artery-isp-console-bin
LOW
maintainer taotieren
2 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a prebuilt binary from the official vendor's domain (arterytek.com), which is plausibly the project's own release infrastructure; the source is not executed in an untrusted context, and the worst case of a swapped source is limited to supply-chain risk from the vendor, which is typical for proprietary tools.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt binary from the official vendor's domain (arterytek.com), which is plausibly the project's own release infrastructure; the source is not executed in an untrusted context, and the worst case of a swapped source is limited to supply-chain risk from the vendor, which is typical for proprietary tools.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:26
source=("${_pkg_file_name}::https://www.arterytek.com/download/Program%20and%20Debug/Artery_ISP_Console_Linux-${arch}_V${pkgver}.zip"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: taotieren <admin@taotieren.com>
2
3
pkgname=artery-isp-console-bin
4
pkgver=3.0.23
5
pkgrel=1
6
# epoch=1
7
pkgdesc="Artery ISP Console 是一款基于 MCU Bootloader 的命令行应用程序。使用该应用程序,用户可以通过 UART 端口或者 USB 端口配置操作 Artery 的 MCU 设备。"
8
arch=('x86_64')
9
url="https://www.arterytek.com/cn/support/tools.jsp"
10
license=('LicenseRef-Commercial')
11
provides=(${pkgname%-bin} Artery_ISP_Console)
12
conflicts=(${pkgname%-bin})
13
replaces=()
14
depends=(
15
bash
16
qt5-base
17
libgcc_s.so
18
libstdc++.so
19
libusb
20
)
21
makedepends=('unzip')
22
backup=()
23
options=('!strip' '!debug' '!lto')
24
install=${pkgname}.install
25
_pkg_file_name=Artery_ISP_Console_Linux-${arch}_V${pkgver}.zip
26
source=("${_pkg_file_name}::https://www.arterytek.com/download/Program%20and%20Debug/Artery_ISP_Console_Linux-${arch}_V${pkgver}.zip"
27
${pkgname}.install)
28
sha256sums=('5c4a841796edeb67a27e01763cfc2c838875160b4687af48a900bc2406bc9cce'
29
'a5c4d923298e09eef75b9481ea4fd83998d01c1d3605f118edd42f89ee17e619')
30
noextract=()
31
32
package() {
33
unzip -O gbk -o "${srcdir}"/${_pkg_file_name} -d "${srcdir}"
34
35
cd "${srcdir}/"
36
install -dm0755 "${pkgdir}/opt/artery32/${pkgname%-bin}/" \
37
"${pkgdir}/usr/lib/"
38
39
cp -rv Document "${pkgdir}/opt/artery32/${pkgname%-bin}/Document"
40
cp -rv *.pdf "${pkgdir}/opt/artery32/${pkgname%-bin}/Document"
41
42
cd ${_pkg_file_name%.zip}
43
cp -rv Map "${pkgdir}/opt/artery32/${pkgname%-bin}/Map"
44
install -Dm0755 AT32_ISP_Console "${pkgdir}/opt/artery32/${pkgname%-bin}/AT32_ISP_Console"
45
install -dm0755 "${pkgdir}/usr/lib"
46
cp -rv {libAT*.so*,libFiles.so*} "${pkgdir}/usr/lib"
47
# install -Dm0644 AT32_ISP_Console.sh "${pkgdir}/opt/artery32/${pkgname%-bin}/AT32_ISP_Console.sh.template"
48
install -Dm0644 DFU_download.sh "${pkgdir}/opt/artery32/${pkgname%-bin}/DFU_download.sh.template"
49
install -Dm0644 I2C_download.sh "${pkgdir}/opt/artery32/${pkgname%-bin}/I2C_download.sh.template"
50
install -Dm0644 SPI_download.sh "${pkgdir}/opt/artery32/${pkgname%-bin}/SPI_download.sh.template"
51
install -Dm0644 USART_download.sh "${pkgdir}/opt/artery32/${pkgname%-bin}/USART_download.sh.template"
52
53
cd "${pkgdir}/usr/lib/"
54
for lib in lib*; do
55
ln -sf /usr/lib/"$lib" "${pkgdir}/usr/lib/${lib%.0.0}"
56
ln -sf /usr/lib/"$lib" "${pkgdir}/usr/lib/${lib%.1.0.0}"
57
done
58
59
install -Dm0644 /dev/stdin "${pkgdir}/usr/lib/udev/rules.d/49-artery32-udev.rules" <<EOF
60
# Copy this file to /etc/udev/rules.d/
61
# If rules fail to reload automatically, you can refresh udev rules
62
# with the command "udevadm control --reload"
63
64
ACTION!="add|change", GOTO="artery32_udev_rules_end"
65
66
SUBSYSTEM=="gpio", MODE="0660", TAG+="uaccess"
67
68
SUBSYSTEM!="usb|tty|hidraw", GOTO="artery32_udev_rules_end"
69
70
# Artery tek
71
ATTRS{idVendor}=="2e3c", ATTRS{idProduct}=="f000", MODE="660", TAG+="uaccess"
72
ATTRS{idVendor}=="2e3c", ATTRS{idProduct}=="df11", MODE="660", TAG+="uaccess"
73
74
# If you share your linux system with other users, or just don't like the
75
# idea of write permission for everybody, you can replace MODE:="0666" with
76
# OWNER:="yourusername" to create the device owned by you, or with
77
# GROUP:="somegroupname" and mange access using standard unix groups.
78
79
LABEL="artery32_udev_rules_end"
80
EOF
81
82
install -Dm0755 /dev/stdin "${pkgdir}/usr/bin/${pkgname%-bin}" <<EOF
83
#!/bin/bash
84
/opt/artery32/${pkgname%-bin}/AT32_ISP_Console "\$@"
85
EOF
86
chown -R root:root "${pkgdir}/"
87
}
88
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |