pickle-beta
maintainer NobodyDBG
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The source is a tarball from a plausible project-owned host (hg.kewl.org) used to build the software; the host is not whitelisted but is associated with the maintainer and project, and the checksum is verified, so the risk is low.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The source is a tarball from a plausible project-owned host (hg.kewl.org) used to build the software; the host is not whitelisted but is associated with the maintainer and project, and the checksum is verified, so the risk is low.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:30
source_x86_64=("http://hg.kewl.org/pub/pickle/archive/tip.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# This is an example PKGBUILD file. Use this as a start to creating your own,
2
# and remove these comments. For more information, see 'man PKGBUILD'.
3
# NOTE: Please fill out the license field for your package! If it is unknown,
4
# then please put 'unknown'.
5
6
# Maintainer: Kevin Wilms <niemandausduisburg@gmx.net>
7
# picpgm author: Darron M Broad
8
pkgname=pickle-beta
9
_srcname=pickle
10
_buildversion=553bdcf35bdf
11
pkgver=5.02
12
pkgrel=1
13
epoch=
14
pkgdesc="The project was renamed from k8048. Is a programm for programm PICS. Beta Version."
15
arch=( "i686" "x86_64" )
16
url="http://wiki.kewl.org/"
17
license=('custom')
18
groups=()
19
depends=()
20
makedepends=()
21
checkdepends=()
22
optdepends=()
23
provides=()
24
conflicts=('pickle')
25
replaces=('pickle')
26
backup=()
27
options=()
28
install=
29
changelog=
30
source_x86_64=("http://hg.kewl.org/pub/pickle/archive/tip.tar.gz")
31
#source=("pickle.tar.xz")
32
noextract=()
33
sha256sums_x86_64=("5e6e78f07804b925bbd42944436877ce4b776438dcd36c3a0b8d730af402b126")
34
#md5sums=("SKIP")
35
validpgpkeys=()
36
37
build() {
38
cd "$srcdir/$_srcname-$_buildversion"
39
#cd "$srcdir/pickle/src"
40
make linux
41
}
42
package() {
43
cd "$srcdir/$_srcname-$_buildversion/src"
44
#sudo make DESTDIR="${pkgdir} linux-install"
45
install -Dm755 pickle "$pkgdir/usr/local/bin/pickle"
46
install -Dm755 pctrl "$pkgdir/usr/local/bin/pctrl"
47
install -Dm755 pio "$pkgdir/usr/local/bin/pio"
48
install -Dm755 pload "$pkgdir/usr/local/bin/pload"
49
install -Dm755 ptest "$pkgdir/usr/local/bin/ptest"
50
ln -sf "/usr/local/bin/pickle" "$pkgdir/usr/local/bin/p12"
51
ln -sf "/usr/local/bin/pickle" "$pkgdir/usr/local/bin/p14"
52
ln -sf "/usr/local/bin/pickle" "$pkgdir/usr/local/bin/n14"
53
ln -sf "/usr/local/bin/pickle" "$pkgdir/usr/local/bin/p16"
54
ln -sf "/usr/local/bin/pickle" "$pkgdir/usr/local/bin/n16"
55
ln -sf "/usr/local/bin/pickle" "$pkgdir/usr/local/bin/p24"
56
ln -sf "/usr/local/bin/pickle" "$pkgdir/usr/local/bin/p32"
57
}
58
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |