lsfg-vk-bin

MEDIUM

maintainer xAsh 9 votes scanned 2026-09-05 20:01:32.631454

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:21 source=("https://builds.lsfg-vk.dev/lsfg-vk-${pkgver}.tar.xz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Ash <xash at riseup d0t net>
    
      2# Contributor: Konstantin Rannev <konstantin d0t rannev at gmail d0t com>
    
      3
    
      4pkgname=lsfg-vk-bin
    
      5pkgver=2.0.0
    
      6pkgrel=1
    
      7pkgdesc="Lossless Scaling Frame Generation on Linux"
    
      8arch=("x86_64")
    
      9url="https://lsfg-vk.dev/"
    
      10license=('CC-BY-NC-ND-4.0')
    
      11depends=(
    
      12    'vulkan-icd-loader'
    
      13    'gcc-libs'
    
      14    'gtk4'
    
      15    'libadwaita'
    
      16    'hicolor-icon-theme'
    
      17)
    
      18makedepends=()
    
      19provides=("${pkgname%-bin}=$pkgver")
    
      20conflicts=("${pkgname%-bin}")
    
      21source=("https://builds.lsfg-vk.dev/lsfg-vk-${pkgver}.tar.xz"
    
      22        "LICENSE")
    
      23sha256sums=('d8378b45d378150ea9aba803a0ba855d8ce91ad9b3366ee0eb2036b06b08380c'
    
      24            '38762e3777f4ec00a6f769062a7c3f704fb78ce08303ecff88558da4c49cf9ea')
    
      25install=lsfg-vk.install
    
      26noextract=("lsfg-vk-${pkgver}.tar.xz")
    
      27options=(!strip)
    
      28
    
      29package() {
    
      30    cd "$srcdir"
    
      31
    
      32    # unpack the downloaded archive straight into pkgdir
    
      33    install -d "$pkgdir/usr"
    
      34    tar -xpf "lsfg-vk-${pkgver}.tar.xz" --no-same-owner --exclude='.PKGINFO' -C "$pkgdir/usr"
    
      35
    
      36    # license
    
      37    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      38}
    
      39

Changes since previous scan

--- PKGBUILD @ 2026-06-18 16:11
+++ PKGBUILD @ 2026-09-05 20:01
@@ -2,12 +2,12 @@
 # Contributor: Konstantin Rannev <konstantin d0t rannev at gmail d0t com>
 
 pkgname=lsfg-vk-bin
-pkgver=1.0.0
-pkgrel=4
+pkgver=2.0.0
+pkgrel=1
 pkgdesc="Lossless Scaling Frame Generation on Linux"
 arch=("x86_64")
-url="https://github.com/PancakeTAS/lsfg-vk"
-license=('GPL-3.0-or-later')
+url="https://lsfg-vk.dev/"
+license=('CC-BY-NC-ND-4.0')
 depends=(
     'vulkan-icd-loader'
     'gcc-libs'
@@ -18,19 +18,20 @@
 makedepends=()
 provides=("${pkgname%-bin}=$pkgver")
 conflicts=("${pkgname%-bin}")
-source=("https://github.com/PancakeTAS/lsfg-vk/releases/download/v${pkgver}/lsfg-vk-${pkgver}.$CARCH.tar.zst"
+source=("https://builds.lsfg-vk.dev/lsfg-vk-${pkgver}.tar.xz"
         "LICENSE")
-sha256sums=('7e31d6f39da271fbc50ae8a1b092cb874bc6664765d5b7359d38970057f5fcff'
-            'cc5470feed66192387f06ae93aed0bd4fefae5a5fd7c1e54a4acf4ea64f1028b')
+sha256sums=('d8378b45d378150ea9aba803a0ba855d8ce91ad9b3366ee0eb2036b06b08380c'
+            '38762e3777f4ec00a6f769062a7c3f704fb78ce08303ecff88558da4c49cf9ea')
 install=lsfg-vk.install
-noextract=("lsfg-vk-${pkgver}.$CARCH.tar.zst")
+noextract=("lsfg-vk-${pkgver}.tar.xz")
 options=(!strip)
 
 package() {
     cd "$srcdir"
 
     # unpack the downloaded archive straight into pkgdir
-    tar -xpf "lsfg-vk-${pkgver}.$CARCH.tar.zst" --no-same-owner --exclude='.PKGINFO' -C "$pkgdir"
+    install -d "$pkgdir/usr"
+    tar -xpf "lsfg-vk-${pkgver}.tar.xz" --no-same-owner --exclude='.PKGINFO' -C "$pkgdir/usr"
 
     # license
     install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-05 20:01:32	Medium	1
2026-06-18 16:11:54	Clean	0