lnd

MEDIUM

maintainer pizzaman 7 votes scanned 2026-09-06 11:10:51.811965

View on AUR

Why flagged

A non-pip/npm package manager (pipx, uv, poetry, cargo install, go install, gem, conda…) fetches and builds an external package at build time, outside source=() and makepkg's checksums.

Triggered rules

Medium External install via pipx/uv/poetry/cargo/go/gem alt_pkg_manager_install

A non-pip/npm package manager (pipx, uv, poetry, cargo install, go install, gem, conda…) fetches and builds an external package at build time, outside source=() and makepkg's checksums.

PKGBUILD:33 GO111MODULE=on go install -v -tags experimental,autopilotrpc,signrpc,walletrpc,chainrpc,invoicesrpc,routerrpc,watchtowerrpc,neutrinorpc,monitoring,peersrpc,kvdb_postgres,kvdb_sqlite,kvdb_etcd ./...

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Luis Aranguren <pizzaman@hotmail.com>
    
      2# Contributor: David Parrish <daveparrish@tutanota.com>
    
      3
    
      4pkgname='lnd'
    
      5pkgver=0.21.3_beta
    
      6_pkgver="${pkgver//_/-}"
    
      7pkgrel=1
    
      8pkgdesc='The Lightning Network Daemon, for secure off-chain bitcoin transactions.'
    
      9arch=('i686' 'x86_64' 'aarch64')
    
      10url='https://github.com/lightningnetwork/lnd'
    
      11license=('MIT')
    
      12depends=('glibc')
    
      13makedepends=('go')
    
      14provides=('lnd' 'lncli')
    
      15conflicts=('lnd-git')
    
      16source=("$pkgname-$pkgver.tar.gz::https://github.com/lightningnetwork/lnd/archive/v${_pkgver}.tar.gz")
    
      17sha512sums=('13244f58f182a00cb7c06dba7fe3edf5358b847dda62d1d5ad550185a676084f542b106f8ec3e68bcc2120708d0c992d0fb36e6ab8f930504547143acbc94dc9')
    
      18
    
      19prepare() {
    
      20  cd "$pkgname-$_pkgver"
    
      21  mkdir -p build/
    
      22}
    
      23
    
      24build() {
    
      25  # Use suggested GOFLAGS for Arch Linux.
    
      26  # https://wiki.archlinux.org/title/Go_package_guidelines
    
      27  cd "$pkgname-$_pkgver"
    
      28  export CGO_CPPFLAGS="${CPPFLAGS}"
    
      29  export CGO_CFLAGS="${CFLAGS}"
    
      30  export CGO_CXXFLAGS="${CXXFLAGS}"
    
      31  export CGO_LDFLAGS="${LDFLAGS}"
    
      32  export GOFLAGS="-buildmode=pie -trimpath -ldflags=-linkmode=external -mod=readonly -modcacherw"
    
      33  GO111MODULE=on go install -v -tags experimental,autopilotrpc,signrpc,walletrpc,chainrpc,invoicesrpc,routerrpc,watchtowerrpc,neutrinorpc,monitoring,peersrpc,kvdb_postgres,kvdb_sqlite,kvdb_etcd ./...
    
      34  go build -o build ./cmd/...
    
      35}
    
      36
    
      37package() {
    
      38  cd "$pkgname-$_pkgver"
    
      39  for _bin in lnd lncli; do
    
      40   install -Dm755 build/$_bin -t "${pkgdir:?}/usr/bin";
    
      41  done
    
      42  install -Dm644 "LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      43  install -Dm644 contrib/lncli.bash-completion "$pkgdir/usr/share/bash-completion/completions/lncli"
    
      44  install -Dm644 contrib/init/lnd.service "$pkgdir/usr/lib/systemd/system/lnd.service"
    
      45}
    
      46

Changes since previous scan

--- PKGBUILD @ 2026-07-18 00:14
+++ PKGBUILD @ 2026-09-06 11:10
@@ -2,7 +2,7 @@
 # Contributor: David Parrish <daveparrish@tutanota.com>
 
 pkgname='lnd'
-pkgver=0.21.1_beta
+pkgver=0.21.3_beta
 _pkgver="${pkgver//_/-}"
 pkgrel=1
 pkgdesc='The Lightning Network Daemon, for secure off-chain bitcoin transactions.'
@@ -14,7 +14,7 @@
 provides=('lnd' 'lncli')
 conflicts=('lnd-git')
 source=("$pkgname-$pkgver.tar.gz::https://github.com/lightningnetwork/lnd/archive/v${_pkgver}.tar.gz")
-sha512sums=('a7c33f58345a216b7133e9b32aa7658c2adcefdf6242d162e24ae07eeebfd8e835b84ee52fe50ed7bf1f65385fbed38f31ba73ea7870e92ede4b8665ee1c6e4b')
+sha512sums=('13244f58f182a00cb7c06dba7fe3edf5358b847dda62d1d5ad550185a676084f542b106f8ec3e68bcc2120708d0c992d0fb36e6ab8f930504547143acbc94dc9')
 
 prepare() {
   cd "$pkgname-$_pkgver"
@@ -30,7 +30,7 @@
   export CGO_CXXFLAGS="${CXXFLAGS}"
   export CGO_LDFLAGS="${LDFLAGS}"
   export GOFLAGS="-buildmode=pie -trimpath -ldflags=-linkmode=external -mod=readonly -modcacherw"
-  GO111MODULE=on go install -v -tags experimental,autopilotrpc,signrpc,walletrpc,chainrpc,invoicesrpc,routerrpc,watchtowerrpc,monitoring,peersrpc,kvdb_postgres,kvdb_sqlite,kvdb_etcd ./...
+  GO111MODULE=on go install -v -tags experimental,autopilotrpc,signrpc,walletrpc,chainrpc,invoicesrpc,routerrpc,watchtowerrpc,neutrinorpc,monitoring,peersrpc,kvdb_postgres,kvdb_sqlite,kvdb_etcd ./...
   go build -o build ./cmd/...
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-06 11:10:51	Medium	1
2026-07-18 00:14:48	Clean	2
2026-07-17 11:54:34	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 17:53:10	Clean	2
2026-06-18 16:11:54	Medium	1