yfklog

maintainer not_anonymous · 4 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from the project's own domain (fkurz.net), which is plausibly official; building from a non-whitelisted but project-owned host with valid checksums is normal AUR packaging and not inherently dangerous.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's own domain (fkurz.net), which is plausibly official; building from a non-whitelisted but project-owned host with valid checksums is normal AUR packaging and not inherently dangerous.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:18 source=(http://fkurz.net/ham/$pkgname/$pkgname-$pkgver.tar.gz

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: not_anonymous <nmlibertarian@gmail.com>
    
      2# Contributor: Vitaliy Berdinskikh ur6lad[at]i.ua
    
      3# Original Submitter: Bob Finch <w9ya@qrpqrci.net>
    
      4
    
      5pkgname=yfklog
    
      6pkgver=0.7.0
    
      7pkgrel=1
    
      8pkgdesc="Yet Another Ham Radio Logbook - w/ LoTW & Ncurses based"
    
      9arch=('any')
    
      10url="http://fkurz.net/ham/yfklog.html"
    
      11license=('GPL' 'FDL')
    
      12depends=('xfce4-terminal' 'texlive-core' 'perl-curses' 'perl-dbd-sqlite' \
    
      13         'perl-net-telnet' 'perl-libwww' 'cty' 'hamradio-menus')
    
      14optdepends=('hamlib: for rig control'
    
      15	    'trustedqsl: for LOTW support'
    
      16	    'xplanet: for ploted output'
    
      17	    'fldigi: for digital mode interface')
    
      18source=(http://fkurz.net/ham/$pkgname/$pkgname-$pkgver.tar.gz
    
      19        http://fkurz.net/ham/$pkgname/doc/index.html
    
      20        $pkgname.desktop
    
      21        $pkgname.png
    
      22        diff.Makefile
    
      23        output.fix)
    
      24
    
      25prepare () {
    
      26	cd $srcdir/$pkgname-$pkgver
    
      27
    
      28	patch -p0 < ../diff.Makefile
    
      29	patch -p0 < ../output.fix
    
      30
    
      31	sed -i s:'yfklog/cty.dat':'cty/cty.dat': yfksubs.pl
    
      32}
    
      33
    
      34package() {
    
      35	cd $srcdir/$pkgname-$pkgver
    
      36
    
      37	mkdir -p $pkgdir/usr/share/$pkgname/docs
    
      38
    
      39	make DESTDIR=$pkgdir/usr install || return 1
    
      40	rm $pkgdir/usr/share/$pkgname/cty.dat
    
      41
    
      42	install -m644 CHANGELOG $pkgdir/usr/share/$pkgname/docs/
    
      43	install -m644 ../*.html $pkgdir/usr/share/$pkgname/docs/
    
      44
    
      45	mkdir -p $pkgdir/usr/share/{pixmaps,applications}
    
      46
    
      47	install -m644 ../*.desktop $pkgdir/usr/share/applications/
    
      48	install -m644 ../*.png $pkgdir/usr/share/pixmaps
    
      49}
    
      50md5sums=('a377feba353539c87bfe368c2f6e0a57'
    
      51         '68909c28b0a741ff2d98c8ac45a2a3e9'
    
      52         'd171a1a978e2ad4038de504b8767039d'
    
      53         '90b9267746f9b1f1ecd6842e5a308a28'
    
      54         '9dd16a491c0c2b0ec0d6cd9b01fde231'
    
      55         '9b0b0ed8e0c478d70115af6eb5b5574e')
    
      56sha256sums=('3f5f08abb6cf802ff39dd3e3c80b0f4348cee88d07d818bd32db51bd840d1668'
    
      57            '6286962654ee05cd8cb0ee703ed080ca4eae9507231fa3e8466092c98428fdba'
    
      58            'b86742fd763c22fea547bc4c9c11c9a87c148f5f582a07f5a4025e8258826ae4'
    
      59            'e54bf52aa79ac2a90b8a901d9eea37c04b4a5895daee4736dde65110abb7d49d'
    
      60            'b1f3da31f7ebd05f23d5cb8499add2ec109de3fcd375da6e7b0c20d7736c2386'
    
      61            '92499ca287891aa2da21f486e170f4a2f15dd7eb7c4d9cd9801bfafd682367d5')
    
      62

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2