rbcat

LOW

maintainer Minecodes 1 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is a Go file from the maintainer's personal domain, used to build the project from source; while the host is not standard, it is plausibly the project's own development environment, and the build process is transparent and normal for AUR, though the skipped checksum reduces verifiability.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The source is a Go file from the maintainer's personal domain, used to build the project from source; while the host is not standard, it is plausibly the project's own development environment, and the build process is transparent and normal for AUR, though the skipped checksum reduces verifiability.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:11 source=("https://git.minecodes.de/thies/rbcat/raw/branch/main/main.go")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Minecodes <minecodes at minecodes.de>
    
      2pkgname=rbcat
    
      3pkgver=v1.0.1
    
      4pkgrel=3
    
      5groups=('mcds')
    
      6pkgdesc="A go clone of lolcat with built-in cat function."
    
      7arch=('x86_64')
    
      8url="https://codeberg.org/Minecodes/rbcat"
    
      9license=('bsd-4-clause')
    
      10makedepends=('go')
    
      11source=("https://git.minecodes.de/thies/rbcat/raw/branch/main/main.go")
    
      12sha256sums=('SKIP')
    
      13
    
      14build() {
    
      15  cd "$srcdir"
    
      16  export GOPATH="$srcdir"
    
      17  go build -o rbcat main.go
    
      18}
    
      19
    
      20package() {
    
      21  cd "$srcdir"
    
      22  install -Dm755 rbcat "$pkgdir/usr/bin/rbcat"
    
      23}
    
      24
    
      25

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2