lidarr-plugins-bin
LOW
maintainer failedcaptcha
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads prebuilt binaries from the project's official update server, which is plausibly controlled by the Lidarr team; despite the non-standard domain, the binaries are verified via matching sha256sums and are part of normal project distribution, so the risk is low.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt binaries from the project's official update server, which is plausibly controlled by the Lidarr team; despite the non-standard domain, the binaries are verified via matching sha256sums and are part of normal project distribution, so the risk is low.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:46
source_x86_64=("Lidarr.plugins.${pkgver}.linux-core-x64.tar.gz::https://lidarr.servarr.com/v1/update/plugins/updatefile?version=${pkgver}&os=linux&runtime=netcore&arch=x64")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Daniel Weiland <aur.archlinux@failedcaptcha>
2
# Helpful URL: https://services.lidarr.audio/v1/update/plugins?version=0.0.0.0&os=linux&runtime=netcore&arch=x64&includeMajorVersion=true
3
4
pkgname=lidarr-plugins-bin
5
pkgver=3.1.1.4881
6
pkgrel=1
7
pkgdesc='Music collection manager for newsgroup and torrent users (plugins branch)'
8
arch=(x86_64 aarch64 armv7h)
9
url='https://lidarr.audio'
10
license=('GPL-3.0-or-later')
11
groups=(servarr-develop-bin)
12
depends=(
13
gcc-libs
14
glibc
15
sqlite
16
zlib
17
)
18
optdepends=(
19
'postgresql: postgresql database'
20
'sabnzbd: usenet downloader'
21
'nzbget: usenet downloader'
22
'qbittorrent: torrent downloader'
23
'deluge: torrent downloader'
24
'rtorrent: torrent downloader'
25
'nodejs-flood: torrent downloader'
26
'vuze: torrent downloader'
27
'aria2: torrent downloader'
28
'transmission-cli: torrent downloader (CLI and daemon)'
29
'transmission-gtk: torrent downloader (GTK+)'
30
'transmission-qt: torrent downloader (Qt)'
31
'jackett: torrent indexer proxy'
32
'nzbhydra2: torznab and usenet indexer proxy'
33
'prowlarr: torrent and usenet indexer proxy'
34
'autobrr: irc, torrent and usenet indexer proxy'
35
)
36
provides=(lidarr)
37
conflicts=(lidarr)
38
options=(!debug)
39
install=lidarr.install
40
source=(
41
lidarr.service
42
lidarr.sysusers
43
lidarr.tmpfiles
44
package_info
45
)
46
source_x86_64=("Lidarr.plugins.${pkgver}.linux-core-x64.tar.gz::https://lidarr.servarr.com/v1/update/plugins/updatefile?version=${pkgver}&os=linux&runtime=netcore&arch=x64")
47
source_aarch64=("Lidarr.plugins.${pkgver}.linux-core-arm64.tar.gz::https://lidarr.servarr.com/v1/update/plugins/updatefile?version=${pkgver}&os=linux&runtime=netcore&arch=arm64")
48
source_armv7h=("Lidarr.plugins.${pkgver}.linux-core-arm.tar.gz::https://lidarr.servarr.com/v1/update/plugins/updatefile?version=${pkgver}&os=linux&runtime=netcore&arch=arm")
49
sha256sums=('48f4cc5040b1a51e624f5be4977078b77bf7f87b9c1fb7fa34e844da4c831401'
50
'85098d47734e8087480f8a29eafec50faa453487221ef01173888155d2b06e42'
51
'd71e37213ac65722e42f6f2c5772d4515c2d28a77b9f7608dc05c787d86ebaa5'
52
'b43bb98d95b23071e17d5db69273c11304b9bdcd6bbaa998ba60f89b7dd0ef1e')
53
sha256sums_x86_64=('4f9708bf04a06a88acdeb4f00d582a3d121ae143cb79e9e74f789c11aed1a587')
54
sha256sums_aarch64=('3412959daf2f6f955f7f5edf6f1ca61e4abe0d0d79f3c15d9c3e0483a02f05d0')
55
sha256sums_armv7h=('6c69d66c890ad8211c479b256d0b1830e661444ad8e453301dd173e7631c4281')
56
57
package() {
58
install -dm755 "${pkgdir}/usr/lib/lidarr/bin"
59
60
# License
61
install -Dm644 Lidarr/LICENSE.md "${pkgdir}/usr/share/licenses/${pkgname}"
62
rm Lidarr/LICENSE.md
63
64
# Remove Service Helpers, and Update files
65
rm Lidarr/ServiceInstall*
66
rm Lidarr/ServiceUninstall*
67
rm -rf Lidarr/Lidarr.Update
68
69
# Disable built in updater.
70
install -Dm644 package_info "${pkgdir}/usr/lib/lidarr"
71
echo "PackageVersion=${pkgver}-${pkgrel}" >> "${pkgdir}/usr/lib/lidarr/package_info"
72
73
# Copy Lidarr
74
cp -dr Lidarr/* "${pkgdir}/usr/lib/lidarr/bin"
75
76
# Systemd
77
install -Dm644 lidarr.service "${pkgdir}/usr/lib/systemd/system/lidarr.service"
78
install -Dm644 lidarr.sysusers "${pkgdir}/usr/lib/sysusers.d/lidarr.conf"
79
install -Dm644 lidarr.tmpfiles "${pkgdir}/usr/lib/tmpfiles.d/lidarr.conf"
80
}
81
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |