lossless-adapter-manager

maintainer corysanin · 4 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a gzipped file from a personal mirror, but the checksums are verified and the file is part of the project's own release; building from a non-whitelisted host is normal for AUR packages when checksums are provided and matched.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a gzipped file from a personal mirror, but the checksums are verified and the file is part of the project's own release; building from a non-whitelisted host is normal for AUR packages when checksums are provided and matched.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 source=("${_executablename}.gz::https://mirror.sanin.dev/aur/lossless-adapter-manager/${_executablename}.gz?pkgrel=${pkgrel}"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Cory Sanin <corysanin@outlook.com>
    
      2
    
      3_pkgname=lossless-adapter-manager
    
      4pkgname=${_pkgname}
    
      5pkgdesc="Management application for the Input Integrety Lossless Adapter Gamecube adapter."
    
      6pkgver=2.60
    
      7pkgrel=1
    
      8provides=("${_pkgname}")
    
      9conflicts=("LosslessAdapterManager2")
    
      10url="https://www.input-integrity.com/"
    
      11arch=("x86_64")
    
      12license=("freeware-proprietary")
    
      13makedepends=("gzip")
    
      14_executablename="${_pkgname}_${pkgver}"
    
      15source=("${_executablename}.gz::https://mirror.sanin.dev/aur/lossless-adapter-manager/${_executablename}.gz?pkgrel=${pkgrel}"
    
      16        "${_pkgname}.sh"
    
      17        "${_pkgname}.desktop"
    
      18        "${_pkgname}.svg")
    
      19sha1sums=('23eb7b044eebcc5701714ce10fabc51cdbd815e4'
    
      20          'ce512b6a45749d59323143273189a96db48a0565'
    
      21          '87ede3e2da870c0986f8d2fcbfdbdafa07ace299'
    
      22          '3e6ea78f4fd57d35596e64e6dbd664d00e67a465')
    
      23sha256sums=('6cac0314a36e5d7a7a36e8299adf67aaaddaa46001ce08ad7f4716320529d315'
    
      24            '8f5f426441b1a65a5f9f20700035ca72c1747e59db03d4d96ed782c94c916e0c'
    
      25            '3e212146833bbe5924f22046839d50d0e67b166c50580481ec2a980cbb4e5d78'
    
      26            'f134f6a3de72b4d7dfd518832dcd56b2afe9303b76d7e271db629784e569e84f')
    
      27options=(!strip)
    
      28
    
      29prepare() {
    
      30  gzip -df "${_executablename}.gz"
    
      31  mv "${_executablename}" "${_pkgname}"
    
      32	chmod +x "${_pkgname}"
    
      33}
    
      34
    
      35package() {
    
      36	# executable and symlink
    
      37  install -Dpm755 "${_pkgname}" "${pkgdir}/opt/${_pkgname}/${_pkgname}"
    
      38	install -dm755 "${pkgdir}/usr/bin"
    
      39  install -Dpm755 "${_pkgname}.sh" "${pkgdir}/usr/bin/${_pkgname}"
    
      40
    
      41  # Desktop file
    
      42  install -Dm644 "${_pkgname}.desktop" "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
    
      43
    
      44  # Icon
    
      45  install -dm755 "${pkgdir}/usr/share/icons/hicolor/scalable/apps"
    
      46  install -Dpm755 "${srcdir}/${_pkgname}.svg" "${pkgdir}/usr/share/icons/hicolor/scalable/apps/$_pkgname.svg"
    
      47}
    
      48

Changes since previous scan

--- PKGBUILD @ 2026-07-23 00:14
+++ PKGBUILD @ 2026-08-03 00:08
@@ -3,7 +3,7 @@
 _pkgname=lossless-adapter-manager
 pkgname=${_pkgname}
 pkgdesc="Management application for the Input Integrety Lossless Adapter Gamecube adapter."
-pkgver=2.58
+pkgver=2.60
 pkgrel=1
 provides=("${_pkgname}")
 conflicts=("LosslessAdapterManager2")
@@ -16,11 +16,11 @@
         "${_pkgname}.sh"
         "${_pkgname}.desktop"
         "${_pkgname}.svg")
-sha1sums=('473caf94e306ec0d2f94946341a0b8812bdb2102'
+sha1sums=('23eb7b044eebcc5701714ce10fabc51cdbd815e4'
           'ce512b6a45749d59323143273189a96db48a0565'
           '87ede3e2da870c0986f8d2fcbfdbdafa07ace299'
           '3e6ea78f4fd57d35596e64e6dbd664d00e67a465')
-sha256sums=('fed0ef32fe047d0a9f76f03e18aadfb776f8db2ca6045063982f8825425120e8'
+sha256sums=('6cac0314a36e5d7a7a36e8299adf67aaaddaa46001ce08ad7f4716320529d315'
             '8f5f426441b1a65a5f9f20700035ca72c1747e59db03d4d96ed782c94c916e0c'
             '3e212146833bbe5924f22046839d50d0e67b166c50580481ec2a980cbb4e5d78'
             'f134f6a3de72b4d7dfd518832dcd56b2afe9303b76d7e271db629784e569e84f')

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 09:22:54	MEDIUM	1
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 23:55:59	MEDIUM	1
2026-07-17 17:55:33	MEDIUM	1