alliedvision-vimba-x

LOW

maintainer oysstu 0 votes scanned 2026-10-02 00:00:32.890515

View on AUR

Why flagged

The package downloads the official Vimba X SDK from Allied Vision's own domain, which is the legitimate source; the non-whitelisted host is the vendor's official site, and the build process recompiles parts of the code, but installs some prebuilt libraries and data files, posing minimal risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads the official Vimba X SDK from Allied Vision's own domain, which is the legitimate source; the non-whitelisted host is the vendor's official site, and the build process recompiles parts of the code, but installs some prebuilt libraries and data files, posing minimal risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source_x86_64=("https://www.alliedvision.com/downloads/software/Vimba_X/VimbaX_Setup-${_pkgver_short_dash}-Linux64.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Oystein Sture <oysstu at gmail.com>
    
      2# Contributor:
    
      3
    
      4pkgname=alliedvision-vimba-x
    
      5_pkgver=2026.2.0
    
      6_pkgver_short=${_pkgver::6}
    
      7_pkgver_short_dash=${_pkgver_short//./-}
    
      8pkgver=$_pkgver
    
      9pkgrel=1
    
      10pkgdesc="Allied Vision Vimba X SDK"
    
      11url="https://www.alliedvision.com/en/products/software/vimba-x-sdk"
    
      12arch=('x86_64' 'aarch64')
    
      13license=('custom')
    
      14depends=('glibc' 'gcc-libs')
    
      15makedepends=('cmake' 'gcc')
    
      16source_x86_64=("https://www.alliedvision.com/downloads/software/Vimba_X/VimbaX_Setup-${_pkgver_short_dash}-Linux64.tar.gz")
    
      17source_aarch64=("https://www.alliedvision.com/downloads/software/Vimba_X/VimbaX_Setup-${_pkgver_short_dash}-Linux_ARM64.tar.gz")
    
      18sha256sums_x86_64=('45eb34db03e7311ad3cf309c89fc13ddba8b3fd860082a4698198731963faa44')
    
      19sha256sums_aarch64=('bc223962fc393878c71a6efce8215ce231cc3089bb1a85fffc6fb6eeee43c091')
    
      20
    
      21
    
      22build() {
    
      23    export CMAKE_POLICY_VERSION_MINIMUM=3.5
    
      24
    
      25    # Re-build the distributed C++ binaries from source
    
      26    cd "$srcdir/VimbaX_${_pkgver_short_dash}/api/source/VmbCPP"
    
      27    mkdir -p build
    
      28    cd build
    
      29    cmake -DCMAKE_LIBRARY_ARCHITECTURE="$CARCH-linux-gnu" ..
    
      30    make
    
      31}
    
      32
    
      33package() {
    
      34    cd "${srcdir}/VimbaX_${_pkgver_short_dash}"
    
      35
    
      36    # Install distributed headers/binaries
    
      37    mkdir -p "${pkgdir}/usr/include"
    
      38    cp -r "api/include" "${pkgdir}/usr/"
    
      39    cp -r "api/lib" "${pkgdir}/usr/lib"
    
      40
    
      41    # Install re-built cpp wrapper and generated headers
    
      42    install -m644 "api/source/VmbCPP/build/libVmbCPP.so" "${pkgdir}/usr/lib/libVmbCPP.so"
    
      43    cp -r "api/source/VmbCPP/build/VmbCppGenIncludes/" "${pkgdir}/usr/include"
    
      44
    
      45    # Install transport layers
    
      46    mkdir -p "${pkgdir}/usr/share/${pkgname}"
    
      47    cp -r "cti" "${pkgdir}/usr/share/${pkgname}"
    
      48
    
      49    # Export transport layer location
    
      50    mkdir -p "${pkgdir}/etc/profile.d/"
    
      51    printf "#!/bin/sh\nexport GENICAM_GENTL64_PATH=$GENICAM_GENTL64_PATH:\"/usr/share/${pkgname}/cti\"\n" > ${pkgdir}/etc/profile.d/AVT_CTI.sh
    
      52    chmod +x ${pkgdir}/etc/profile.d/AVT_CTI.sh
    
      53
    
      54    # Create udev rule for USB
    
      55    _udev_dir=${pkgdir}/etc/udev/rules.d/
    
      56    _udev_file=${_udev_dir}/99-AVTUSBTL.rules
    
      57    mkdir -p "${_udev_dir}"
    
      58    printf "SUBSYSTEM==\"usb\", ACTION==\"add\", ATTRS{idVendor}==\"1ab2\", ATTRS{idProduct}==\"0001\", MODE=\"0666\"\nSUBSYSTEM==\"usb\", ACTION==\"add\", ATTRS{idVendor}==\"1ab2\", ATTRS{idProduct}==\"ff01\", MODE=\"0666\"\n" > ${_udev_file}
    
      59}
    
      60

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2
2026-09-27 00:07:07	Low	2
2026-09-26 00:12:15	Low	2
2026-09-25 00:03:36	Low	2
2026-09-24 00:24:14	Low	2
2026-09-23 00:28:13	Low	2
2026-09-22 00:15:14	Low	2
2026-09-21 00:26:32	Low	2
2026-09-20 00:25:31	Low	2
2026-09-19 00:25:36	Low	2
2026-09-18 00:17:11	Low	2
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2