lcp-dedrm-git

LOW

maintainer Ketchup901 0 votes scanned 2026-09-17 15:25:49.288233

View on AUR

Why flagged

The package builds from source using radicle (a decentralized code hosting protocol) with a SKIP'd checksum, which reduces verifiability, but it is a legitimate build of a known tool from its official radicle repository, and no malicious behavior or untrusted prebuilt binaries are present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source using radicle (a decentralized code hosting protocol) with a SKIP'd checksum, which reduces verifiability, but it is a legitimate build of a known tool from its official radicle repository, and no malicious behavior or untrusted prebuilt binaries are present.

PKGBUILD

      1# Maintainer: Ketchup901 <ketchup901@riseup.net>
    
      2
    
      3# IMPORTANT: You must follow the instructions at https://wiki.archlinux.org/title/Radicle in order to be able to download the source for this package!
    
      4
    
      5pkgname=lcp-dedrm-git
    
      6pkgver=0.1.1.r9.7a6aa9c
    
      7pkgrel=1
    
      8pkgdesc="LCP DRM removal tool"
    
      9arch=('any')
    
      10url=""
    
      11license=()
    
      12provides=('lcp-dedrm')
    
      13conflicts=('lcp-dedrm')
    
      14makedepends=(
    
      15    'radicle'
    
      16    'git'
    
      17    'cargo'
    
      18)
    
      19depends=(
    
      20    'glibc'
    
      21    'libgcc'
    
      22    'zstd'
    
      23)
    
      24source=("lcp-dedrm::git+rad://z41uCZqyBUSRQoBCQq4Bpq8ZSCHKr")
    
      25sha256sums=('SKIP')
    
      26options=(!lto)
    
      27
    
      28pkgver() {
    
      29    cd lcp-dedrm
    
      30    _version=$(sed -nE 's/^version = "(.*)"$/\1/p' Cargo.toml)
    
      31    _rev=$(git rev-list --count HEAD)
    
      32    _commit=$(git rev-parse --short=7 HEAD)
    
      33    printf "%s.r%s.%s" "$_version" "$_rev" "$_commit"
    
      34}
    
      35
    
      36prepare() {
    
      37    cd lcp-dedrm
    
      38    export RUSTUP_TOOLCHAIN=stable
    
      39    cargo fetch --locked --target host-tuple
    
      40}
    
      41
    
      42build() {
    
      43    cd lcp-dedrm
    
      44    export RUSTUP_TOOLCHAIN=stable
    
      45    export CARGO_TARGET_DIR=target
    
      46    export ZSTD_SYS_USE_PKG_CONFIG=1
    
      47    # Remove optimization flags, otherwise build breaks
    
      48    export CFLAGS="${CFLAGS//-O[^[:space:]]*/}"
    
      49    cargo build --frozen --release
    
      50}
    
      51
    
      52package() {
    
      53    install -Dm755 "$srcdir/lcp-dedrm/target/release/lcp-dedrm" -t "$pkgdir/usr/bin/"
    
      54}
    
      55
    
      56

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 15:25:49	Low	2