litecoin-daemon

LOW

maintainer a821 6 votes scanned 2026-10-02 00:00:32.890515

View on AUR

Why flagged

The source is a verifiable upstream tarball from the project's official domain (download.litecoin.org), which is plausibly legitimate despite not being on a whitelist; the package builds from source and installs only the declared binaries and documentation.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a verifiable upstream tarball from the project's official domain (download.litecoin.org), which is plausibly legitimate despite not being on a whitelist; the package builds from source and installs only the declared binaries and documentation.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source=("https://download.litecoin.org/litecoin-${pkgver}/src/litecoin-${pkgver}.tar.gz"{,.asc}

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: a821
    
      2
    
      3pkgname=litecoin-daemon
    
      4pkgver=0.21.5.8
    
      5pkgrel=1
    
      6arch=('x86_64')
    
      7url="https://www.litecoin.org/"
    
      8license=('MIT')
    
      9pkgdesc="Peer-to-peer digital currency (includes litecoind and litecoin-cli)"
    
      10depends=('boost-libs' 'db4.8' 'fmt' 'libevent' 'miniupnpc' 'openssl' 'sqlite' 'zeromq')
    
      11makedepends=('boost')
    
      12conflicts=('litecoin-qt' 'litecoin-bin')
    
      13source=("https://download.litecoin.org/litecoin-${pkgver}/src/litecoin-${pkgver}.tar.gz"{,.asc}
    
      14    0001-fix-boost-1.84-filesystem-deprecations.patch
    
      15    0001-upnp-add-compatibility-for-miniupnpc-2.2.8.patch
    
      16    0003-Fix-_FORTIFY_SOURCE-flag.patch
    
      17    0004-remove-boost-system.patch
    
      18)
    
      19sha256sums=('5c38653b1d45fd2d3975634ce9d44161512ce7afa6586424f707bdead14a772b'
    
      20            'SKIP'
    
      21            'f9de747281f6003739d9ac736684771b061e9d63f2ea90404c08187595e57619'
    
      22            '8f4354356b66f92b52a85d91c19d576e7cb637957380c052404794a70d9f8383'
    
      23            '0ca550e3967ee880f8e24b77fc58ff22451f2966d056b4554184104c3ca5dbb5'
    
      24            '7d427d1ae3f0f8d848e7baf4210448bdede90b83c3ca6948f48eb4eb115b4db5')
    
      25validpgpkeys=(
    
      26  'D35621D53A1CC6A3456758D03620E9D387E55666'  # David Burkett
    
      27)
    
      28
    
      29prepare() {
    
      30    patch -d litecoin-${pkgver} -p1 < 0001-upnp-add-compatibility-for-miniupnpc-2.2.8.patch
    
      31    patch -d litecoin-${pkgver} -p1 < 0001-fix-boost-1.84-filesystem-deprecations.patch
    
      32    patch -d litecoin-${pkgver} -p1 < 0003-Fix-_FORTIFY_SOURCE-flag.patch
    
      33    patch -d litecoin-${pkgver} -p1 < 0004-remove-boost-system.patch
    
      34}
    
      35
    
      36build() {
    
      37    cd litecoin-${pkgver}
    
      38    ./autogen.sh
    
      39    ./configure --prefix=/usr --without-gui
    
      40    make
    
      41}
    
      42
    
      43package() {
    
      44    cd litecoin-${pkgver}
    
      45    # make DESTDIR="${pkgdir}" install # for standard install
    
      46    install -Dm755 -t "$pkgdir/usr/bin" src/litecoin{d,-cli}
    
      47    install -Dm644 -t "$pkgdir/usr/share/man/man1" doc/man/litecoin{d,-cli}.1
    
      48    install -Dm644 COPYING "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      49}
    
      50
    
      51# vim: set ts=4 sw=4 et:
    
      52

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2
2026-09-27 00:07:07	Low	2
2026-09-26 00:12:15	Low	2
2026-09-25 00:03:36	Low	2
2026-09-24 00:24:14	Low	2
2026-09-23 00:28:13	Low	2
2026-09-22 00:15:14	Low	2
2026-09-21 00:26:32	Low	2
2026-09-20 00:25:31	Low	2
2026-09-19 00:25:36	Low	2
2026-09-18 00:17:11	Low	2
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2