lib32-lightscribe

LOW

maintainer jose1711 0 votes scanned 2026-10-17 07:18:45.462616

View on AUR

Why flagged

Downloads a prebuilt 32-bit RPM from the Wayback Machine (archive.org mirror of the original pawtec.com/lightscribe distribution), which is a plausible archival source for this discontinued software; the checksum is present and non-SKIP, so the binary is pinned; the PKGBUILD only installs library files and config, no arbitrary remote code execution occurs at build or install time.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 70%): Downloads a prebuilt 32-bit RPM from the Wayback Machine (archive.org mirror of the original pawtec.com/lightscribe distribution), which is a plausible archival source for this discontinued software; the checksum is present and non-SKIP, so the binary is pinned; the PKGBUILD only installs library files and config, no arbitrary remote code execution occurs at build or install time.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:21 source=("https://web.archive.org/web/20200404105932/http://www.pawtec.com/lightscribe_files/Linux/LSS/$_realname-$pkgver-linux-2.6-intel.rpm")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Jose Riha <jose1711 gmail com>
    
      2# Contributor: jhrdka
    
      3# Contributor: Isaac Aggrey <isaac.aggrey@gmail.com>
    
      4# Contributor: ugaciaka <ugaciaka@gmail.com>
    
      5
    
      6pkgname=lib32-lightscribe
    
      7_realname=lightscribe
    
      8pkgver=1.18.27.10
    
      9pkgrel=6
    
      10pkgdesc="LightScribe Host Software for Linux (32-bit)"
    
      11arch=('x86_64')
    
      12url="https://web.archive.org/web/20130116202922/http://lightscribe.com/downloadSection/linux/index.aspx"
    
      13license=('LicenseRef-LightScribe')
    
      14depends=('bash' 'lib32-glibc' 'lib32-gcc-libs')
    
      15makedepends=('patchelf')
    
      16provides=("bin32-lightscribe=$pkgver")
    
      17conflicts=('bin32-lightscribe' 'lightscribe')
    
      18replaces=('bin32-lightscribe')
    
      19backup=('etc/lightscribe.rc')
    
      20options=('!strip')
    
      21source=("https://web.archive.org/web/20200404105932/http://www.pawtec.com/lightscribe_files/Linux/LSS/$_realname-$pkgver-linux-2.6-intel.rpm")
    
      22sha256sums=('069703c3b5a572191f53697fcccb83504bb1c2405382d02d952fe5d4f12f2643')
    
      23
    
      24prepare() {
    
      25  cd "$srcdir"
    
      26  sed -i 's|/usr/lib/lightscribe|/usr/lib32/lightscribe|g' etc/lightscribe.rc
    
      27  # bundled libstdc++.so.5 lives in a private directory
    
      28  patchelf --set-rpath '$ORIGIN/lightscribe' usr/lib/liblightscribe.so.1
    
      29}
    
      30
    
      31package() {
    
      32  cd "$srcdir"
    
      33  install -Dm644 etc/lightscribe.rc "$pkgdir/etc/lightscribe.rc"
    
      34
    
      35  install -Dm755 usr/lib/liblightscribe.so.1 "$pkgdir/usr/lib32/liblightscribe.so.1"
    
      36  ln -s liblightscribe.so.1 "$pkgdir/usr/lib32/liblightscribe.so"
    
      37
    
      38  install -Dm755 usr/lib/lightscribe/libstdc++.so.5.0.7 \
    
      39    "$pkgdir/usr/lib32/lightscribe/libstdc++.so.5.0.7"
    
      40  ln -s libstdc++.so.5.0.7 "$pkgdir/usr/lib32/lightscribe/libstdc++.so.5"
    
      41  install -Dm755 usr/lib/lightscribe/elcu.sh "$pkgdir/usr/lib32/lightscribe/elcu.sh"
    
      42  install -Dm755 usr/lib/lightscribe/updates/fallback.sh \
    
      43    "$pkgdir/usr/lib32/lightscribe/updates/fallback.sh"
    
      44
    
      45  install -Dm644 usr/share/doc/lightscribeLicense.rtf \
    
      46    "$pkgdir/usr/share/licenses/$pkgname/license.rtf"
    
      47}
    
      48

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 07:18:45	Low	3
2026-10-17 07:17:15	Medium	3