technitium-dns-server-bin

maintainer owentrigueros · 8 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads a source tarball from the project's official domain (download.technitium.com), which is not on the analyzer's whitelist but is legitimate and expected for this software; the content is verified via a matching sha256sum and consists of portable .NET binaries and static assets, not executed scripts or obfuscated payloads.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source tarball from the project's official domain (download.technitium.com), which is not on the analyzer's whitelist but is legitimate and expected for this software; the content is verified via a matching sha256sum and consists of portable .NET binaries and static assets, not executed scripts or obfuscated payloads.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:14 source=("$_pkgname-$pkgver.tar.gz::https://download.technitium.com/dns/archive/$pkgver/DnsServerPortable.tar.gz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Owen Trigueros <owentrigueros@gmail.com>
2
3pkgname=technitium-dns-server-bin
4_pkgname=technitium-dns-server
5pkgver=15.4.0
6pkgrel=1
7pkgdesc="Open source authoritative and recursive DNS server focused on privacy and security"
8arch=('any')
9url="https://technitium.com/dns/"
10license=('GPL3')
11depends=('aspnet-runtime')
12conflicts=('technitium-dns-server')
13provides=('technitium-dns-server')
14source=("$_pkgname-$pkgver.tar.gz::https://download.technitium.com/dns/archive/$pkgver/DnsServerPortable.tar.gz"
15 "$_pkgname.service"
16 "$_pkgname.sysuser")
17sha256sums=('461ac09d4304ace85093fc17b10a7ee13a8796eae0adb4393866bd4d66ab283f'
18 '464dbfe1038e4737ca83c60617a5a4e334cdd948fe41315a3a36913011680952'
19 'd349d144faf8932c56a054b22721420f1eb68adf7bc226f174654b33510f75e4')
20
21package() {
22 cd "$srcdir"
23
24 install -Dm644 "$_pkgname.sysuser" "$pkgdir"/usr/lib/sysusers.d/$_pkgname.conf
25
26 for f in *.{dll,pdb}
27 do install -Dm 0644 $f "$pkgdir/opt/$_pkgname/$f"
28 done
29
30 install -Dm 0644 DnsServerApp.deps.json "$pkgdir/opt/$_pkgname/DnsServerApp.deps.json"
31 install -Dm 0644 DnsServerApp.runtimeconfig.json "$pkgdir/opt/$_pkgname/DnsServerApp.runtimeconfig.json"
32 install -Dm 0644 named.root "$pkgdir/opt/$_pkgname/named.root"
33 install -Dm 0644 root-anchors.xml "$pkgdir/opt/$_pkgname/root-anchors.xml"
34
35 cp -r www "$pkgdir/opt/$_pkgname/www"
36 cp -r dohwww "$pkgdir/opt/$_pkgname/dohwww"
37
38 install -dm755 "$pkgdir/opt/$_pkgname/config"
39
40 install -Dm 0644 "$_pkgname.service" "$pkgdir/usr/lib/systemd/system/$_pkgname.service"
41}
42

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion