csky-cpu-e902-csi-rtos-sdk
LOW
maintainer taotieren
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads SDK source archives from an official Alibaba Cloud OSS bucket linked to the vendor's community site;虽host非标准 whitelist,但属厂商官方发布渠道，且内容为可验证的静态开发套件，无执行远程代码或隐蔽载荷风险
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads SDK source archives from an official Alibaba Cloud OSS bucket linked to the vendor's community site;虽host非标准 whitelist,但属厂商官方发布渠道，且内容为可验证的静态开发套件，无执行远程代码或隐蔽载荷风险
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:16
"csky-cpu-e902-csi-rtos-sdk-${pkgver}.zip::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/1836682/1617782454340/SmartL_E902_RV32EC-R2S0P0-V1.7.3.zip"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: taotieren <admin@taotieren.com>
2
3
pkgbase=csky-cpu-e902-csi-rtos-sdk
4
pkgname=($pkgbase csky-cpu-e902m-csi-rtos-sdk)
5
pkgver=1.7.3
6
pkgrel=1
7
arch=('x86_64')
8
url='https://occ.t-head.cn/community/download?id=3916180248689188864'
9
license=('unkown')
10
provides=()
11
#conflicts=()
12
depends=()
13
makedepends=('libarchive')
14
15
source=(
16
"csky-cpu-e902-csi-rtos-sdk-${pkgver}.zip::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/1836682/1617782454340/SmartL_E902_RV32EC-R2S0P0-V1.7.3.zip"
17
"csky-cpu-e902m-csi-rtos-sdk-${pkgver}.zip::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/1836682/1617782485250/SmartL_E902M_RV32EMC-R2S0P0-V1.7.3.zip"
18
)
19
20
sha256sums=('2338700dd1f430444584fd6b2f4c01569712a18081d98fff811c57f880cb2f67'
21
'c8503fcae29c3c6f6c968b3a08f208acf58ae9770248188885a525810c9347c5')
22
23
noextract=(csky-cpu-e902-csi-rtos-sdk-${pkgver}.zip csky-cpu-e902m-csi-rtos-sdk-${pkgver}.zip)
24
25
package_csky-cpu-e902-csi-rtos-sdk() {
26
pkgdesc="C-Sky CPU E902 CSI-RTOS SDK"
27
install -dm0755 "${pkgdir}/opt/t-head/cpu/${pkgname}"
28
bsdtar xf "${srcdir}/${pkgname}-${pkgver}.zip" --strip-components=1 -C "${pkgdir}/opt/t-head/cpu/${pkgname}"
29
}
30
31
package_csky-cpu-e902m-csi-rtos-sdk() {
32
pkgdesc="C-Sky CPU E902M CSI-RTOS SDK"
33
install -dm0755 "${pkgdir}/opt/t-head/cpu/${pkgname}"
34
bsdtar xf "${srcdir}/${pkgname}-${pkgver}.zip" --strip-components=1 -C "${pkgdir}/opt/t-head/cpu/${pkgname}"
35
}
36
# vim: ts=4 sw=4 et
37
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |