slim-synergy
The source is a tarball from berlios.de, a now-defunct but formerly legitimate open-source hosting platform; the package builds from source and applies a patch, but there is no evidence of malicious intent or execution of untrusted prebuilt binaries.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from berlios.de, a now-defunct but formerly legitimate open-source hosting platform; the package builds from source and applies a patch, but there is no evidence of malicious intent or execution of untrusted prebuilt binaries.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:15
source=(http://download.berlios.de/slim/slim-$pkgver.tar.gz
PKGBUILD
1 offending line(s) highlighted# Maintainer: Vincent Quilin <archpkg@cybervince.fr>
pkgname=slim-synergy
pkgver=1.3.5
pkgrel=1
pkgdesc="Desktop-independent graphical login manager for X11 with synergy support"
arch=('i686' 'x86_64')
url="http://slim.berlios.de/"
license=('GPL2')
depends=('pam' 'libxmu' 'libpng' 'libjpeg' 'libxft' 'xorg-xauth' 'synergy')
makedepends=('cmake' 'freeglut')
conflicts=('slim')
provides=('slim')
backup=('etc/slim.conf' 'etc/logrotate.d/slim' 'etc/pam.d/slim')
source=(http://download.berlios.de/slim/slim-$pkgver.tar.gz
slim.pam
slim.logrotate
synergy-support.patch)
sha256sums=('818d209f51e2fa8d5b94ef75ce90a7415be48b45e796d66f8083a9532b655629'
'b9a77a614c451287b574c33d41e28b5b149c6d2464bdb3a5274799842bca51a4'
'5bf44748b5003f2332d8b268060c400120b9100d033fa9d35468670d827f6def'
'15cecdd15c377a618542ddd7211c8ac5cff0c8996c29b19462e84376a02887de')
build() {
cd "$srcdir/slim-$pkgver"
# Add support for synergy
patch -p1 < ../synergy-support.patch
# Fix installation path of slim.service
sed -i 's|usr/lib/systemd/system|/&|' CMakeLists.txt
cmake \
-DCMAKE_INSTALL_PREFIX=/usr \
-DCMAKE_BUILD_TYPE=Release \
-DCMAKE_SKIP_RPATH=ON \
-DUSE_PAM=yes \
-DUSE_CONSOLEKIT=no
make
}
package() {
cd "$srcdir/slim-$pkgver"
make DESTDIR="$pkgdir" install
install -Dm644 "$srcdir/slim.pam" "$pkgdir/etc/pam.d/slim"
install -Dm644 "$srcdir/slim.logrotate" "$pkgdir/etc/logrotate.d/slim"
# Provide sane defaults
sed -i -e 's|#xserver_arguments.*|xserver_arguments -nolisten tcp vt07|' \
-e 's|/var/run/slim.lock|/var/lock/slim.lock|' \
"$pkgdir/etc/slim.conf"
}
# vim:set ts=2 sw=2 et:
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |