readarr-nightly-bin
LOW
maintainer txtsd
2 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads prebuilt binaries from the official Readarr update server (readarr.servarr.com), which is the project's own release infrastructure; despite the non-whitelisted host, the source is legitimate and checksums are provided, making this a standard AUR binary package with low risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt binaries from the official Readarr update server (readarr.servarr.com), which is the project's own release infrastructure; despite the non-whitelisted host, the source is legitimate and checksums are provided, making this a standard AUR binary package with low risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:47
source_x86_64=("Readarr.nightly.${pkgver}.linux-core-x64.tar.gz::https://readarr.servarr.com/v1/update/nightly/updatefile?version=${pkgver}&os=linux&runtime=netcore&arch=x64")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: txtsd <aur.archlinux@ihavea.quest>
2
# Maintainer: Donald Webster <fryfrog@gmail.com>
3
# Helpful URL: https://readarr.servarr.com/v1/update/nightly?version=0.0.0.0&os=linux&runtime=netcore&arch=x64&includeMajorVersion=true
4
5
pkgname=readarr-nightly-bin
6
pkgver=0.4.19.2811
7
pkgrel=1
8
pkgdesc='Ebook and audiobook collection manager for newsgroup and torrent users (nightly builds)'
9
arch=(x86_64 aarch64 armv7h)
10
url='https://readarr.com'
11
license=('GPL-3.0-or-later')
12
groups=(servarr-nightly-bin)
13
depends=(
14
gcc-libs
15
glibc
16
sqlite
17
zlib
18
)
19
optdepends=(
20
'postgresql: postgresql database'
21
'sabnzbd: usenet downloader'
22
'nzbget: usenet downloader'
23
'qbittorrent: torrent downloader'
24
'deluge: torrent downloader'
25
'rtorrent: torrent downloader'
26
'nodejs-flood: torrent downloader'
27
'vuze: torrent downloader'
28
'aria2: torrent downloader'
29
'transmission-cli: torrent downloader (CLI and daemon)'
30
'transmission-gtk: torrent downloader (GTK+)'
31
'transmission-qt: torrent downloader (Qt)'
32
'jackett: torrent indexer proxy'
33
'nzbhydra2: torznab and usenet indexer proxy'
34
'prowlarr: torrent and usenet indexer proxy'
35
'autobrr: irc, torrent and usenet indexer proxy'
36
)
37
provides=(readarr)
38
conflicts=(readarr)
39
options=(!debug)
40
install=readarr.install
41
source=(
42
package_info
43
readarr.service
44
readarr.sysusers
45
readarr.tmpfiles
46
)
47
source_x86_64=("Readarr.nightly.${pkgver}.linux-core-x64.tar.gz::https://readarr.servarr.com/v1/update/nightly/updatefile?version=${pkgver}&os=linux&runtime=netcore&arch=x64")
48
source_aarch64=("Readarr.nightly.${pkgver}.linux-core-arm64.tar.gz::https://readarr.servarr.com/v1/update/nightly/updatefile?version=${pkgver}&os=linux&runtime=netcore&arch=arm64")
49
source_armv7h=("Readarr.nightly.${pkgver}.linux-core-arm.tar.gz::https://readarr.servarr.com/v1/update/nightly/updatefile?version=${pkgver}&os=linux&runtime=netcore&arch=arm")
50
sha256sums=('9b505e7e93a71c9d2fdc4689cf4a3cd691e3927b419cf5bb6e1aed43b5a91edc'
51
'ce5d3c5263792f7099ca5b87acee8a5c7573cc90931cc37a31da459d20b5cfa0'
52
'fcfa28c1be4f67cfa641dc6076780ee07ab973e55bf676174315e417f73003ad'
53
'a4cfdf882ab62dea54d85dfae4a633cf21bce597a19c3287d90c024e3ff399ce')
54
sha256sums_x86_64=('12bfb50de4b217c4de776715106a41c8ea59c7a912df8bf1918059645453abc8')
55
sha256sums_aarch64=('25b5a3b4d7d119903a90bef722859927a93f700dbbec8850438c12d7da2f981e')
56
sha256sums_armv7h=('2fba8d3a2de88a7b464475c2fdff6400e53fa00508c20954031d8ef96f71006d')
57
58
package() {
59
install -dm755 "${pkgdir}/usr/lib/readarr/bin"
60
61
# License
62
install -Dm644 Readarr/LICENSE.md "${pkgdir}/usr/share/licenses/${pkgname}"
63
rm Readarr/LICENSE.md
64
65
# Remove Service Helpers, and Update files
66
rm Readarr/ServiceInstall*
67
rm Readarr/ServiceUninstall*
68
rm -rf Readarr/Readarr.Update
69
70
# Disable built in updater.
71
install -Dm644 package_info "${pkgdir}/usr/lib/readarr"
72
echo "PackageVersion=${pkgver}-${pkgrel}" >> "${pkgdir}/usr/lib/readarr/package_info"
73
74
# Copy Readarr
75
cp -dr Readarr/* "${pkgdir}/usr/lib/readarr/bin"
76
77
# Systemd
78
install -Dm644 readarr.service "${pkgdir}/usr/lib/systemd/system/readarr.service"
79
install -Dm644 readarr.sysusers "${pkgdir}/usr/lib/sysusers.d/readarr.conf"
80
install -Dm644 readarr.tmpfiles "${pkgdir}/usr/lib/tmpfiles.d/readarr.conf"
81
}
82
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |