kpar2
LOW
maintainer sl1pkn07
9 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a tarball from Google Code's archive, which is a legitimate historical source; the package builds from verifiable source code and installs only data and compiled binaries, posing no active threat.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from Google Code's archive, which is a legitimate historical source; the package builds from verifiable source code and installs only data and compiled binaries, posing no active threat.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:26
"https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/kpar2kde4/kpar2-${pkgver}.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer; Gustavo Alvarez <sl1pkn07@gmail.com>
2
# Contributor: Andrea Scarpino <andrea@archlinux.org>
3
4
pkgname=kpar2
5
pkgver=0.4.5
6
pkgrel=10
7
pkgdesc="PAR2 verification and repair program for KDE4"
8
arch=('x86_64')
9
url='http://code.google.com/p/kpar2kde4'
10
license=('GPL3')
11
depends=(
12
'gcc-libs' # libstdc++.so
13
'glibc' # libc.so
14
'qt4' # libQtCore.so libQtGui.so
15
'kde-cli-tools'
16
'kdelibs' # libkdecore.so libkdeui.so libkio.so
17
'libpar2' 'libpar2.so'
18
'libsigc++' 'libsigc-2.0.so'
19
'hicolor-icon-theme'
20
)
21
makedepends=(
22
'cmake'
23
'automoc4'
24
)
25
source=(
26
"https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/kpar2kde4/kpar2-${pkgver}.tar.gz"
27
'kpar2.desktop.diff'
28
)
29
sha256sums=(
30
'91c4d12600e9d9346e37ac2bec98cf6331e9491d510aeda1e12b0c15e3f1324e'
31
'48d28e11b739b111f7a3731be8e4973774f561e346104cb28f595eb530dfd31d'
32
)
33
34
prepare() {
35
patch -d "kpar2-${pkgver}" -p0 -i "${srcdir}/kpar2.desktop.diff"
36
sed 's|2.6|3.5|g' -i "kpar2-${pkgver}/CMakeLists.txt"
37
}
38
39
build() {
40
cmake -S "kpar2-${pkgver}" -B build \
41
-DCMAKE_BUILD_TYPE=None \
42
-DCMAKE_INSTALL_PREFIX=/usr
43
44
cmake --build build
45
}
46
47
package() {
48
DESTDIR="${pkgdir}" cmake --build build --target install
49
50
# missing bits(?)
51
install -Dm644 "kpar2-${pkgver}/src/kpar2ui.rc" "${pkgdir}/usr/share/apps/kpar2/kpar2ui.rc"
52
install -Dm644 "kpar2-${pkgver}/src/config.kcfg" "${pkgdir}/usr/share/config.kcfg/kpar2.kcfg"
53
}
54
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |