sudostamp

LOW

maintainer ritwick 0 votes scanned 2026-10-24 00:14:55.209548

View on AUR

Why flagged

The package builds from a legitimate source on GitLab, installs only project scripts and binaries, and has no obfuscated or unverifiable remote code execution; low severity due to few votes and recent upload, but no inherent security risk in the build or install process.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a legitimate source on GitLab, installs only project scripts and binaries, and has no obfuscated or unverifiable remote code execution; low severity due to few votes and recent upload, but no inherent security risk in the build or install process.

PKGBUILD

      1# Maintainer: Ritwick Verma <verma1997@gmail.com>
    
      2#
    
      3# The computer side of SudoStamp: `sudo sudostamp setup` pairs with the phone app and adds
    
      4# pam_rssh to sudo's PAM stack. Updated per release by scripts/update-aur.sh.
    
      5pkgname=sudostamp
    
      6pkgver=1.3.0
    
      7pkgrel=1
    
      8pkgdesc="Approve sudo with your Android phone's fingerprint (computer side: pairing and PAM setup)"
    
      9arch=('any')
    
      10url="https://gitlab.com/ritwick7/sudostamp"
    
      11license=('MIT')
    
      12depends=('bash' 'python' 'openssh' 'pam_rssh')
    
      13optdepends=("fprintd: try this computer's own fingerprint reader first when at the desk")
    
      14source=("$pkgname-v$pkgver.tar.gz::$url/-/archive/v$pkgver/$pkgname-v$pkgver.tar.gz")
    
      15sha256sums=('ea1ca9a634dfa0c208b283a5898eb642491451ccb693c34360b3f111de4ae2fd')
    
      16
    
      17package() {
    
      18  # GitLab names the archive's top directory <project>-<tag>-<commit>.
    
      19  cd "$srcdir"/"$pkgname"-v"$pkgver"*/
    
      20  local f
    
      21  for f in install.sh pair.py pam_check.py sudostamp-is-local.sh; do
    
      22    install -Dm755 "tools/$f" "$pkgdir/usr/lib/$pkgname/$f"
    
      23  done
    
      24  install -Dm755 /dev/stdin "$pkgdir/usr/bin/$pkgname" <<'SH'
    
      25#!/bin/sh
    
      26SUDOSTAMP_PROG=sudostamp exec /usr/lib/sudostamp/install.sh "$@"
    
      27SH
    
      28  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      29  install -Dm644 README.md SECURITY.md -t "$pkgdir/usr/share/doc/$pkgname/"
    
      30}
    
      31

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-24 00:14:55	Low	2
2026-10-23 21:38:30	Low	2