spadfs-utils

LOW

maintainer StarterX4 0 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is a tarball from a personal domain hosting the project's own code, which is then built locally; the worst case of a swapped source is limited to code execution during build, but the project is small and obscure with no indication of malicious intent, making the risk low.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from a personal domain hosting the project's own code, which is then built locally; the worst case of a swapped source is limited to code execution during build, but the project is small and obscure with no indication of malicious intent, making the risk low.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 source=(http://www.jikos.cz/~mikulas/spadfs/download/spadfs-${pkgver}.tar.gz)

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Dominik Adrian Grzywak <starterx4 at gmail dot com>
    
      2# Contributor: Oleksandr Natalenko <oleksandr@natalenko.name>
    
      3
    
      4pkgname=spadfs-utils
    
      5pkgver=1.0.20
    
      6pkgrel=1
    
      7pkgdesc="SPAD filesystem userspace utilities"
    
      8arch=(x86_64)
    
      9url="http://www.jikos.cz/~mikulas/spadfs/"
    
      10license=(unknown)
    
      11optdepends=('spadfs-dkms: DKMS kernel module')
    
      12source=(http://www.jikos.cz/~mikulas/spadfs/download/spadfs-${pkgver}.tar.gz)
    
      13sha256sums=('579a2b478dfd87c6dbc25faad25caf8e1d54c261f50b55ad7269e756f448627a')
    
      14
    
      15package() {
    
      16	cd spadfs-${pkgver}
    
      17
    
      18	make mkspadfs spadfsck
    
      19	#make SPADFS_CC="custom compiler" SPADFS_CFLAGS="custom CFLAGS" mkspadfs spadfsck
    
      20
    
      21	install -Dm0755 mkspadfs -t "${pkgdir}"/usr/bin
    
      22	install -Dm0755 spadfsck -t "${pkgdir}"/usr/bin
    
      23	ln -s /usr/bin/mkspadfs "${pkgdir}"/usr/bin/mkfs.spadfs
    
      24	ln -s /usr/bin/spadfsck "${pkgdir}"/usr/bin/fsck.spadfs
    
      25
    
      26	install -Dm0644 {README,INTERNALS,ChangeLog} -t "${pkgdir}"/usr/share/doc/${pkgname}
    
      27}
    
      28

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2