lossless-adapter-manager

LOW
maintainer corysanin 4 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The source is a gzipped file from a personal mirror, but the checksums are verified and the file is part of the project's own release; building from a non-whitelisted host is normal for AUR packages when checksums are provided and matched.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a gzipped file from a personal mirror, but the checksums are verified and the file is part of the project's own release; building from a non-whitelisted host is normal for AUR packages when checksums are provided and matched.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:15 source=("${_executablename}.gz::https://mirror.sanin.dev/aur/lossless-adapter-manager/${_executablename}.gz?pkgrel=${pkgrel}"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Cory Sanin <corysanin@outlook.com>
2
3_pkgname=lossless-adapter-manager
4pkgname=${_pkgname}
5pkgdesc="Management application for the Input Integrety Lossless Adapter Gamecube adapter."
6pkgver=2.60
7pkgrel=1
8provides=("${_pkgname}")
9conflicts=("LosslessAdapterManager2")
10url="https://www.input-integrity.com/"
11arch=("x86_64")
12license=("freeware-proprietary")
13makedepends=("gzip")
14_executablename="${_pkgname}_${pkgver}"
15source=("${_executablename}.gz::https://mirror.sanin.dev/aur/lossless-adapter-manager/${_executablename}.gz?pkgrel=${pkgrel}"
16 "${_pkgname}.sh"
17 "${_pkgname}.desktop"
18 "${_pkgname}.svg")
19sha1sums=('23eb7b044eebcc5701714ce10fabc51cdbd815e4'
20 'ce512b6a45749d59323143273189a96db48a0565'
21 '87ede3e2da870c0986f8d2fcbfdbdafa07ace299'
22 '3e6ea78f4fd57d35596e64e6dbd664d00e67a465')
23sha256sums=('6cac0314a36e5d7a7a36e8299adf67aaaddaa46001ce08ad7f4716320529d315'
24 '8f5f426441b1a65a5f9f20700035ca72c1747e59db03d4d96ed782c94c916e0c'
25 '3e212146833bbe5924f22046839d50d0e67b166c50580481ec2a980cbb4e5d78'
26 'f134f6a3de72b4d7dfd518832dcd56b2afe9303b76d7e271db629784e569e84f')
27options=(!strip)
28
29prepare() {
30 gzip -df "${_executablename}.gz"
31 mv "${_executablename}" "${_pkgname}"
32 chmod +x "${_pkgname}"
33}
34
35package() {
36 # executable and symlink
37 install -Dpm755 "${_pkgname}" "${pkgdir}/opt/${_pkgname}/${_pkgname}"
38 install -dm755 "${pkgdir}/usr/bin"
39 install -Dpm755 "${_pkgname}.sh" "${pkgdir}/usr/bin/${_pkgname}"
40
41 # Desktop file
42 install -Dm644 "${_pkgname}.desktop" "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
43
44 # Icon
45 install -dm755 "${pkgdir}/usr/share/icons/hicolor/scalable/apps"
46 install -Dpm755 "${srcdir}/${_pkgname}.svg" "${pkgdir}/usr/share/icons/hicolor/scalable/apps/$_pkgname.svg"
47}
48

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion