lsfg-vk-git
The source is a git repository from the project's own domain (git.lsfg-vk.dev), which is plausibly official; building from a non-whitelisted but project-owned host is normal for AUR packages and does not constitute a high risk.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a git repository from the project's own domain (git.lsfg-vk.dev), which is plausibly official; building from a non-whitelisted but project-owned host is normal for AUR packages and does not constitute a high risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:30
source=('git+https://git.lsfg-vk.dev/lsfg-vk.git#branch=master')
PKGBUILD
1 offending line(s) highlighted# Maintainer: Konstantin Rannev <konstantin d0t rannev at gmail d0t com>
# Contributor: Ash <xash at riseup d0t net>
# Contributor: PancakeTAS <???>
pkgname=lsfg-vk-git
pkgver=2.0.0.r0.g2333707
pkgrel=1
pkgdesc="Lossless Scaling Frame Generation on Linux"
arch=('x86_64')
url="https://lsfg-vk.dev"
license=('CC-BY-NC-ND-4.0')
depends=(
'gcc-libs'
'vulkan-icd-loader'
'libglvnd'
'qt6-base'
'qt6-declarative'
'hicolor-icon-theme'
)
makedepends=(
'clang'
'llvm'
'cmake'
'ninja'
'git'
'pkgconf'
)
provides=("${pkgname%-git}=${pkgver}")
conflicts=("${pkgname%-git}")
source=('git+https://git.lsfg-vk.dev/lsfg-vk.git#branch=master')
sha256sums=('SKIP')
pkgver() {
cd "$srcdir/${pkgname%-git}"
tag=$(git describe --tags --abbrev=0)
commits=$(git rev-list --count "${tag}..HEAD")
sha=$(git rev-parse --short=7 HEAD)
printf '%s.r%d.g%s' "${tag//-/.}" "$commits" "$sha"
}
build() {
cd "$srcdir/${pkgname%-git}"
cmake -B build -G Ninja \
-DCMAKE_INSTALL_PREFIX="${pkgdir}/usr" \
-DCMAKE_BUILD_TYPE=Release \
-DCMAKE_INTERPROCEDURAL_OPTIMIZATION=ON \
-DCMAKE_CXX_COMPILER=clang++ \
-DLSFGVK_BUILD_LAYER=ON \
-DLSFGVK_BUILD_UI=ON \
-DLSFGVK_BUILD_CLI=ON \
-DLSFGVK_MANAGED=ON \
-DLSFGVK_INSTALL_LIBRARIES=ON
cmake --build build
}
package() {
cd "$srcdir/${pkgname%-git}"
cmake --install build
install -Dm644 LICENSE.txt \
"$pkgdir/usr/share/licenses/$pkgname/LICENSE"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |
| 2026-10-12 00:18:51 | Low | 2 |
| 2026-10-11 00:26:05 | Low | 2 |
| 2026-10-10 00:11:52 | Low | 2 |
| 2026-10-09 00:05:33 | Low | 2 |
| 2026-10-08 00:28:03 | Low | 2 |
| 2026-10-07 00:21:34 | Low | 2 |
| 2026-10-06 00:13:36 | Low | 2 |
| 2026-10-05 00:08:03 | Low | 2 |
| 2026-10-04 00:18:08 | Low | 2 |
| 2026-10-03 00:23:04 | Low | 2 |
| 2026-10-02 00:00:32 | Low | 2 |
| 2026-10-01 00:02:06 | Low | 2 |
| 2026-09-30 00:20:07 | Low | 2 |
| 2026-09-29 00:07:46 | Low | 2 |
| 2026-09-28 00:28:32 | Low | 2 |