ratslang-bin

MEDIUM

maintainer stelzo 0 votes scanned 2026-10-27 00:23:28.674093

View on AUR

Why flagged

Prebuilt binaries downloaded from a personal/unofficial host (ppa.steado.tech) with SKIP'd checksums, making them unverifiable and trivially swappable; while the maintainer appears to be the project author, the combination of an unofficial PPA host and no integrity verification for executed binaries warrants medium severity.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:11 source_x86_64=("$pkgname-$pkgver.deb::https://ppa.steado.tech/ubuntu/pool/main/noble/ratslang_$pkgver-1_amd64.deb")

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 80%): Prebuilt binaries downloaded from a personal/unofficial host (ppa.steado.tech) with SKIP'd checksums, making them unverifiable and trivially swappable; while the maintainer appears to be the project author, the combination of an unofficial PPA host and no integrity verification for executed binaries warrants medium severity.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: stelzo <stelzo@steado.de>
    
      2pkgname=ratslang-bin
    
      3pkgver=0.5.0
    
      4pkgrel=1
    
      5pkgdesc="Configuration language for building physical systems in Rust: CLI and language server"
    
      6arch=('x86_64' 'aarch64')
    
      7url="https://codeberg.org/stelzo/ratslang"
    
      8license=('MIT' 'Apache-2.0')
    
      9depends=('libgcc' 'glibc')
    
      10options=('!lto' '!strip' '!debug')
    
      11source_x86_64=("$pkgname-$pkgver.deb::https://ppa.steado.tech/ubuntu/pool/main/noble/ratslang_$pkgver-1_amd64.deb")
    
      12sha256sums_x86_64=('SKIP')
    
      13source_aarch64=("$pkgname-$pkgver.deb::https://ppa.steado.tech/ubuntu/pool/main/noble/ratslang_$pkgver-1_arm64.deb")
    
      14sha256sums_aarch64=('SKIP')
    
      15noextract=("$pkgname-$pkgver.deb")
    
      16provides=('ratslang')
    
      17conflicts=('ratslang')
    
      18
    
      19prepare() {
    
      20  mkdir -p "$srcdir/ratslang-ext"
    
      21  cd "$srcdir/ratslang-ext"
    
      22  bsdtar -xf "$srcdir/$pkgname-$pkgver.deb"
    
      23  tar -xpf data.tar.*
    
      24}
    
      25
    
      26package() {
    
      27  install -Dm755 "$srcdir/ratslang-ext/usr/bin/ratslang" "$pkgdir/usr/bin/ratslang"
    
      28  install -Dm755 "$srcdir/ratslang-ext/usr/bin/ratslang-lsp" "$pkgdir/usr/bin/ratslang-lsp"
    
      29  install -Dm644 "$srcdir/ratslang-ext/usr/share/doc/ratslang/README.md" "$pkgdir/usr/share/doc/ratslang/README.md"
    
      30}
    
      31

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-27 00:23:28	Medium	3
2026-10-26 17:49:28	Medium	3
2026-10-26 17:46:00	Medium	3