dell-venue-8-pro-5830-wifi-firmware

LOW
maintainer cyrozap 0 votes scanned 2026-11-01 00:21:48.120785
View on AUR
Why flagged

The package downloads firmware files from Dell's official support domain and a GitHub repository; while the Dell host is non-standard, the files are non-executable firmware data, not code, and are used as intended by the hardware vendor.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads firmware files from Dell's official support domain and a GitHub repository; while the Dell host is non-standard, the files are non-executable firmware data, not code, and are used as intended by the hardware vendor.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:9 source=("https://downloads.dell.com/FOLDER04119992M/1/5830_Network_Driver_FG0HG_WN32_3.7.2.63715_A06.EXE"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Forest Crossman <cyrozap at gmail dot com>
2
3pkgname=dell-venue-8-pro-5830-wifi-firmware
4pkgver=1
5pkgrel=1
6pkgdesc="Firmware for the AR6004 WiFi controller in Dell Venue 8 Pro (5830 series) tablets"
7arch=('any')
8license=('custom')
9source=("https://downloads.dell.com/FOLDER04119992M/1/5830_Network_Driver_FG0HG_WN32_3.7.2.63715_A06.EXE"
10 "https://github.com/qca/ath6kl-firmware/raw/2e02576c1dab6fd35118eea1004f50aaaed3794f/ath6k/AR6004/hw3.0/fw-5.bin")
11sha256sums=("f5c6be179509d12b119ea171502fb6dabc391a88c4e3bf7812c7461d94147a8f"
12 "c2ea9b6fcadccd268fd8838f68a9cff80a6020f1dd60095a3a59bd8f437445f1")
13
14package() {
15 install -Dm 644 \
16 drivers/production/Windows8.1-x86/WLAN-Driver/boardDatav3_0.bin \
17 "${pkgdir}/usr/lib/firmware/ath6k/AR6004/hw3.0/bdata.bin"
18 install -Dm 644 \
19 fw-5.bin \
20 "${pkgdir}/usr/lib/firmware/ath6k/AR6004/hw3.0/fw-5.bin"
21}
22

Scan history

Scanned at (UTC)SeverityRules
2026-11-01 00:21:48 Low 2
2026-10-31 00:07:41 Low 2
2026-10-30 00:29:30 Low 2
2026-10-29 00:13:55 Low 2
2026-10-28 00:06:54 Low 2
2026-10-27 00:23:28 Low 2
2026-10-26 00:12:40 Low 2
2026-10-25 00:20:48 Low 2
2026-10-24 00:14:55 Low 2
2026-10-23 00:02:19 Low 2
2026-10-22 00:13:10 Low 2
2026-10-21 00:12:50 Low 2
2026-10-20 00:10:31 Low 2
2026-10-19 00:03:55 Low 2
2026-10-18 00:06:55 Low 2
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 00:06:47 Low 2
2026-10-13 00:23:45 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion