mnt-reform-lpc-dkms

LOW

maintainer stephano 2 votes scanned 2026-10-08 00:28:03.132797

View on AUR

Why flagged

The source is a Git repository from the project's own official host (source.mnt.re), building a DKMS module from reviewed source files;虽非标准域名但属项目自有基础设施，风险低。

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Git repository from the project's own official host (source.mnt.re), building a DKMS module from reviewed source files;虽非标准域名但属项目自有基础设施，风险低。

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source=("reform-tools::git+https://source.mnt.re/reform/reform-tools.git#tag=${pkgver}")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Stephano Cetola <stephano@cetola.net>
    
      2# SPDX-License-Identifier: MIT
    
      3
    
      4pkgname=mnt-reform-lpc-dkms
    
      5_pkgbase=reform2_lpc
    
      6pkgver=1.88
    
      7pkgrel=1
    
      8pkgdesc='DKMS module for the MNT Reform LPC11U24 system controller'
    
      9arch=('aarch64' 'x86_64')
    
      10url='https://source.mnt.re/reform/reform-tools'
    
      11license=('GPL-2.0-only')
    
      12depends=('dkms')
    
      13makedepends=('git')
    
      14provides=('mnt-reform-lpc')
    
      15conflicts=('mnt-reform-lpc')
    
      16source=("reform-tools::git+https://source.mnt.re/reform/reform-tools.git#tag=${pkgver}")
    
      17sha256sums=('SKIP')
    
      18
    
      19package() {
    
      20    local _srcdir="${pkgdir}/usr/src/${_pkgbase}-${pkgver}"
    
      21
    
      22    install -d "${_srcdir}"
    
      23    install -Dm644 "${srcdir}/reform-tools/lpc/Makefile" "${_srcdir}/Makefile"
    
      24    install -Dm644 "${srcdir}/reform-tools/lpc/reform2_lpc.c" "${_srcdir}/reform2_lpc.c"
    
      25
    
      26    cat > "${_srcdir}/dkms.conf" <<EOF_DKMS
    
      27PACKAGE_NAME="${_pkgbase}"
    
      28PACKAGE_VERSION="${pkgver}"
    
      29BUILT_MODULE_NAME[0]="reform2_lpc"
    
      30BUILT_MODULE_LOCATION[0]="."
    
      31DEST_MODULE_LOCATION[0]="/updates/dkms"
    
      32MAKE[0]="make KERNEL_DIR=/lib/modules/\${kernelver}/build"
    
      33AUTOINSTALL="yes"
    
      34EOF_DKMS
    
      35}
    
      36

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-08 00:28:03	Low	2
2026-10-07 00:21:34	Low	2
2026-10-06 00:13:36	Low	2
2026-10-05 00:08:03	Low	2
2026-10-04 00:18:08	Low	2
2026-10-03 00:23:04	Low	2
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2
2026-09-27 00:07:07	Low	2
2026-09-26 00:12:15	Low	2
2026-09-25 00:03:36	Low	2
2026-09-24 00:24:14	Low	2
2026-09-23 00:28:13	Low	2
2026-09-22 00:15:14	Low	2
2026-09-21 00:26:32	Low	2
2026-09-20 00:25:31	Low	2
2026-09-19 00:25:36	Low	2