libluise-bin

maintainer dreieck · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from a Gentoo developer's personal directory, which is not on a standard whitelist, but it is a legitimate build artifact for a known project; the package builds from source and installs only libraries and documentation, with no evidence of malicious payloads or remote code execution.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from a Gentoo developer's personal directory, which is not on a standard whitelist, but it is a legitimate build artifact for a known project; the package builds from source and installs only libraries and documentation, with no evidence of malicious payloads or remote code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:38 "https://dev.gentoo.org/~conikost/files/LUIse_${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer:  dreieck (https://aur.archlinux.org/account/dreieck)
    
      2
    
      3_pkgbase=libluise
    
      4pkgbase="${_pkgbase}-bin"
    
      5pkgname=(
    
      6  "${_pkgbase}-bin"
    
      7)
    
      8pkgver=0.1.1
    
      9pkgrel=3
    
      10pkgdesc="Programming interface for the Wallbraun LCD-USB-Interface."
    
      11# url="https://packages.gentoo.org/packages/dev-libs/luise"
    
      12url="https://web.archive.org/web/20140102061822/http://wallbraun-electronics.de/"
    
      13arch=(
    
      14  'i686'
    
      15  'x86_64'
    
      16)
    
      17license=("LGPL-2.1-only") # See https://gitweb.gentoo.org/repo/gentoo.git/tree/dev-libs/luise/luise-0.1.1-r2.ebuild
    
      18depends=(
    
      19  'glibc'
    
      20  'libusb-compat'
    
      21)
    
      22makedepends=(
    
      23  'patchelf'
    
      24)
    
      25optdepends=()
    
      26provides=(
    
      27  "${_pkgbase}=${pkgver}"
    
      28  "${_pkgbase}.so"
    
      29  "luise=${pkgver}"  # That's actually the name of this used in gentoo. The official name seems to be 'LUIse'.
    
      30)
    
      31conflicts=(
    
      32  "${_pkgbase}"
    
      33  "${_pkgbase}.so"
    
      34  "luise"
    
      35)
    
      36options+=('staticlibs')
    
      37source=(
    
      38  "https://dev.gentoo.org/~conikost/files/LUIse_${pkgver}.tar.gz"
    
      39  # https://web.archive.org/web/20251114004035/https://dev.gentoo.org/~conikost/files/LUIse_0.1.1.tar.gz
    
      40  "description.txt"
    
      41)
    
      42sha256sums=(
    
      43  'c197a82d3b043d40b3d1ebbe2aa5ed7e7b74955bbc1d2316657fd8e27ce16ed0'
    
      44  'e8c31a6d6ea4125fdeafb8c18d298cd9e7f0438a28d1c3293a890b9a88a4d337'
    
      45)
    
      46
    
      47package() {
    
      48  cd "${srcdir}/LUIse_${pkgver}"
    
      49
    
      50  case "${CARCH}" in
    
      51    'i686')
    
      52      install -Dvm755 "32bit/libluise.so.${pkgver}" "${pkgdir}/usr/lib/libluise.so.${pkgver}"
    
      53      ln -svr "${pkgdir}/usr/lib/libluise.so.${pkgver}"  "${pkgdir}/usr/lib/libluise.so"
    
      54      install -Dvm644 -t "${pkgdir}/usr/include"  32bit/luise.h
    
      55    ;;
    
      56    'x86_64')
    
      57      install -Dvm755 "64bit/libluise_64.so.${pkgver}" "${pkgdir}/usr/lib/libluise.so.${pkgver}"
    
      58      ln -svr "${pkgdir}/usr/lib/libluise.so.${pkgver}"     "${pkgdir}/usr/lib/libluise.so"
    
      59      install -Dvm644 -t "${pkgdir}/usr/include"  64bit/luise.h
    
      60    ;;
    
      61    *)
    
      62      error "Architecture '${CARCH}' not supported."
    
      63      return 11
    
      64    ;;
    
      65  esac
    
      66
    
      67  patchelf --set-soname "libluise.so.${pkgver}" "${pkgdir}/usr/lib/libluise.so.${pkgver}"
    
      68
    
      69  install -Dvm644 -t "${pkgdir}/usr/share/doc/${_pkgbase}"                     doc/{docu_luise011_Linux.pdf,readme} "${srcdir}/description.txt"
    
      70  install -Dvm644 -t "${pkgdir}/usr/share/doc/${_pkgbase}/samples/luise-test"  samples/luise-test/*
    
      71}
    
      72

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2