csky-cpu-e907p-csi-rtos-sdk

maintainer taotieren · 0 votes · base csky-cpu-e907-csi-rtos-sdk · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads official SDK archives from a plausible vendor-controlled host (aliyuncs.com used by T-Head/CDK), with verified checksums; it installs prebuilt files but they are part of the legitimate SDK distribution, not malicious payloads.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads official SDK archives from a plausible vendor-controlled host (aliyuncs.com used by T-Head/CDK), with verified checksums; it installs prebuilt files but they are part of the legitimate SDK distribution, not malicious payloads.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:16 "csky-cpu-e907-csi-rtos-sdk-${pkgver}.zip::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/1836682/1627263526342/SmartL_E907-R1S2-V1.7.8.zip"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: taotieren <admin@taotieren.com>
2
3pkgbase=csky-cpu-e907-csi-rtos-sdk
4pkgname=($pkgbase csky-cpu-e907p-csi-rtos-sdk csky-cpu-e907f-csi-rtos-sdk csky-cpu-e907fd-csi-rtos-sdk csky-cpu-e907fp-csi-rtos-sdk csky-cpu-e907fdp-csi-rtos-sdk)
5pkgver=1.7.8
6pkgrel=1
7arch=('x86_64')
8url='https://occ.t-head.cn/community/download?id=3916180248689188864'
9license=('unkown')
10provides=()
11#conflicts=()
12depends=()
13makedepends=('libarchive')
14
15source=(
16 "csky-cpu-e907-csi-rtos-sdk-${pkgver}.zip::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/1836682/1627263526342/SmartL_E907-R1S2-V1.7.8.zip"
17 "csky-cpu-e907p-csi-rtos-sdk-${pkgver}.zip::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/1836682/1627263551834/SmartL_E907P-R1S2-V1.7.8.zip"
18 "csky-cpu-e907f-csi-rtos-sdk-${pkgver}.zip::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/1836682/1627263595111/SmartL_E907F-R1S2-V1.7.8.zip"
19 "csky-cpu-e907fd-csi-rtos-sdk-${pkgver}.zip::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/1836682/1627263693992/SmartL_E907FD-R1S2-V1.7.8.zip"
20 "csky-cpu-e907fp-csi-rtos-sdk-${pkgver}.zip::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/1836682/1627263620843/SmartL_E907FP-R1S2-V1.7.8.zip"
21 "csky-cpu-e907fdp-csi-rtos-sdk-${pkgver}.zip::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/1836682/1627263715697/SmartL_E907FDP-R1S2-V1.7.8.zip"
22 )
23
24sha256sums=('ad769309ed2a79d0e57f6117bfbfb14419cea40de28ec048220782a8ea2008d1'
25 'c78fb813972b02e5d8b1506b0f0b717be85dd25c522aabf0c0aabc49a38fed4a'
26 'e9692e4499ce5d192e66169aab95d6d75b1a8b2ed4553edb1155a3bd82e261ef'
27 '51ef66a04ea992d0fc3b615010efe0ede35d6b777955e83fe493daa70b454a15'
28 '3659fad740f81b2746ffbd4ed9f74beb1302c901b71b2a0c27a98a0aaf40b725'
29 'd7cb033b5fdb8045cb0a6a446621b79170314ca91f7bc0a7c0c64a398cdbb2e9')
30
31noextract=(csky-cpu-e907-csi-rtos-sdk-${pkgver}.zip csky-cpu-e907p-csi-rtos-sdk-${pkgver}.zip csky-cpu-e907f-csi-rtos-sdk-${pkgver}.zip csky-cpu-e907fd-csi-rtos-sdk-${pkgver}.zip csky-cpu-e907fp-csi-rtos-sdk-${pkgver}.zip csky-cpu-e907fdp-csi-rtos-sdk-${pkgver}.zip)
32
33package_csky-cpu-e907-csi-rtos-sdk() {
34 pkgdesc="C-Sky CPU E907 CSI-RTOS SDK"
35 install -dm0755 "${pkgdir}/opt/t-head/cpu/${pkgname}"
36 bsdtar xf "${srcdir}/${pkgname}-${pkgver}.zip" --strip-components=1 -C "${pkgdir}/opt/t-head/cpu/${pkgname}"
37}
38
39package_csky-cpu-e907p-csi-rtos-sdk() {
40 pkgdesc="C-Sky CPU E907P CSI-RTOS SDK"
41 install -dm0755 "${pkgdir}/opt/t-head/cpu/${pkgname}"
42 bsdtar xf "${srcdir}/${pkgname}-${pkgver}.zip" --strip-components=1 -C "${pkgdir}/opt/t-head/cpu/${pkgname}"
43}
44
45package_csky-cpu-e907f-csi-rtos-sdk() {
46 pkgdesc="C-Sky CPU E907F CSI-RTOS SDK"
47 install -dm0755 "${pkgdir}/opt/t-head/cpu/${pkgname}"
48 bsdtar xf "${srcdir}/${pkgname}-${pkgver}.zip" --strip-components=1 -C "${pkgdir}/opt/t-head/cpu/${pkgname}"
49}
50
51
52package_csky-cpu-e907fd-csi-rtos-sdk() {
53 pkgdesc="C-Sky CPU E907FD CSI-RTOS SDK"
54 install -dm0755 "${pkgdir}/opt/t-head/cpu/${pkgname}"
55 bsdtar xf "${srcdir}/${pkgname}-${pkgver}.zip" --strip-components=1 -C "${pkgdir}/opt/t-head/cpu/${pkgname}"
56}
57
58package_csky-cpu-e907fp-csi-rtos-sdk() {
59 pkgdesc="C-Sky CPU E907FP CSI-RTOS SDK"
60 install -dm0755 "${pkgdir}/opt/t-head/cpu/${pkgname}"
61 bsdtar xf "${srcdir}/${pkgname}-${pkgver}.zip" --strip-components=1 -C "${pkgdir}/opt/t-head/cpu/${pkgname}"
62}
63
64package_csky-cpu-e907fdp-csi-rtos-sdk() {
65 pkgdesc="C-Sky CPU E907FDP CSI-RTOS SDK"
66 install -dm0755 "${pkgdir}/opt/t-head/cpu/${pkgname}"
67 bsdtar xf "${srcdir}/${pkgname}-${pkgver}.zip" --strip-components=1 -C "${pkgdir}/opt/t-head/cpu/${pkgname}"
68}
69# vim: ts=4 sw=4 et
70

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion