technitium-dns-server-bin

LOW
maintainer owentrigueros 8 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The package downloads a source tarball from the project's official domain (download.technitium.com), which is not on the analyzer's whitelist but is legitimate and expected for this software; the content is verified via a matching sha256sum and consists of portable .NET binaries and static assets, not executed scripts or obfuscated payloads.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source tarball from the project's official domain (download.technitium.com), which is not on the analyzer's whitelist but is legitimate and expected for this software; the content is verified via a matching sha256sum and consists of portable .NET binaries and static assets, not executed scripts or obfuscated payloads.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:14 source=("$_pkgname-$pkgver.tar.gz::https://download.technitium.com/dns/archive/$pkgver/DnsServerPortable.tar.gz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Owen Trigueros <owentrigueros@gmail.com>
2
3pkgname=technitium-dns-server-bin
4_pkgname=technitium-dns-server
5pkgver=15.4.0
6pkgrel=1
7pkgdesc="Open source authoritative and recursive DNS server focused on privacy and security"
8arch=('any')
9url="https://technitium.com/dns/"
10license=('GPL3')
11depends=('aspnet-runtime')
12conflicts=('technitium-dns-server')
13provides=('technitium-dns-server')
14source=("$_pkgname-$pkgver.tar.gz::https://download.technitium.com/dns/archive/$pkgver/DnsServerPortable.tar.gz"
15 "$_pkgname.service"
16 "$_pkgname.sysuser")
17sha256sums=('461ac09d4304ace85093fc17b10a7ee13a8796eae0adb4393866bd4d66ab283f'
18 '464dbfe1038e4737ca83c60617a5a4e334cdd948fe41315a3a36913011680952'
19 'd349d144faf8932c56a054b22721420f1eb68adf7bc226f174654b33510f75e4')
20
21package() {
22 cd "$srcdir"
23
24 install -Dm644 "$_pkgname.sysuser" "$pkgdir"/usr/lib/sysusers.d/$_pkgname.conf
25
26 for f in *.{dll,pdb}
27 do install -Dm 0644 $f "$pkgdir/opt/$_pkgname/$f"
28 done
29
30 install -Dm 0644 DnsServerApp.deps.json "$pkgdir/opt/$_pkgname/DnsServerApp.deps.json"
31 install -Dm 0644 DnsServerApp.runtimeconfig.json "$pkgdir/opt/$_pkgname/DnsServerApp.runtimeconfig.json"
32 install -Dm 0644 named.root "$pkgdir/opt/$_pkgname/named.root"
33 install -Dm 0644 root-anchors.xml "$pkgdir/opt/$_pkgname/root-anchors.xml"
34
35 cp -r www "$pkgdir/opt/$_pkgname/www"
36 cp -r dohwww "$pkgdir/opt/$_pkgname/dohwww"
37
38 install -dm755 "$pkgdir/opt/$_pkgname/config"
39
40 install -Dm 0644 "$_pkgname.service" "$pkgdir/usr/lib/systemd/system/$_pkgname.service"
41}
42

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion