pickle-beta

maintainer NobodyDBG · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The source is a tarball from a plausible project-owned host (hg.kewl.org) used to build the software; the host is not whitelisted but is associated with the maintainer and project, and the checksum is verified, so the risk is low.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The source is a tarball from a plausible project-owned host (hg.kewl.org) used to build the software; the host is not whitelisted but is associated with the maintainer and project, and the checksum is verified, so the risk is low.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:30 source_x86_64=("http://hg.kewl.org/pub/pickle/archive/tip.tar.gz")

PKGBUILD

1 offending line(s) highlighted
1# This is an example PKGBUILD file. Use this as a start to creating your own,
2# and remove these comments. For more information, see 'man PKGBUILD'.
3# NOTE: Please fill out the license field for your package! If it is unknown,
4# then please put 'unknown'.
5
6# Maintainer: Kevin Wilms <niemandausduisburg@gmx.net>
7# picpgm author: Darron M Broad
8pkgname=pickle-beta
9_srcname=pickle
10_buildversion=553bdcf35bdf
11pkgver=5.02
12pkgrel=1
13epoch=
14pkgdesc="The project was renamed from k8048. Is a programm for programm PICS. Beta Version."
15arch=( "i686" "x86_64" )
16url="http://wiki.kewl.org/"
17license=('custom')
18groups=()
19depends=()
20makedepends=()
21checkdepends=()
22optdepends=()
23provides=()
24conflicts=('pickle')
25replaces=('pickle')
26backup=()
27options=()
28install=
29changelog=
30source_x86_64=("http://hg.kewl.org/pub/pickle/archive/tip.tar.gz")
31#source=("pickle.tar.xz")
32noextract=()
33sha256sums_x86_64=("5e6e78f07804b925bbd42944436877ce4b776438dcd36c3a0b8d730af402b126")
34#md5sums=("SKIP")
35validpgpkeys=()
36
37build() {
38 cd "$srcdir/$_srcname-$_buildversion"
39 #cd "$srcdir/pickle/src"
40 make linux
41 }
42package() {
43 cd "$srcdir/$_srcname-$_buildversion/src"
44 #sudo make DESTDIR="${pkgdir} linux-install"
45 install -Dm755 pickle "$pkgdir/usr/local/bin/pickle"
46 install -Dm755 pctrl "$pkgdir/usr/local/bin/pctrl"
47 install -Dm755 pio "$pkgdir/usr/local/bin/pio"
48 install -Dm755 pload "$pkgdir/usr/local/bin/pload"
49 install -Dm755 ptest "$pkgdir/usr/local/bin/ptest"
50 ln -sf "/usr/local/bin/pickle" "$pkgdir/usr/local/bin/p12"
51 ln -sf "/usr/local/bin/pickle" "$pkgdir/usr/local/bin/p14"
52 ln -sf "/usr/local/bin/pickle" "$pkgdir/usr/local/bin/n14"
53 ln -sf "/usr/local/bin/pickle" "$pkgdir/usr/local/bin/p16"
54 ln -sf "/usr/local/bin/pickle" "$pkgdir/usr/local/bin/n16"
55 ln -sf "/usr/local/bin/pickle" "$pkgdir/usr/local/bin/p24"
56 ln -sf "/usr/local/bin/pickle" "$pkgdir/usr/local/bin/p32"
57}
58

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion