$build_root"
50
python -m build --wheel --no-isolation --outdir "$srcdir/python-dist"
51
}
52
53
package() {
54
local build_root="$srcdir/$pkgname-$pkgver"
55
56
cd "$build_root"
57
58
python -m installer --destdir="$pkgdir" "$srcdir"/python-dist/*.whl
59
60
install -Dm644 "assets/tools.keymasq.keymasq.desktop" \
61
"$pkgdir/usr/share/applications/tools.keymasq.keymasq.desktop"
62
install -Dm644 "assets/tools.keymasq.keymasq.metainfo.xml" \
63
"$pkgdir/usr/share/metainfo/tools.keymasq.keymasq.metainfo.xml"
64
install -Dm644 "assets/tools.keymasq.keymasq.svg" \
65
"$pkgdir/usr/share/icons/hicolor/scalable/apps/tools.keymasq.keymasq.svg"
66
local icon
67
local size
68
for icon in assets/icons/tools.keymasq.keymasq-*.png; do
69
size="${icon##*-}"
70
size="${size%.png}"
71
install -Dm644 "$icon" \
72
"$pkgdir/usr/share/icons/hicolor/${size}x${size}/apps/tools.keymasq.keymasq.png"
73
done
74
75
install -Dm644 "systemd/keymasqd.service" \
76
"$pkgdir/usr/lib/systemd/system/keymasqd.service"
77
install -Dm644 "systemd/keymasq-session.service" \
78
"$pkgdir/usr/lib/systemd/user/keymasq-session.service"
79
80
install -Dm644 "sysusers.d/keymasq.conf" \
81
"$pkgdir/usr/lib/sysusers.d/keymasq.conf"
82
install -Dm644 "tmpfiles.d/keymasq.conf" \
83
"$pkgdir/usr/lib/tmpfiles.d/keymasq.conf"
84
85
for rule in \
86
91-keymasq-acl.rules \
87
99-keymasq-hide-grabbed.rules; do
88
install -Dm644 "udev/$rule" "$pkgdir/usr/lib/udev/rules.d/$rule"
89
done
90
91
install -Dm644 "polkit/com.keymasq.record-macro.policy" \
92
"$pkgdir/usr/share/polkit-1/actions/com.keymasq.record-macro.policy"
93
94
install -Dm644 "LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
95
install -Dm644 "README.md" "$pkgdir/usr/share/doc/$pkgname/README.md"
96
install -Dm644 "examples/security.toml" \
97
"$pkgdir/usr/share/doc/$pkgname/security.toml"
98
99
install -d "$pkgdir/usr/share/gnome-shell/extensions/gnome-bridge@keymasq.tools"
100
cp -a "gnome-extension/gnome-bridge@keymasq.tools/." \
101
"$pkgdir/usr/share/gnome-shell/extensions/gnome-bridge@keymasq.tools/"
102
103
rm -f "$pkgdir/usr/bin/keymasq-cli" "$pkgdir/usr/bin/keymasq-gui"
104
}
105
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |