skwd-paper-plasma

LOW

maintainer liixini 0 votes scanned 2026-10-19 00:03:55.276608

View on AUR

Why flagged

The source is a Fedora COPR build artifact from a developer associated with the project, used to extract and rebuild the same source, which is a common practice for AUR packages; the host, while non-standard, is a legitimate build service, and no unreviewed remote code is executed.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Fedora COPR build artifact from a developer associated with the project, used to extract and rebuild the same source, which is a common practice for AUR packages; the host, while non-standard, is a legitimate build service, and no unreviewed remote code is executed.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:11 source=("skwd-paper-plasma-1.0.0~beta.26-1.fc44.src.rpm::https://download.copr.fedorainfracloud.org/results/piixini/skwd-wall-v2/srpm-builds/11155442/skwd-paper-plasma-1.0.0beta.26-1.fc44.src.rpm")

PKGBUILD

1 offending line(s) highlighted

      1pkgname=skwd-paper-plasma
    
      2pkgver=1.0.0_beta.26
    
      3pkgrel=1
    
      4pkgdesc='KDE Plasma wallpaper integration for Skwd Paper'
    
      5arch=(x86_64)
    
      6url='https://github.com/liixini/skwd-paper-plasma'
    
      7license=(MIT)
    
      8depends=(libdrm libglvnd plasma-workspace qt6-base qt6-declarative qt6-tools skwd-paper)
    
      9makedepends=(cmake gcc pkgconf)
    
      10options=(!debug !lto)
    
      11source=("skwd-paper-plasma-1.0.0~beta.26-1.fc44.src.rpm::https://download.copr.fedorainfracloud.org/results/piixini/skwd-wall-v2/srpm-builds/11155442/skwd-paper-plasma-1.0.0beta.26-1.fc44.src.rpm")
    
      12sha256sums=('b63467ec9c5190903c13431a11dbaf8d9a8fc0a2415a4277f98d7341a60cfe5d')
    
      13
    
      14prepare() {
    
      15  bsdtar -xf "$srcdir/skwd-paper-plasma-1.0.0~beta.26-1.fc44.src.rpm" -C "$srcdir"
    
      16  bsdtar -xf "$srcdir/skwd-paper-plasma-1.0.0-beta.26.tar.xz" -C "$srcdir"
    
      17}
    
      18
    
      19build() {
    
      20  cmake -S "$srcdir/skwd-paper-plasma-1.0.0-beta.26" -B build \
    
      21    -DCMAKE_BUILD_TYPE=Release \
    
      22    -DCMAKE_INSTALL_PREFIX=/usr \
    
      23    -DCMAKE_INSTALL_LIBDIR=lib
    
      24  cmake --build build
    
      25}
    
      26
    
      27package() {
    
      28  DESTDIR="$pkgdir" cmake --install build
    
      29}
    
      30

Changes since previous scan

--- PKGBUILD @ 2026-10-15 00:28
+++ PKGBUILD @ 2026-10-19 00:03
@@ -1,23 +1,23 @@
 pkgname=skwd-paper-plasma
-pkgver=1.0.0_beta.25
+pkgver=1.0.0_beta.26
 pkgrel=1
 pkgdesc='KDE Plasma wallpaper integration for Skwd Paper'
 arch=(x86_64)
 url='https://github.com/liixini/skwd-paper-plasma'
-license=(GPL-3.0-or-later)
+license=(MIT)
 depends=(libdrm libglvnd plasma-workspace qt6-base qt6-declarative qt6-tools skwd-paper)
 makedepends=(cmake gcc pkgconf)
 options=(!debug !lto)
-source=("skwd-paper-plasma-1.0.0~beta.25-1.fc44.src.rpm::https://download.copr.fedorainfracloud.org/results/piixini/skwd-wall-v2/srpm-builds/11118856/skwd-paper-plasma-1.0.0beta.25-1.fc44.src.rpm")
-sha256sums=('955890c60734018ecf9c83762718a25ed5fe5912d97b55288ad02164a9fd6396')
+source=("skwd-paper-plasma-1.0.0~beta.26-1.fc44.src.rpm::https://download.copr.fedorainfracloud.org/results/piixini/skwd-wall-v2/srpm-builds/11155442/skwd-paper-plasma-1.0.0beta.26-1.fc44.src.rpm")
+sha256sums=('b63467ec9c5190903c13431a11dbaf8d9a8fc0a2415a4277f98d7341a60cfe5d')
 
 prepare() {
-  bsdtar -xf "$srcdir/skwd-paper-plasma-1.0.0~beta.25-1.fc44.src.rpm" -C "$srcdir"
-  bsdtar -xf "$srcdir/skwd-paper-plasma-1.0.0-beta.25.tar.xz" -C "$srcdir"
+  bsdtar -xf "$srcdir/skwd-paper-plasma-1.0.0~beta.26-1.fc44.src.rpm" -C "$srcdir"
+  bsdtar -xf "$srcdir/skwd-paper-plasma-1.0.0-beta.26.tar.xz" -C "$srcdir"
 }
 
 build() {
-  cmake -S "$srcdir/skwd-paper-plasma-1.0.0-beta.25" -B build \
+  cmake -S "$srcdir/skwd-paper-plasma-1.0.0-beta.26" -B build \
     -DCMAKE_BUILD_TYPE=Release \
     -DCMAKE_INSTALL_PREFIX=/usr \
     -DCMAKE_INSTALL_LIBDIR=lib

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-19 00:03:55	Low	2
2026-10-18 00:06:55	Low	2
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 23:13:54	Medium	1
2026-10-15 00:28:05	Low	2
2026-10-14 07:19:30	Medium	1
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 00:11:52	Low	2
2026-10-09 00:05:33	Low	2
2026-10-08 00:28:03	Low	2
2026-10-07 00:21:34	Low	2
2026-10-06 00:13:36	Low	2
2026-10-05 00:08:03	Low	2
2026-10-04 00:18:08	Low	2
2026-10-03 00:23:04	Low	2
2026-10-02 00:00:32	Low	2