litecoin-qt

maintainer a821 · 85 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The source is a verifiable upstream tarball from the project's official domain (download.litecoin.org), which is normal for AUR packages; the host is not whitelisted but is legitimate and expected for this software.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a verifiable upstream tarball from the project's official domain (download.litecoin.org), which is normal for AUR packages; the host is not whitelisted but is legitimate and expected for this software.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 source=("https://download.litecoin.org/litecoin-${pkgver}/src/litecoin-${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Contributor: mrxx <mrxx at cyberhome dot at>
    
      2# Contributor: Radek Podgorny <radek at podgorny dot cz>
    
      3# Contributor: Loïc Guitaut <flink at belfalas dot eu>
    
      4# Contributor: Nicolas Doualot <packages at slubman dot info>
    
      5
    
      6pkgname=litecoin-qt
    
      7pkgver=0.21.5.6
    
      8pkgrel=1
    
      9arch=('x86_64')
    
      10url="https://www.litecoin.org/"
    
      11license=('MIT')
    
      12pkgdesc="Peer-to-peer network based digital currency (Qt)"
    
      13depends=('boost-libs' 'db4.8' 'fmt' 'libevent' 'miniupnpc' 'openssl' 'qrencode' 'qt5-base' 'sqlite' 'zeromq')
    
      14makedepends=('boost' 'qt5-tools')
    
      15provides=('litecoin')
    
      16conflicts=('litecoin')
    
      17source=("https://download.litecoin.org/litecoin-${pkgver}/src/litecoin-${pkgver}.tar.gz"
    
      18        "0001-upnp-add-compatibility-for-miniupnpc-2.2.8.patch"
    
      19        "0001-fix-boost-1.84-filesystem-deprecations.patch"
    
      20        "0003-Fix-_FORTIFY_SOURCE-flag.patch"
    
      21        "0004-remove-boost-system.patch"
    
      22        "$pkgname.desktop"
    
      23        "litecoin128.png")
    
      24sha256sums=('cebee52747bdd827d4716e6528a5ef76a57d4d73c4df78ecfb6a45eaf819972f'
    
      25            '8f4354356b66f92b52a85d91c19d576e7cb637957380c052404794a70d9f8383'
    
      26            'f9de747281f6003739d9ac736684771b061e9d63f2ea90404c08187595e57619'
    
      27            '0ca550e3967ee880f8e24b77fc58ff22451f2966d056b4554184104c3ca5dbb5'
    
      28            '7d427d1ae3f0f8d848e7baf4210448bdede90b83c3ca6948f48eb4eb115b4db5'
    
      29            'cfc53dc9028745358235698ddd562d3e6b4a3ea9f896f5efc1aa8cd81f595559'
    
      30            '79fb205581c1e6df9758b56e2b527350f23124677036bc68176d088c4a28af8d')
    
      31validpgpkeys=(
    
      32  'D35621D53A1CC6A3456758D03620E9D387E55666'  # David Burkett
    
      33)
    
      34
    
      35prepare() {
    
      36  patch -d litecoin-${pkgver} -p1 < 0001-upnp-add-compatibility-for-miniupnpc-2.2.8.patch
    
      37  patch -d litecoin-${pkgver} -p1 < 0001-fix-boost-1.84-filesystem-deprecations.patch
    
      38  patch -d litecoin-${pkgver} -p1 < 0003-Fix-_FORTIFY_SOURCE-flag.patch
    
      39  patch -d litecoin-${pkgver} -p1 < 0004-remove-boost-system.patch
    
      40}
    
      41
    
      42build() {
    
      43  cd "litecoin-$pkgver"
    
      44  ./autogen.sh
    
      45  ./configure --prefix=/usr --with-gui=qt5
    
      46  make
    
      47}
    
      48
    
      49package() {
    
      50  install -Dm644 litecoin-qt.desktop "$pkgdir"/usr/share/applications/litecoin.desktop
    
      51  install -Dm644 litecoin128.png "$pkgdir"/usr/share/pixmaps/litecoin128.png
    
      52
    
      53  cd "litecoin-$pkgver"
    
      54  make DESTDIR="$pkgdir" install
    
      55  install -Dm644 COPYING "$pkgdir/usr/share/licenses/$pkgname/COPYING"
    
      56}
    
      57

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-08-18 00:03
@@ -4,7 +4,7 @@
 # Contributor: Nicolas Doualot <packages at slubman dot info>
 
 pkgname=litecoin-qt
-pkgver=0.21.5.5
+pkgver=0.21.5.6
 pkgrel=1
 arch=('x86_64')
 url="https://www.litecoin.org/"
@@ -21,7 +21,7 @@
         "0004-remove-boost-system.patch"
         "$pkgname.desktop"
         "litecoin128.png")
-sha256sums=('7d0754bc595a872644771c919ed65bc735a1c879b6830b842bb87eee4eaeb88e'
+sha256sums=('cebee52747bdd827d4716e6528a5ef76a57d4d73c4df78ecfb6a45eaf819972f'
             '8f4354356b66f92b52a85d91c19d576e7cb637957380c052404794a70d9f8383'
             'f9de747281f6003739d9ac736684771b061e9d63f2ea90404c08187595e57619'
             '0ca550e3967ee880f8e24b77fc58ff22451f2966d056b4554184104c3ca5dbb5'

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 00:03:41	LOW	2
2026-08-13 00:17:07	LOW	2
2026-08-12 00:27:08	LOW	2
2026-08-11 13:21:13	MEDIUM	1
2026-06-19 19:07:35	CLEAN	2
2026-06-18 16:11:54	MEDIUM	1