lomoco
maintainer SammysHP
· 4 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The source URLs point to official Debian and Ubuntu project infrastructure, which are plausible and trustworthy sources for the package; the non-whitelisted host is a redirector for Debian's official repositories, and the sources are verified with matching checksums.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URLs point to official Debian and Ubuntu project infrastructure, which are plausible and trustworthy sources for the package; the non-whitelisted host is a redirector for Debian's official repositories, and the sources are verified with matching checksums.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:15
source=(http://http.debian.net/debian/pool/main/l/lomoco/lomoco_$pkgver.0.orig.tar.gz
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Sven Karsten Greiner <sven@sammyshp.de>
2
# Contributor: Jeff Mickey <j@codemac.net>
3
# Contributor: Shadowhand <woody.gilk@gmail.com>
4
5
pkgname=lomoco
6
pkgver=1.0
7
pkgrel=12
8
url="https://launchpad.net/ubuntu/+source/lomoco"
9
pkgdesc="Logitech USB mouse configuration program"
10
license=('GPL')
11
depends=('libusb-compat')
12
replaces=('lmctl')
13
arch=('x86_64')
14
backup=(etc/udev/lomoco_mouse.conf)
15
source=(http://http.debian.net/debian/pool/main/l/lomoco/lomoco_$pkgver.0.orig.tar.gz
16
http://http.debian.net/debian/pool/main/l/lomoco/lomoco_$pkgver.0-4.debian.tar.xz
17
"lomoco_mxair.patch::https://bugs.archlinux.org/attachments/36657/10920/mxair.patch"
18
lomoco_mouse.conf
19
lomoco.sh)
20
md5sums=('f5197d0a3ee81229c3eecc1e03f7b08d'
21
'ac869dbf7792ef65df3849ab6f130ba1'
22
'd0390dfcadae6e54a4af3e6227d24201'
23
'182b10a7e4a1828a93c1d55ef7f81b97'
24
'bc92f661641265b33b27895ef24028fd')
25
26
prepare() {
27
cd "$srcdir"/${pkgname}-${pkgver}
28
for i in $(cat ../debian/patches/series); do
29
patch -p1 <../debian/patches/$i
30
done
31
patch -p0 <"$srcdir"/lomoco_mxair.patch
32
}
33
34
build() {
35
cd "$srcdir"/${pkgname}-${pkgver}
36
./autogen.sh --prefix=/usr --mandir=/usr/share/man
37
make
38
make udev-rules
39
}
40
41
package() {
42
cd "$srcdir"/${pkgname}-${pkgver}
43
make DESTDIR="$pkgdir" install
44
45
# Fix and install udev rules and helpers
46
sed -i 's|RUN+="udev.lomoco"|RUN+="lomoco.sh"|g' udev/lomoco.rules
47
sed -i 's|SYSFS|ATTR|' udev/lomoco.rules
48
install -D -m 644 udev/lomoco.rules "$pkgdir"/usr/lib/udev/rules.d/80-lomoco.rules
49
install -D -m 755 ../lomoco.sh "$pkgdir"/usr/lib/udev/lomoco.sh
50
install -D -m 644 ../lomoco_mouse.conf "$pkgdir"/etc/udev/lomoco_mouse.conf
51
}
52
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |