alliedvision-vimba-x
maintainer oysstu
· 0 votes
· scanned 2026-08-18 00:03:42.021799
LOW
View on AUR ↗
Why flagged
The package downloads the official Vimba X SDK from Allied Vision's own domain, which is the legitimate source; the non-whitelisted host is the vendor's official site, and the build process recompiles parts of the code, but installs some prebuilt libraries and data files, posing minimal risk.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads the official Vimba X SDK from Allied Vision's own domain, which is the legitimate source; the non-whitelisted host is the vendor's official site, and the build process recompiles parts of the code, but installs some prebuilt libraries and data files, posing minimal risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:16
source_x86_64=("https://www.alliedvision.com/downloads/software/Vimba_X/VimbaX_Setup-${_pkgver_short_dash}-Linux64.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Oystein Sture <oysstu at gmail.com>
2
# Contributor:
3
4
pkgname=alliedvision-vimba-x
5
_pkgver=2026.2.0
6
_pkgver_short=${_pkgver::6}
7
_pkgver_short_dash=${_pkgver_short//./-}
8
pkgver=$_pkgver
9
pkgrel=1
10
pkgdesc="Allied Vision Vimba X SDK"
11
url="https://www.alliedvision.com/en/products/software/vimba-x-sdk"
12
arch=('x86_64' 'aarch64')
13
license=('custom')
14
depends=('glibc' 'gcc-libs')
15
makedepends=('cmake' 'gcc')
16
source_x86_64=("https://www.alliedvision.com/downloads/software/Vimba_X/VimbaX_Setup-${_pkgver_short_dash}-Linux64.tar.gz")
17
source_aarch64=("https://www.alliedvision.com/downloads/software/Vimba_X/VimbaX_Setup-${_pkgver_short_dash}-Linux_ARM64.tar.gz")
18
sha256sums_x86_64=('45eb34db03e7311ad3cf309c89fc13ddba8b3fd860082a4698198731963faa44')
19
sha256sums_aarch64=('bc223962fc393878c71a6efce8215ce231cc3089bb1a85fffc6fb6eeee43c091')
20
21
22
build() {
23
export CMAKE_POLICY_VERSION_MINIMUM=3.5
24
25
# Re-build the distributed C++ binaries from source
26
cd "$srcdir/VimbaX_${_pkgver_short_dash}/api/source/VmbCPP"
27
mkdir -p build
28
cd build
29
cmake -DCMAKE_LIBRARY_ARCHITECTURE="$CARCH-linux-gnu" ..
30
make
31
}
32
33
package() {
34
cd "${srcdir}/VimbaX_${_pkgver_short_dash}"
35
36
# Install distributed headers/binaries
37
mkdir -p "${pkgdir}/usr/include"
38
cp -r "api/include" "${pkgdir}/usr/"
39
cp -r "api/lib" "${pkgdir}/usr/lib"
40
41
# Install re-built cpp wrapper and generated headers
42
install -m644 "api/source/VmbCPP/build/libVmbCPP.so" "${pkgdir}/usr/lib/libVmbCPP.so"
43
cp -r "api/source/VmbCPP/build/VmbCppGenIncludes/" "${pkgdir}/usr/include"
44
45
# Install transport layers
46
mkdir -p "${pkgdir}/usr/share/${pkgname}"
47
cp -r "cti" "${pkgdir}/usr/share/${pkgname}"
48
49
# Export transport layer location
50
mkdir -p "${pkgdir}/etc/profile.d/"
51
printf "#!/bin/sh\nexport GENICAM_GENTL64_PATH=$GENICAM_GENTL64_PATH:\"/usr/share/${pkgname}/cti\"\n" > ${pkgdir}/etc/profile.d/AVT_CTI.sh
52
chmod +x ${pkgdir}/etc/profile.d/AVT_CTI.sh
53
54
# Create udev rule for USB
55
_udev_dir=${pkgdir}/etc/udev/rules.d/
56
_udev_file=${_udev_dir}/99-AVTUSBTL.rules
57
mkdir -p "${_udev_dir}"
58
printf "SUBSYSTEM==\"usb\", ACTION==\"add\", ATTRS{idVendor}==\"1ab2\", ATTRS{idProduct}==\"0001\", MODE=\"0666\"\nSUBSYSTEM==\"usb\", ACTION==\"add\", ATTRS{idVendor}==\"1ab2\", ATTRS{idProduct}==\"ff01\", MODE=\"0666\"\n" > ${_udev_file}
59
}
60
Changes since previous scan
--- PKGBUILD @ 2026-06-20 00:18+++ PKGBUILD @ 2026-08-18 00:03@@ -2,7 +2,7 @@ # Contributor: pkgname=alliedvision-vimba-x-_pkgver=2026.1.0+_pkgver=2026.2.0 _pkgver_short=${_pkgver::6} _pkgver_short_dash=${_pkgver_short//./-} pkgver=$_pkgver@@ -13,10 +13,10 @@ license=('custom') depends=('glibc' 'gcc-libs') makedepends=('cmake' 'gcc')-source_x86_64=("https://allied-vision-web.atw.io/downloads/software/Vimba_X/VimbaX_Setup-${_pkgver_short_dash}-Linux64.tar.gz")-source_aarch64=("https://allied-vision-web.atw.io/downloads/software/Vimba_X/VimbaX_Setup-${_pkgver_short_dash}-Linux_ARM64.tar.gz")-sha256sums_x86_64=('74ca5b7dec96ae4845e54afc551cf2343f0beea6ac6d79811263da14781cc5c9')-sha256sums_aarch64=('b8f08149ca77786a98dc412d3c1b588ea7849f5163cc85d622908dd3cb242860')+source_x86_64=("https://www.alliedvision.com/downloads/software/Vimba_X/VimbaX_Setup-${_pkgver_short_dash}-Linux64.tar.gz")+source_aarch64=("https://www.alliedvision.com/downloads/software/Vimba_X/VimbaX_Setup-${_pkgver_short_dash}-Linux_ARM64.tar.gz")+sha256sums_x86_64=('45eb34db03e7311ad3cf309c89fc13ddba8b3fd860082a4698198731963faa44')+sha256sums_aarch64=('bc223962fc393878c71a6efce8215ce231cc3089bb1a85fffc6fb6eeee43c091') build() {Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-18 00:03:42 | LOW | 2 |
| 2026-08-17 00:18:29 | LOW | 2 |
| 2026-08-16 00:03:42 | LOW | 2 |
| 2026-08-15 00:26:13 | LOW | 2 |
| 2026-08-14 00:03:41 | LOW | 2 |
| 2026-08-13 13:26:16 | MEDIUM | 1 |
| 2026-06-20 00:18:46 | MEDIUM | 1 |
| 2026-06-19 23:51:18 | CLEAN | 2 |
| 2026-06-19 19:07:35 | LOW | 2 |
| 2026-06-18 16:11:54 | MEDIUM | 1 |