razercfg

maintainer jeromedc · 2 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is hosted on the maintainer's plausible personal domain (bues.ch) which is not on the standard whitelist, but the package builds from verifiable source code and includes a PGP signature check, making it a low-risk, legitimate AUR package.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is hosted on the maintainer's plausible personal domain (bues.ch) which is not on the standard whitelist, but the package builds from verifiable source code and includes a PGP signature check, making it a low-risk, legitimate AUR package.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:19 source=("https://bues.ch/razercfg/razercfg-$pkgver.tar.xz"{,.asc})

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Jérôme de Courval <decje9@gmail.com>
    
      2# Contributor: Michał Wojdyła < micwoj9292 at gmail dot com >
    
      3# Contributor: Daniel M. Capella <polyzen@archlinux.org>
    
      4# Contributor: Maxwell "Synthead" Pray <synthead@gmail.com>
    
      5# Contributor: Fergus Symon <fergofrog@fergofrog.com>
    
      6
    
      7pkgname=razercfg
    
      8pkgver=0.43
    
      9pkgrel=10
    
      10pkgdesc='Razer mouse configuration tool'
    
      11arch=('x86_64')
    
      12url=https://bues.ch/cms/hacking/razercfg
    
      13license=('GPL-2.0-or-later')
    
      14depends=('bash' 'hicolor-icon-theme' 'libusb' 'python')
    
      15makedepends=('cmake' 'systemd' 'python-setuptools')
    
      16optdepends=('python-pyqt5: for the graphical qrazercfg tool')
    
      17provides=('razerd')
    
      18backup=('etc/razer.conf')
    
      19source=("https://bues.ch/razercfg/razercfg-$pkgver.tar.xz"{,.asc})
    
      20sha512sums=('0d852c86846f14a5da64350e8c0de5288fc9ad6dbbaf4e35b8aea4c9e11eb43269240bc13deac3a49940557846c0e6d73ebefbc26dddc11a47bcc12a3691aca7'
    
      21            'SKIP')
    
      22validpgpkeys=('757FAB7CED1814AE15B4836E5FB027474203454C') # Michael Busch
    
      23
    
      24build() {
    
      25  cd razercfg-$pkgver
    
      26  RAZERCFG_PKG_BUILD=1 cmake -DCMAKE_INSTALL_PREFIX=/usr .
    
      27  cmake --build .
    
      28}
    
      29
    
      30package() {
    
      31  cd razercfg-$pkgver
    
      32  RAZERCFG_PKG_BUILD=1 DESTDIR="$pkgdir" cmake --install .
    
      33
    
      34  install -Dm644 -t "$pkgdir"/etc razer.conf
    
      35  install -Dm644 tmpfile.conf "$pkgdir"/usr/lib/tmpfiles.d/razerd.conf
    
      36}
    
      37

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2