arduino-app-lab-bin

LOW

maintainer dbirks 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The prebuilt binary is downloaded from downloads.arduino.cc, which is Arduino's own official download infrastructure, making it a legitimate vendor-supplied binary; the b2sum for the tarball is provided and verified, so the main risk is only the SKIP'd checksums for the bundled .desktop and .rules files (local/data files), which is a minor quality issue but not dangerous.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 75%): The prebuilt binary is downloaded from downloads.arduino.cc, which is Arduino's own official download infrastructure, making it a legitimate vendor-supplied binary; the b2sum for the tarball is provided and verified, so the main risk is only the SKIP'd checksums for the bundled .desktop and .rules files (local/data files), which is a minor quality issue but not dangerous.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:25 "${pkgname}-${pkgver}.tar.gz::https://downloads.arduino.cc/AppLab/Stable/ArduinoAppLab_${pkgver}_Linux_x86-64.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: David Birks <david@birks.dev>
    
      2
    
      3pkgname=arduino-app-lab-bin
    
      4pkgver=0.10.0
    
      5pkgrel=1
    
      6pkgdesc="Visual development environment for Arduino UNO Q and VENTUNO Q boards"
    
      7arch=('x86_64')
    
      8url="https://github.com/arduino/arduino-app-lab"
    
      9license=('GPL-3.0-only')
    
      10# Mirroring the Depends line of upstream's .deb metadata:
    
      11# https://github.com/arduino/arduino-app-lab/blob/al-0.10.0/standalone-apps/app-lab-desktop/build/debian/arduino-app-lab/DEBIAN/control
    
      12depends=(
    
      13  'gtk3'
    
      14  'webkit2gtk-4.1'
    
      15  'noto-fonts-emoji'
    
      16  'xdg-utils'
    
      17)
    
      18optdepends=(
    
      19  'arduino-flasher-cli: to flash Linux images onto the board from the CLI'
    
      20)
    
      21provides=('arduino-app-lab')
    
      22conflicts=('arduino-app-lab')
    
      23options=('!strip' '!debug')
    
      24source=(
    
      25  "${pkgname}-${pkgver}.tar.gz::https://downloads.arduino.cc/AppLab/Stable/ArduinoAppLab_${pkgver}_Linux_x86-64.tar.gz"
    
      26  "arduino-app-lab.png::https://raw.githubusercontent.com/arduino/arduino-app-lab/al-${pkgver}/standalone-apps/app-lab-desktop/build/debian/arduino-app-lab/usr/share/pixmaps/arduino-app-lab.png"
    
      27  'ArduinoAppLab.desktop'
    
      28  '99-arduino-app-lab.rules'
    
      29)
    
      30b2sums=('57520a91863c1ec7c68fe18ced9d4dae938c9374267857caf8f9f2f87109e78809d89182d54f7fbd8ec6b85992c71fc84de251bf08ae2d314beb2e514db6975e'
    
      31        'b6e3f7117da10f9660ef71344c6102b0a462edcae0333f83e8ad6dcc0fc19bc3cd21c2a787ee7b46e170aa93e3ed850b509fe2a535012b08cb697897c3719a89'
    
      32        'SKIP'
    
      33        'SKIP')
    
      34
    
      35package() {
    
      36  local _src="${srcdir}/ArduinoAppLab_${pkgver}_Linux_x86-64"
    
      37
    
      38  # Install the binary to /opt and symlink it into /usr/bin
    
      39  install -Dm755 "${_src}/arduino-app-lab" "${pkgdir}/opt/arduino-app-lab/arduino-app-lab"
    
      40  install -dm755 "${pkgdir}/usr/bin"
    
      41  ln -s /opt/arduino-app-lab/arduino-app-lab "${pkgdir}/usr/bin/arduino-app-lab"
    
      42
    
      43  # Install desktop file and icon
    
      44  install -Dm644 "${srcdir}/ArduinoAppLab.desktop" \
    
      45    "${pkgdir}/usr/share/applications/ArduinoAppLab.desktop"
    
      46  install -Dm644 "${srcdir}/arduino-app-lab.png" \
    
      47    "${pkgdir}/usr/share/pixmaps/arduino-app-lab.png"
    
      48
    
      49  # Install udev rules for the board
    
      50  install -Dm644 "${srcdir}/99-arduino-app-lab.rules" \
    
      51    "${pkgdir}/usr/lib/udev/rules.d/99-arduino-app-lab.rules"
    
      52
    
      53  # Install third-party notices shipped in the archive
    
      54  install -dm755 "${pkgdir}/usr/share/licenses/${pkgname}"
    
      55  cp -a "${_src}/licenses/." "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      56}
    
      57

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	3
2026-10-16 00:12:47	Low	3
2026-10-15 00:28:05	Low	3
2026-10-14 00:06:47	Low	3
2026-10-13 05:17:17	Low	3
2026-10-13 05:15:42	Medium	2