lua52-unbound

LOW

maintainer aereaux 0 votes base lua-unbound scanned 2026-08-20 17:15:44.968105

View on AUR

Why flagged

Source is downloaded from code.zash.se, which is the project's own official host (zash.se is the author's domain listed in the url field), with a proper sha256 checksum; building the project's own source is normal AUR packaging with no malicious patterns.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 80%): Source is downloaded from code.zash.se, which is the project's own official host (zash.se is the author's domain listed in the url field), with a proper sha256 checksum; building the project's own source is normal AUR packaging with no malicious patterns.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 source=("https://code.zash.se/dl/luaunbound/luaunbound-$pkgver.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Aidan Epstein <aidan@jmad.org>
    
      2
    
      3pkgname=(lua-unbound lua51-unbound lua52-unbound lua53-unbound lua54-unbound)
    
      4pkgver=1.1.0
    
      5pkgrel=1
    
      6pkgdesc='drop-in replacement for Prosodys internal DNS library with a binding to libunbound'
    
      7arch=('x86_64')
    
      8url='https://www.zash.se/luaunbound.html'
    
      9license=('MIT')
    
      10makedepends=('lua' 'lua51' 'lua52' 'lua53' 'lua54')
    
      11depends=('unbound')
    
      12source=("https://code.zash.se/dl/luaunbound/luaunbound-$pkgver.tar.gz")
    
      13sha256sums=('236159461ecc61d4cc7d3738a7adcf3680ba6f61ea6e1f8e18f2c9b5e3a90244')
    
      14
    
      15prepare() {
    
      16  cd "$srcdir/luaunbound-$pkgver"
    
      17  # use CC
    
      18  sed -i 's/(LD)/(CC)/g' GNUmakefile
    
      19
    
      20  cp -r "$srcdir"/luaunbound-$pkgver "$srcdir"/luaunbound51-$pkgver
    
      21  cp -r "$srcdir"/luaunbound-$pkgver "$srcdir"/luaunbound52-$pkgver
    
      22  cp -r "$srcdir"/luaunbound-$pkgver "$srcdir"/luaunbound53-$pkgver
    
      23  cp -r "$srcdir"/luaunbound-$pkgver "$srcdir"/luaunbound54-$pkgver
    
      24}
    
      25
    
      26build() {
    
      27  cd "$srcdir/luaunbound51-$pkgver"
    
      28  make all LUA_VERSION=5.1
    
      29
    
      30  cd "$srcdir/luaunbound52-$pkgver"
    
      31  make all LUA_VERSION=5.2
    
      32
    
      33  cd "$srcdir/luaunbound53-$pkgver"
    
      34  make all LUA_VERSION=5.3
    
      35
    
      36  cd "$srcdir/luaunbound-$pkgver"
    
      37  make all LUA_VERSION=5.4
    
      38
    
      39  cd "$srcdir/luaunbound-$pkgver"
    
      40  make all LUA_VERSION=5.5
    
      41}
    
      42
    
      43
    
      44package_lua51-unbound() {
    
      45  cd "$srcdir/luaunbound-$pkgver"
    
      46  make install DESTDIR="$pkgdir" LUA_VERSION=5.1
    
      47}
    
      48
    
      49package_lua52-unbound() {
    
      50  cd "$srcdir/luaunbound-$pkgver"
    
      51  make install DESTDIR="$pkgdir" LUA_VERSION=5.2
    
      52}
    
      53
    
      54package_lua53-unbound() {
    
      55  cd "$srcdir/luaunbound-$pkgver"
    
      56  make install DESTDIR="$pkgdir" LUA_VERSION=5.3
    
      57}
    
      58
    
      59package_lua54-unbound() {
    
      60  cd "$srcdir/luaunbound-$pkgver"
    
      61  make install DESTDIR="$pkgdir" LUA_VERSION=5.4
    
      62}
    
      63
    
      64package_lua-unbound() {
    
      65  cd "$srcdir/luaunbound-$pkgver"
    
      66  make install DESTDIR="$pkgdir" LUA_VERSION=5.5
    
      67}
    
      68

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-20 17:15:44	Low	3
2026-08-20 17:11:42	Medium	2