lmao

maintainer fordprefect · 5 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is hosted on the author's personal domain, which is not on the standard whitelist, but the package builds from source and the checksum is verified; the worst case of a swapped source would be malicious code compilation, but the host is plausibly the project's official source given the context.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is hosted on the author's personal domain, which is not on the standard whitelist, but the package builds from source and the checksum is verified; the worst case of a swapped source would be malicious code compilation, but the host is plausibly the project's official source given the context.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:11 source=("https://www.matthias-ernst.eu/malbolge/lmao.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: fordprefect <fordprefect@dukun.de>
    
      2pkgname=lmao
    
      3pkgver=0.5.4
    
      4pkgrel=1
    
      5pkgdesc="Low-level Malbolge Assembler, Ooh! is a tool that builds Malbolge programs from HeLL"
    
      6url="https://www.matthias-ernst.eu/malbolgeassembler.html"
    
      7arch=('x86_64' 'i686')
    
      8license=('GPL3')
    
      9depends=('glibc')
    
      10makedepends=('bison' 'flex' 'make' 'gcc' 'doxygen')
    
      11source=("https://www.matthias-ernst.eu/malbolge/lmao.tar.gz")
    
      12md5sums=('05314007cff89a68ff86467ed210f8a8')
    
      13 
    
      14build() {
    
      15    cd "${srcdir}/${pkgname}"
    
      16    make all
    
      17}
    
      18  
    
      19package() {
    
      20    install -Dm755 ${srcdir}/lmao/bin/lmao ${pkgdir}/usr/bin/lmao
    
      21    install -Dm644 ${srcdir}/lmao/example_cat_halt_on_eof.hell ${pkgdir}/usr/share/lmao/example_cat_halt_on_eof.hell
    
      22    install -Dm644 ${srcdir}/lmao/example_hello_world.hell ${pkgdir}/usr/share/lmao/example_hello_world.hell
    
      23    install -Dm644 ${srcdir}/lmao/example_simple_cat.hell ${pkgdir}/usr/share/lmao/example_simple_cat.hell
    
      24}
    
      25

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2