at32-openocd-bin

maintainer taotieren · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads a prebuilt binary from the official ArteryTek domain for a legitimate development tool, which is normal for vendor-provided software; the non-whitelisted host is the vendor's own site, and the checksum is verified.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt binary from the official ArteryTek domain for a legitimate development tool, which is normal for vendor-provided software; the non-whitelisted host is the vendor's own site, and the checksum is verified.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:35 source=("${_pkg_file_name}.zip::https://www.arterytek.com/download/AT32%20IDE/${_pkg_file_name}.zip")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: taotieren <admin@taotieren.com>
2
3pkgname=at32-openocd-bin
4pkgver=2.1.0
5pkgrel=1
6# epoch=1
7pkgdesc="AT32 OpenOCD 支持 AT32 MCU调试、编程及边界扫描"
8arch=('x86_64')
9url="https://www.arterytek.com/cn/support/tools.jsp"
10license=('LicenseRef-scancode-commercial-license')
11provides=(at32-openocd AT32OpenOCD)
12conflicts=(at32-openocd AT32OpenOCD)
13replaces=()
14depends=(
15 bash
16 glibc
17 hidapi
18 libusb
19)
20makedepends=(
21 libarchive
22 sed
23)
24optdepends=(
25 'at32-ide-bin: AT32 IDE 是个跨平台 ARM 嵌入式系统的软件开发环境。 它包含一系列的 Eclipse 插件和工具。该插件可让用户在 AT32 IDE 开发环境下创建、建置和调试 AT32 MCU。'
26 'artery-isp-console: Artery ISP Console 是一款基于 MCU Bootloader 的命令行应用程序。使用该应用程序,用户可以通过 UART 端口或者 USB 端口配置操作 Artery 的 MCU 设备。'
27 'at32-ide-project-generate: AT32 IDE 是个跨平台 ARM 嵌入式系统的软件开发环境。 它包含一系列的 Eclipse 插件和工具。该插件可让用户在 AT32 IDE 开发环境下创建、建置和调试 AT32 MCU。'
28 'at-link-console: Artery AT LINK Console 是一款基于 MCU Bootloader 的命令行应用程序。支持AT32 MCU「在电路编程」Console工具'
29 'at32-work-bench: AT32 MCU 图形化配置软件,生成初始化 C 代码(目前仅支持 AT32F421 系列)'
30 'jlink-software-and-documentation: Segger JLink software & documentation pack for Linux')
31backup=()
32options=(!strip !emptydirs !staticlibs)
33install=${pkgname}.install
34_pkg_file_name=OpenOCD_Linux_${arch//_/-}_V${pkgver}
35source=("${_pkg_file_name}.zip::https://www.arterytek.com/download/AT32%20IDE/${_pkg_file_name}.zip")
36sha256sums=('3707a4e2610a04f65964eba91c1da2d014b867d296532f343760f48e5f5d5726')
37noextract=(${_pkg_file_name}.zip)
38
39package() {
40 install -dm0755 "${pkgdir}/opt/artery32/${pkgname%-bin}/"
41
42 bsdtar -xf ${srcdir}/${_pkg_file_name}.zip -C "${pkgdir}/opt/artery32/${pkgname%-bin}/"
43
44 install -Dm0755 /dev/stdin "${pkgdir}/usr/bin/${pkgname%-bin}" <<EOF
45#!/bin/bash
46/opt/artery32/${pkgname%-bin}/openocd "\$@"
47EOF
48
49 install -Dm0644 "${pkgdir}/opt/artery32/${pkgname%-bin}/contrib/60-openocd.rules" "${pkgdir}/etc/udev/rules.d/60-openocd-${pkgname%-bin}.rules"
50 sed -i 's|openocd_rules|openocd_at32_openocd_rules|g' "${pkgdir}/etc/udev/rules.d/60-openocd-${pkgname%-bin}.rules"
51
52 install -Dm0644 /dev/stdin "${pkgdir}/usr/share/metainfo/com.arterytek.at32openocd.metainfo.xml" <<EOF
53<?xml version="1.0" encoding="UTF-8"?>
54<component type="desktop-application">
55 <id>com.arterytek.at32openocd</id>
56
57 <name>AT32OpenOCD</name>
58 <summary>AT32OpenOCD</summary>
59
60 <metadata_license>MIT</metadata_license>
61 <project_license>GPL-2.0-or-later</project_license>
62
63 <description>
64 <p>
65 AT32 OpenOCD 支持 AT32 MCU调试、编程及边界扫描
66 </p>
67 </description>
68
69 <launchable type="desktop-id">com.arterytek.at32openocd.desktop</launchable>
70</component>
71EOF
72
73 install -Dm0644 /dev/stdin "${pkgdir}/usr/share/applications/com.arterytek.at32openocd.desktop" <<EOF
74[Desktop Entry]
75Version=1.0
76Type=Application
77
78Name=AT32OpenOCD
79Comment=AT32OpenOCD
80Categories=Development;Electronics;
81
82Icon=${pkgname%-bin}
83Exec=${pkgname%-bin}
84Terminal=false
85EOF
86 chown -R root:root "${pkgdir}/"
87}
88

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion