lsfg-vk-git
LOW
maintainer Pahheb
15 votes
scanned 2026-08-28 00:07:31.237544
Why flagged
The source is a git clone from the project's own domain (git.lsfg-vk.dev), which is plausibly official; building from project-owned git is normal for AUR packages, even on non-whitelisted hosts, and poses low risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a git clone from the project's own domain (git.lsfg-vk.dev), which is plausibly official; building from project-owned git is normal for AUR packages, even on non-whitelisted hosts, and poses low risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:30
source=('git+https://git.lsfg-vk.dev/lsfg-vk.git#branch=master')
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Konstantin Rannev <konstantin d0t rannev at gmail d0t com>
2
# Contributor: Ash <xash at riseup d0t net>
3
# Contributor: PancakeTAS <???>
4
5
pkgname=lsfg-vk-git
6
pkgver=2.0.0.rc1.r0.gf715073
7
pkgrel=1
8
pkgdesc="Lossless Scaling Frame Generation on Linux"
9
arch=('x86_64')
10
url="https://lsfg-vk.dev"
11
license=('CC-BY-NC-ND-4.0')
12
depends=(
13
'gcc-libs'
14
'vulkan-icd-loader'
15
'libglvnd'
16
'qt6-base'
17
'qt6-declarative'
18
'hicolor-icon-theme'
19
)
20
makedepends=(
21
'clang'
22
'llvm'
23
'cmake'
24
'ninja'
25
'git'
26
'pkgconf'
27
)
28
provides=("${pkgname%-git}=${pkgver}")
29
conflicts=("${pkgname%-git}")
30
source=('git+https://git.lsfg-vk.dev/lsfg-vk.git#branch=master')
31
sha256sums=('SKIP')
32
33
pkgver() {
34
cd "$srcdir/${pkgname%-git}"
35
36
tag=$(git describe --tags --abbrev=0)
37
commits=$(git rev-list --count "${tag}..HEAD")
38
sha=$(git rev-parse --short=7 HEAD)
39
printf '%s.r%d.g%s' "${tag//-/.}" "$commits" "$sha"
40
}
41
42
build() {
43
cd "$srcdir/${pkgname%-git}"
44
45
cmake -B build -G Ninja \
46
-DCMAKE_INSTALL_PREFIX="${pkgdir}/usr" \
47
-DCMAKE_BUILD_TYPE=Release \
48
-DCMAKE_INTERPROCEDURAL_OPTIMIZATION=ON \
49
-DCMAKE_CXX_COMPILER=clang++ \
50
-DLSFGVK_BUILD_LAYER=ON \
51
-DLSFGVK_BUILD_UI=ON \
52
-DLSFGVK_BUILD_CLI=ON \
53
-DLSFGVK_MANAGED=ON \
54
-DLSFGVK_INSTALL_LIBRARIES=ON
55
cmake --build build
56
}
57
58
package() {
59
cd "$srcdir/${pkgname%-git}"
60
61
cmake --install build
62
63
install -Dm644 LICENSE.txt \
64
"$pkgdir/usr/share/licenses/$pkgname/LICENSE"
65
}
66
Changes since previous scan
--- PKGBUILD @ 2026-06-18 16:11+++ PKGBUILD @ 2026-08-28 00:07@@ -3,12 +3,12 @@ # Contributor: PancakeTAS <???> pkgname=lsfg-vk-git-pkgver=2.0.0.dev.r15.14904b9+pkgver=2.0.0.rc1.r0.gf715073 pkgrel=1 pkgdesc="Lossless Scaling Frame Generation on Linux" arch=('x86_64')-url="https://github.com/PancakeTAS/lsfg-vk"-license=('GPL-3.0-or-later')+url="https://lsfg-vk.dev"+license=('CC-BY-NC-ND-4.0') depends=( 'gcc-libs' 'vulkan-icd-loader'@@ -24,26 +24,19 @@ 'ninja' 'git' 'pkgconf'- 'vulkan-headers' ) provides=("${pkgname%-git}=${pkgver}") conflicts=("${pkgname%-git}")-source=('git+https://github.com/PancakeTAS/lsfg-vk#branch=develop')+source=('git+https://git.lsfg-vk.dev/lsfg-vk.git#branch=master') sha256sums=('SKIP')-install=lsfg-vk.install pkgver() { cd "$srcdir/${pkgname%-git}" - # NOTE: this moves the tag to the first commit with 2.0.0-dev- git tag -d "v2.0.0-dev" 2>/dev/null >/dev/null- git -c user.name='PancakeTAS' \- -c user.email='pancake@mgnet.work' \- tag "v2.0.0-dev" '2a13914b55e7ce71f5522513fde277a2affb5a1f' \- -m "original 2.0.0-dev tag location" \- 2>/dev/null >/dev/null-- printf "%s" "$(git describe --long --tags | sed 's/^v//;s/\([^-]*-\)g/r\1/;s/-/./g')"+ tag=$(git describe --tags --abbrev=0)+ commits=$(git rev-list --count "${tag}..HEAD")+ sha=$(git rev-parse --short=7 HEAD)+ printf '%s.r%d.g%s' "${tag//-/.}" "$commits" "$sha" } build() {@@ -52,12 +45,13 @@ cmake -B build -G Ninja \ -DCMAKE_INSTALL_PREFIX="${pkgdir}/usr" \ -DCMAKE_BUILD_TYPE=Release \+ -DCMAKE_INTERPROCEDURAL_OPTIMIZATION=ON \ -DCMAKE_CXX_COMPILER=clang++ \- -DLSFGVK_BUILD_VK_LAYER=ON \+ -DLSFGVK_BUILD_LAYER=ON \ -DLSFGVK_BUILD_UI=ON \ -DLSFGVK_BUILD_CLI=ON \- -DLSFGVK_INSTALL_DEVELOP=ON \- -DLSFGVK_INSTALL_XDG_FILES=ON+ -DLSFGVK_MANAGED=ON \+ -DLSFGVK_INSTALL_LIBRARIES=ON cmake --build build } @@ -66,7 +60,7 @@ cmake --install build - install -Dm644 LICENSE.md \+ install -Dm644 LICENSE.txt \ "$pkgdir/usr/share/licenses/$pkgname/LICENSE" } Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-28 00:07:31 | Low | 2 |
| 2026-08-27 23:33:31 | Medium | 1 |
| 2026-06-18 16:11:54 | Clean | 0 |