lwm

LOW

maintainer hildigerr 1 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is a tarball from the project's official website, building from the project's own source is normal for AUR packages, and the host, while not whitelisted, is plausibly the project's official domain.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official website, building from the project's own source is normal for AUR packages, and the host, while not whitelisted, is plausibly the project's official domain.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 source=(http://www.jfc.org.uk/files/${pkgname}/${pkgname}-${pkgver}.tar.gz)

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Kyle Keen <keenerd@gmail.com>
    
      2# Contributor: Jeff Mickey <j@codemac.net>
    
      3# Contributor: Ben Mazer <blm@groknil.org>
    
      4# Contributor: Daniel J Griffiths <ghost1227@archlinux.us>
    
      5
    
      6pkgname=lwm
    
      7pkgver=1.2.4
    
      8pkgrel=4
    
      9pkgdesc="A very light weight window manager"
    
      10arch=('x86_64')
    
      11url="http://www.jfc.org.uk/software/lwm.html"
    
      12license=('GPL')
    
      13depends=('xorg-server' 'libxext' 'libsm')
    
      14makedepends=('imake')
    
      15source=(http://www.jfc.org.uk/files/${pkgname}/${pkgname}-${pkgver}.tar.gz)
    
      16md5sums=('69fc645ded46b6801092183e01be8518')
    
      17sha256sums=('7ec05d5572c90340335a586e7a227b561512f21b7710ea5d30f401374ec88dad')
    
      18
    
      19build() {
    
      20	cd "$srcdir/$pkgname-$pkgver"
    
      21
    
      22	xmkmf
    
      23	sed -i 's/^LOCAL_LIBRARIES.*/& $(ICELIB)/' Makefile
    
      24	make
    
      25	strip lwm
    
      26}
    
      27
    
      28package() {
    
      29	cd "$srcdir/$pkgname-$pkgver"
    
      30
    
      31	install -Dm755 lwm "$pkgdir/usr/bin/lwm"
    
      32	install -Dm644 lwm.man "$pkgdir/usr/share/man/man1/lwm.1"
    
      33}
    
      34

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2