soundmodem

maintainer hotaru · 10 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The source is a tarball from archive.org, which is not a standard project host but is used here to host an old release; the tarball is checksummed, and the build process compiles the project's own source, posing no active threat.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from archive.org, which is not a standard project host but is used here to host an old release; the tarball is checksummed, and the build process compiles the project's own source, posing no active threat.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:14 "https://archive.org/download/${pkgname}-${pkgver}/${pkgname}-${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Duncan X Simpson <duncan@k7dxs.net>
2# Contributor: Andreas Schreiner <andreas.schreiner@sonnenmulde.at>
3# Contributor: Ruslan Nabioullin <rnabioullin at gmail dot com>
4# Contributor: Gordon JC Pearce <gordon at gjcp dot net>
5pkgname=soundmodem
6pkgver=0.20
7pkgrel=2
8pkgdesc="Multiplatform Soundcard Packet Radio Modem"
9url="http://gna.org/projects/soundmodem"
10license=('GPL2')
11source=('soundmodem.conf'
12 'soundmodem_conf.d'
13 'soundmodem_rc.d'
14 "https://archive.org/download/${pkgname}-${pkgver}/${pkgname}-${pkgver}.tar.gz"
15 'soundmodem.service'
16 'filpathlen.patch')
17sha512sums=('e77bbdd13c0076e9fa9cd27da2313925798087315acaea5778ba37642de9689d68e72e02c114deea6c4ccda390b676127edff3f050a7307761c9bc4c76c01473'
18 'ef9bac681e6e33823544092a3d1eb9655211c1d300dc7fbf12f2d46d89ed33c20175cc76bcd2d539ce28308e2837fb11dd3e346bfb894d69a73d3c8b705f68e0'
19 'c82992c9fdbe99ca70733a3905be8f69e7af7c18a4c4aef12bf4588e9d08a23363cbbcca4ad7f2a016e644b7b073e543cdce0a5d945a42f4ab221eaf44a44769'
20 '6970fc607ba9f5105ee7118305cbfc87df007beb5a0d500a6de513d58f30206f2622847192d499d921af44ec3e1d238c1e0b38430f5743602e6a238fe26a7226'
21 '45c153ded629ea96acd9aa2abd98e47fd2d9916a50437bff3ebfcfd813363384946402562f0fbc25d35705b1e6bb82b4894bb721a918ae94bc3fb5a399e2e9b2'
22 '070c01b8a6f76817a568111b506e2b27b0660892df75eec0124b138ae61edf0080f4cc5d8e4f87ffae2958c4b2a9d7859c8bef65a3b31f5506ab92332eee62c6')
23arch=('i686' 'x86_64')
24backup=('etc/ax25/soundmodem.conf'
25 'etc/conf.d/soundmodem')
26depends=('audiofile' 'gtk2')
27makedepends=('make' 'libxml2' 'alsa-lib')
28
29prepare() {
30 cd "$pkgname-$pkgver"
31 patch --forward --strip=1 --input="${srcdir}/filpathlen.patch"
32}
33
34build() {
35 cd $srcdir/${pkgname}-${pkgver}
36 CXXFLAGS+=" -fpermissive"
37 ./configure --prefix=/usr
38 make clean
39 make
40}
41
42package() {
43 cd $srcdir/$pkgname-$pkgver
44 make install DESTDIR=$pkgdir
45
46 mkdir -p $pkgdir/etc/ax25
47 mkdir -p $pkgdir/etc/conf.d
48 mkdir -p $pkgdir/etc/rc.d
49 mkdir -p $pkgdir/usr/lib/systemd/system
50 install -m 644 $srcdir/soundmodem.conf $pkgdir/etc/ax25/soundmodem.conf
51 install -m 644 $srcdir/soundmodem_conf.d $pkgdir/etc/conf.d/soundmodem
52 install -m 755 $srcdir/soundmodem_rc.d $pkgdir/etc/rc.d/soundmodem
53 install -m 644 $srcdir/soundmodem.service $pkgdir/usr/lib/systemd/system/soundmodem.service
54 mv $pkgdir/usr/sbin/soundmodem $pkgdir/usr/bin/soundmodem
55 rmdir $pkgdir/usr/sbin
56}
57

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion