schedtoold
The source is a tarball from an archived project page, but it is the project's own source code being built, not a prebuilt executable, and the checksums are provided and valid, making the risk low despite the non-standard host.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from an archived project page, but it is the project's own source code being built, not a prebuilt executable, and the checksums are provided and valid, making the risk low despite the non-standard host.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:12
source=(http://web.archive.org/web/20160407010156/http://www.darav.de/$pkgname-$pkgver.tar.bz2 \
PKGBUILD
1 offending line(s) highlighted# Maintainer: Pedro Pereira (pedrogabriel AT dcc DOT ufmg DOT br)
# Contributors: Sietse van der Molen, Henrik Nymann Jensen
# Contributors: Alexandre (pums974 AT gmail DOT com )
pkgname=schedtoold
pkgver=0.3
pkgrel=11
pkgdesc="Simple daemon to renice/nice and change priorities of processes while running them."
depends=('bash' 'schedtool')
arch=('i686' 'x86_64' 'armv7h')
license=('GPL')
source=(http://web.archive.org/web/20160407010156/http://www.darav.de/$pkgname-$pkgver.tar.bz2 \
schedtoold.patch schedtoold.conf schedtoold schedtoold.service utils.patch segv.patch
)
url="https://web.archive.org/web/20160407010156/http://www.darav.de/schedtoold.html"
md5sums=('c8f1d73c0f0d0b3dba005d2853f2cfa4'
'b449800d8f99d6acb83b2255eaed6166'
'2f095a0e26a341c99e0425ce58dd3b90'
'b50e8e0580e68bc076216b9cb663bb76'
'd32da7c1fa24a4a9baf7802db088a4c1'
'adf3cd0c15b4a4e5fa6c8f6a00b346c3'
'08513657ed542b6ad75c64c0ad2e3b4f')
build() {
cd $srcdir/$pkgname-$pkgver
patch -p0 -i $srcdir/$pkgname.patch
patch -p0 -i $srcdir/utils.patch
patch -p1 -i "${srcdir}/segv.patch"
make
}
package() {
cd $srcdir/$pkgname-$pkgver
make DESTDIR="$pkgdir" install
install -Dm644 "$srcdir"/schedtoold.conf "$pkgdir"/etc/schedtoold.conf
install -Dm755 "$srcdir"/schedtoold "$pkgdir"/etc/rc.d/schedtoold
install -Dm644 "$srcdir"/schedtoold.service "$pkgdir"/usr/lib/systemd/system/schedtoold.service
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |