cs9711-fingerprint-git
LOW
maintainer thankarezos
0 votes
scanned 2026-09-06 02:02:01.866548
Why flagged
The package builds a driver from a publicly accessible Git repository with no obfuscated downloads or remote code execution; the low severity is due to few votes and recent upload, not malicious content.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds a driver from a publicly accessible Git repository with no obfuscated downloads or remote code execution; the low severity is due to few votes and recent upload, not malicious content.
PKGBUILD
1
# Maintainer: thankarezos
2
# Based on packaging by Mahmud Farooque <farooque7@gmail.com>.
3
# Driver source remains archeYR's fork; url tracks the packaging project.
4
pkgname=cs9711-fingerprint-git
5
pkgver=r1866.02b285c
6
pkgrel=1
7
pkgdesc="Chipsailing CS9711 USB fingerprint scanner driver with 1500ms retry patch"
8
arch=('x86_64' 'aarch64')
9
url="https://github.com/thankarezos/chipsailing-cs9711-fingerprint-linux"
10
license=('LGPL-2.1-or-later')
11
depends=('glib2' 'libgusb' 'opencv')
12
13
provides=('libfprint' 'libfprint-2.so=2-64')
14
15
conflicts=('libfprint' 'libfprint-cs9711-rebase-git' 'cs9711-fingerprint')
16
17
optdepends=('fprintd: fingerprint enrollment and verification')
18
makedepends=('git' 'meson' 'ninja' 'pixman' 'cairo' 'openssl'
19
'doctest' 'gobject-introspection' 'cmake')
20
source=("git+https://github.com/archeYR/libfprint-CS9711.git")
21
sha256sums=('SKIP')
22
23
pkgver() {
24
cd "$srcdir/libfprint-CS9711"
25
printf 'r%s.%s' "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
26
}
27
28
prepare() {
29
cd "$srcdir/libfprint-CS9711"
30
# Apply 1500ms retry delay patch
31
sed -i 's/#define CS9711_DEFAULT_RESET_SLEEP.*/#define CS9711_DEFAULT_RESET_SLEEP 1500/' \
32
libfprint/drivers/cs9711/cs9711.c
33
# Make doctest optional (only needed for tests)
34
sed -i "s/dependency('doctest', required: true)/dependency('doctest', required: false)/" \
35
libfprint/sigfm/meson.build
36
sed -i '/^sigfm_tests/i if doctest.found()' libfprint/sigfm/meson.build
37
echo "endif" >> libfprint/sigfm/meson.build
38
# OpenCV version-resilient (issue #2) — inline copy of helpers/opencv-flex.sh:
39
# opencv4 -> opencv5 -> opencv pkg-config names, then CMake's OpenCV, so a
40
# distro OpenCV 4 -> 5 bump (CachyOS 2026-07) doesn't fail the build.
41
if ! grep -q "method: 'cmake'" libfprint/sigfm/meson.build; then
42
sed -i "s|opencv = dependency('opencv4', required: true)|opencv = dependency('opencv4', required: false)\nif not opencv.found()\n opencv = dependency('opencv5', required: false)\nendif\nif not opencv.found()\n opencv = dependency('opencv', required: false)\nendif\nif not opencv.found()\n opencv = dependency('OpenCV', method: 'cmake', required: true)\nendif|" \
43
libfprint/sigfm/meson.build
44
fi
45
}
46
47
build() {
48
cd "$srcdir/libfprint-CS9711"
49
meson setup builddir \
50
--prefix=/usr \
51
-Ddrivers=cs9711 \
52
-Dudev_rules=disabled \
53
-Dudev_hwdb=disabled \
54
-Ddoc=false \
55
-Dinstalled-tests=false \
56
-Dgtk-examples=false
57
meson compile -C builddir
58
}
59
60
package() {
61
cd "$srcdir/libfprint-CS9711"
62
DESTDIR="$pkgdir" meson install -C builddir
63
}
64
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-06 02:02:01 | Low | 2 |