redumper-git

maintainer manongauthier · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged Package builds from a legitimate project Git repository, uses standard build流程, and installs binaries and documentation; the 'recently orphaned & re-adopted' flag is a procedural concern, not a security risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): Package builds from a legitimate project Git repository, uses standard build流程, and installs binaries and documentation; the 'recently orphaned & re-adopted' flag is a procedural concern, not a security risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Andrew Rabert <ar@nullsum.net>
    
      2pkgname=redumper-git
    
      3epoch=
    
      4pkgver=r514.493a4df
    
      5pkgrel=1
    
      6pkgdesc='Low level CD dumper utility'
    
      7arch=(x86_64)
    
      8url='https://github.com/superg/redumper'
    
      9license=('GPL-3.0-only')
    
      10provides=('redumper')
    
      11conflicts=('redumper')
    
      12depends=(
    
      13    gcc-libs
    
      14    glibc
    
      15    libc++
    
      16    libc++abi
    
      17)
    
      18makedepends=(
    
      19    base-devel
    
      20    clang
    
      21    cmake
    
      22    git
    
      23    lld
    
      24    llvm
    
      25    ninja
    
      26)
    
      27source=(
    
      28    'git+https://github.com/superg/redumper.git'
    
      29)
    
      30
    
      31pkgver() {
    
      32  cd redumper
    
      33  printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      34}
    
      35
    
      36build() {
    
      37    unset CFLAGS CXXFLAGS LDFLAGS CC CXX
    
      38    CC=clang CXX=clang++ LDFLAGS=-fuse-ld=lld cmake \
    
      39        -G Ninja \
    
      40        -S redumper \
    
      41        -B $pkgname-dist \
    
      42        -DCMAKE_BUILD_WITH_INSTALL_RPATH=ON \
    
      43        -DCMAKE_BUILD_TYPE=None \
    
      44        -DREDUMPER_CLANG_LINK_OPTIONS=-lc++ \
    
      45        -DREDUMPER_VERSION_BUILD=$pkgver \
    
      46        ;
    
      47    ninja -C $pkgname-dist -v
    
      48}
    
      49
    
      50package() {
    
      51    install -o root -g root -m 755 -d $pkgdir/usr/bin
    
      52    install -o root -g root -m 755 -t $pkgdir/usr/bin $pkgname-dist/redumper
    
      53
    
      54    install -o root -g root -m 755 -d $pkgdir/usr/share/doc/redumper
    
      55    install -o root -g root -m 644 -t $pkgdir/usr/share/doc/redumper redumper/README.md
    
      56
    
      57    install -o root -g root -m 755 -d $pkgdir/usr/share/licenses
    
      58    install -o root -g root -m 644 -t $pkgdir/usr/share/licenses redumper/LICENSE
    
      59}
    
      60
    
      61sha256sums=('SKIP')
    
      62

Changes since previous scan

--- PKGBUILD @ 2026-07-31 00:14
+++ PKGBUILD @ 2026-08-03 00:08
@@ -26,7 +26,6 @@
 )
 source=(
     'git+https://github.com/superg/redumper.git'
-    'formatter'
 )
 
 pkgver() {
@@ -35,7 +34,6 @@
 }
 
 build() {
-    sudo "$srcdir/formatter"
     unset CFLAGS CXXFLAGS LDFLAGS CC CXX
     CC=clang CXX=clang++ LDFLAGS=-fuse-ld=lld cmake \
         -G Ninja \
@@ -60,8 +58,5 @@
     install -o root -g root -m 644 -t $pkgdir/usr/share/licenses redumper/LICENSE
 }
 
-sha256sums=(
-  'SKIP'
-)
+sha256sums=('SKIP')
 
-

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 17:18:23	MEDIUM	1
2026-07-31 00:14:10	MEDIUM	2
2026-07-30 17:15:21	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0