netatop-dkms
The package downloads the source tarball from the project's official domain (atoptool.nl), which is not on the standard whitelist but is plausibly legitimate; the build process compiles the module from source and installs it via DKMS, which is normal for kernel modules.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads the source tarball from the project's official domain (atoptool.nl), which is not on the standard whitelist but is plausibly legitimate; the build process compiles the module from source and installs it via DKMS, which is normal for kernel modules.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:14
source=("http://atoptool.nl/download/netatop-${pkgver}.tar.gz"
PKGBUILD
1 offending line(s) highlighted# Maintainer: m1kc <m1kc@yandex.ru>
# Contributor: Spider.007 <archPackage@spider007.net>
pkgname=netatop-dkms
_pkgname=netatop
pkgver=3.2.2
pkgrel=2
pkgdesc="Atop network kernel module, enables network statistics in atop"
url="http://www.atoptool.nl/"
groups=('modules')
license=('GPL')
depends=('atop' 'dkms' 'bash' 'zlib')
conflicts=('netatop')
makedepends=()
source=("http://atoptool.nl/download/netatop-${pkgver}.tar.gz"
netatop_kernel_6.15.patch
"netatop-dkms.conf"
"netatop-dkms.install")
install="netatop-dkms.install"
sha256sums=('508a8977cd3d1cdd67587a13c25e3a414647b48f92d1ce38fc138b5914aea3f6'
'e63b02601617756652ca22405713e911f029024446d28f00f6571cac18eecbc8'
'56e9094e396fcdabadde4db8a9f21945484e4db93359dc22f2fb76436b1b2ea9'
'0cda5de65ab96445951e39decfc18b50aad90245f661eb58438ac402cd2496b7')
arch=('x86_64' 'i686')
prepare() {
true
patch -d "${srcdir}/${_pkgname}-${pkgver}" -Np1 -i "${srcdir}"/netatop_kernel_6.15.patch
}
build() {
warning "-------------------------------------------------------------------"
warning "Package build will fail if there are no headers for currently"
warning "loaded kernel or their versions mismatch (for example, you have"
warning "updated the kernel but did not reboot yet)."
warning "-------------------------------------------------------------------"
cd $srcdir/$_pkgname-$pkgver
# build daemon, make sure that module can be built
make all
# remove these objects again, they'll be rebuilt by DKMS
find -name '*.o' -exec rm -v '{}' ';'
find -name '*.ko' -exec rm -v '{}' ';'
find -name 'modules.order' -exec rm -v '{}' ';'
find -name 'netatop.mod' -exec rm -v '{}' ';'
}
package() {
cd $srcdir/$_pkgname-$pkgver
# if [[ `uname -r` =~ ^([0-9]\.[0-9]+)\.[0-9]+-[0-9]+(-.*)$ ]]
# then
# install -Dm 0744 module/netatop.ko $pkgdir/usr/lib/modules/extramodules-${BASH_REMATCH[1]}${BASH_REMATCH[2]}/netatop.ko
# else
# echo "Could not parse version `uname -r`; please report" >&2
# exit 1
# fi
# copy module sources
cd $srcdir/$_pkgname-$pkgver
mkdir -p ${pkgdir}/usr/src/${_pkgname}-${pkgver}
cp -RL * ${pkgdir}/usr/src/${_pkgname}-${pkgver}
# copy dkms.conf
sed -i "s|PACKAGE_VERSION=\"0.5\"|PACKAGE_VERSION=\"${pkgver}\"|g" "${srcdir}/netatop-dkms.conf"
install -D -m 644 "${srcdir}/netatop-dkms.conf" "${pkgdir}/usr/src/${_pkgname}-${pkgver}/dkms.conf"
# package remaining stuff
cd $srcdir/$_pkgname-$pkgver
install -D netatopd $pkgdir/usr/bin/netatopd
install -D man/netatop.4 $pkgdir/usr/share/man/man4/netatop.4
install -D man/netatopd.8 $pkgdir/usr/share/man/man8/netatopd.8
install -D netatop.service $pkgdir/usr/lib/systemd/system/netatop.service
# auto-load
mkdir -p $pkgdir/etc/modules-load.d
echo "netatop" > $pkgdir/etc/modules-load.d/netatop.conf
warning "-------------------------------------------------------------------"
warning "After install, DKMS will try to build the netatop module"
warning "against every kernel you have installed. For the build to succeed,"
warning "you must have header packages for every kernel. Header package"
warning "for the stock kernel is called 'linux-headers', other usually"
warning "follow the same naming scheme."
warning "-------------------------------------------------------------------"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |