aprstac-bin

maintainer 9M2PJU · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package installs a pre-compiled binary from the project's official domain (aprstac.com), which is not on the analyzer's whitelist but is plausibly legitimate; checksums are provided and match the official release, and no remote code execution or obfuscation is present.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package installs a pre-compiled binary from the project's official domain (aprstac.com), which is not on the analyzer's whitelist but is plausibly legitimate; checksums are provided and match the official release, and no remote code execution or obfuscation is present.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:14 source_x86_64=("aprstac-${pkgver}-x86_64.deb::https://aprstac.com/downloads/aprstac_${pkgver}_amd64.deb")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: 9M2PJU <9m2pju@gmail.com>
    
      2pkgname=aprstac-bin
    
      3pkgver=0.2.1
    
      4pkgrel=2
    
      5pkgdesc="A modern APRS web client, digipeater, IGate, BBS, and fileshare (pre-compiled binary)"
    
      6arch=('x86_64' 'aarch64')
    
      7url="https://aprstac.com/"
    
      8license=('custom:proprietary')
    
      9depends=()
    
      10provides=('aprstac')
    
      11conflicts=('aprstac')
    
      12source=('LICENSE'
    
      13        'aprstac.desktop')
    
      14source_x86_64=("aprstac-${pkgver}-x86_64.deb::https://aprstac.com/downloads/aprstac_${pkgver}_amd64.deb")
    
      15source_aarch64=("aprstac-${pkgver}-aarch64.deb::https://aprstac.com/downloads/aprstac_${pkgver}_arm64.deb")
    
      16sha256sums=('d2309a72446dac53dbe391ec2e8972f2fccbc6a06ab144c9011d5bd419c998e7'
    
      17            '6c57b27e9502b24d45105c6bd64f4e692750f485611285a92a75a87c5ffd2a12')
    
      18sha256sums_x86_64=('30394793fce1efcd89db745f7c6efecee4e62b7795fc02de0ccf11f129c9019a')
    
      19sha256sums_aarch64=('219e4b5d4b518156b03890dce243af8b6dbed7c286eda26561c41e353aa5e209')
    
      20
    
      21package() {
    
      22  # Extract data.tar.xz to the package root.
    
      23  # makepkg automatically extracts the downloaded .deb ar archive into $srcdir.
    
      24  # We extract the inner data archive to $pkgdir.
    
      25  bsdtar -xf "$srcdir/data.tar.xz" -C "$pkgdir/" --no-same-owner
    
      26  find "$pkgdir" -type d -exec chmod 755 {} +
    
      27  find "$pkgdir" -type f -exec chmod go-w {} +
    
      28
    
      29  # Align systemd service path with Arch Linux packaging standards
    
      30  # (Debian uses /etc/systemd/system, Arch packages use /usr/lib/systemd/system)
    
      31  install -d "$pkgdir/usr/lib/systemd/system"
    
      32  mv "$pkgdir/etc/systemd/system/aprstac.service" "$pkgdir/usr/lib/systemd/system/"
    
      33  rm -rf "$pkgdir/etc"
    
      34
    
      35  # Install enhanced desktop entry (adds GenericName, Keywords for Ham Radio menu integration)
    
      36  install -Dm644 "$srcdir/aprstac.desktop" "$pkgdir/usr/share/applications/aprstac.desktop"
    
      37
    
      38  # Install the custom license file
    
      39  install -Dm644 "$srcdir/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      40}
    
      41

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2