litecoin-qt

LOW

maintainer a821 85 votes scanned 2026-10-02 00:00:32.890515

View on AUR

Why flagged

The source is a tarball from the project's official domain (download.litecoin.org), which is plausibly the project's own release infrastructure; building from official project sources is normal AUR packaging, even if the host is not on a whitelist.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official domain (download.litecoin.org), which is plausibly the project's own release infrastructure; building from official project sources is normal AUR packaging, even if the host is not on a whitelist.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 source=("https://download.litecoin.org/litecoin-${pkgver}/src/litecoin-${pkgver}.tar.gz"{,.asc}

PKGBUILD

1 offending line(s) highlighted

      1# Contributor: mrxx <mrxx at cyberhome dot at>
    
      2# Contributor: Radek Podgorny <radek at podgorny dot cz>
    
      3# Contributor: Loïc Guitaut <flink at belfalas dot eu>
    
      4# Contributor: Nicolas Doualot <packages at slubman dot info>
    
      5
    
      6pkgname=litecoin-qt
    
      7pkgver=0.21.5.8
    
      8pkgrel=1
    
      9arch=('x86_64')
    
      10url="https://www.litecoin.org/"
    
      11license=('MIT')
    
      12pkgdesc="Peer-to-peer network based digital currency (Qt)"
    
      13depends=('boost-libs' 'db4.8' 'fmt' 'libevent' 'miniupnpc' 'openssl' 'qrencode' 'qt5-base' 'sqlite' 'zeromq')
    
      14makedepends=('boost' 'qt5-tools')
    
      15provides=('litecoin')
    
      16conflicts=('litecoin')
    
      17source=("https://download.litecoin.org/litecoin-${pkgver}/src/litecoin-${pkgver}.tar.gz"{,.asc}
    
      18        "0001-upnp-add-compatibility-for-miniupnpc-2.2.8.patch"
    
      19        "0001-fix-boost-1.84-filesystem-deprecations.patch"
    
      20        "0003-Fix-_FORTIFY_SOURCE-flag.patch"
    
      21        "0004-remove-boost-system.patch"
    
      22        "$pkgname.desktop"
    
      23        "litecoin128.png")
    
      24sha256sums=('5c38653b1d45fd2d3975634ce9d44161512ce7afa6586424f707bdead14a772b'
    
      25            'SKIP'
    
      26            '8f4354356b66f92b52a85d91c19d576e7cb637957380c052404794a70d9f8383'
    
      27            'f9de747281f6003739d9ac736684771b061e9d63f2ea90404c08187595e57619'
    
      28            '0ca550e3967ee880f8e24b77fc58ff22451f2966d056b4554184104c3ca5dbb5'
    
      29            '7d427d1ae3f0f8d848e7baf4210448bdede90b83c3ca6948f48eb4eb115b4db5'
    
      30            'cfc53dc9028745358235698ddd562d3e6b4a3ea9f896f5efc1aa8cd81f595559'
    
      31            '79fb205581c1e6df9758b56e2b527350f23124677036bc68176d088c4a28af8d')
    
      32validpgpkeys=(
    
      33  'D35621D53A1CC6A3456758D03620E9D387E55666'  # David Burkett
    
      34)
    
      35
    
      36prepare() {
    
      37  patch -d litecoin-${pkgver} -p1 < 0001-upnp-add-compatibility-for-miniupnpc-2.2.8.patch
    
      38  patch -d litecoin-${pkgver} -p1 < 0001-fix-boost-1.84-filesystem-deprecations.patch
    
      39  patch -d litecoin-${pkgver} -p1 < 0003-Fix-_FORTIFY_SOURCE-flag.patch
    
      40  patch -d litecoin-${pkgver} -p1 < 0004-remove-boost-system.patch
    
      41}
    
      42
    
      43build() {
    
      44  cd "litecoin-$pkgver"
    
      45  ./autogen.sh
    
      46  ./configure --prefix=/usr --with-gui=qt5
    
      47  make
    
      48}
    
      49
    
      50package() {
    
      51  install -Dm644 litecoin-qt.desktop "$pkgdir"/usr/share/applications/litecoin.desktop
    
      52  install -Dm644 litecoin128.png "$pkgdir"/usr/share/pixmaps/litecoin128.png
    
      53
    
      54  cd "litecoin-$pkgver"
    
      55  make DESTDIR="$pkgdir" install
    
      56  install -Dm644 COPYING "$pkgdir/usr/share/licenses/$pkgname/COPYING"
    
      57}
    
      58

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2
2026-09-27 00:07:07	Low	2
2026-09-26 00:12:15	Low	2
2026-09-25 00:03:36	Low	2
2026-09-24 00:24:14	Low	2
2026-09-23 00:28:13	Low	2
2026-09-22 00:15:14	Low	2
2026-09-21 00:26:32	Low	2
2026-09-20 00:25:31	Low	2
2026-09-19 00:25:36	Low	2
2026-09-18 00:17:11	Low	2
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2