digilent.adept.utilities

LOW
maintainer mrrb 10 votes scanned 2026-11-01 00:21:48.120785
View on AUR
Why flagged

The package downloads prebuilt .deb files from Digilent's official domain (files.digilent.com), which is the vendor's legitimate distribution infrastructure; despite the static analyzer flag for a non-whitelisted host, the source is trustworthy and the files are verified with sha512 checksums, limiting supply-chain risk to low.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt .deb files from Digilent's official domain (files.digilent.com), which is the vendor's legitimate distribution infrastructure; despite the static analyzer flag for a non-whitelisted host, the source is trustworthy and the files are verified with sha512 checksums, limiting supply-chain risk to low.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:17 source_i686=("https://files.digilent.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-i386.deb")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Mario Rubio <mario at mrrb dot eu>
2# Contributor: Amr Okasha <amradel55 at gmail dot com>
3# Contributor: Knight <anonymousknight96 at gmail dot com>
4pkgname=digilent.adept.utilities
5pkgver=2.7.1
6pkgrel=4
7pkgdesc="Digilent Adept Utilities."
8arch=('i686' 'x86_64' 'aarch64' 'armhf')
9url="https://digilent.com/reference/software/adept/start"
10license=('custom')
11depends=('digilent.adept.runtime>=2.21.2')
12options=('!strip' '!emptydirs')
13
14# Custom DLAGENTS to set user agent and prevent 403s
15DLAGENTS=('https::/usr/bin/curl -qg -A pacman -fLC - --retry 3 --retry-delay 3 -o %o %u')
16
17source_i686=("https://files.digilent.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-i386.deb")
18source_x86_64=("https://files.digilent.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-amd64.deb")
19source_aarch64=("https://files.digilent.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-arm64.deb")
20source_armhf=("https://files.digilent.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-armhf.deb")
21
22sha512sums_i686=('2d4b3674cb60c70466eb12b65c07ba498ac6a699ef920014e7e1ada9ff4f1eaa8374e5ae7f79529acfefc7326f24fe1681343f2a82d34737945d4dae58a85ff2')
23sha512sums_x86_64=('535381d9638703a184227c31814a548571e77513d094cf0bea91b8c31cfb1bb563c2ac9bfae70a99d6de13d8cc73bd3177d3efcbe666f0a79d4afacf720ad04b')
24sha512sums_aarch64=('e147662cbf5e6e5991358677fa9c32704a5bfc167f327154b6058bb93c7ffe0ec082e338b3d96b9d1923305b85248c7d6c7874af6b3e471fc14025b36c341c27')
25sha512sums_armhf=('9d1730fd532d211b4f9c6f046a67a9f5e265e17e2ee1ad70fc340958a5e058db39987fdcb6a65bf08e0509c963773a10bcd7d019fe05758523d440918c99eb64')
26
27package(){
28 # Extract package data
29 tar -xJf data.tar.xz -C "${pkgdir}"/
30
31 install -dm 755 "${pkgdir}/usr/share/licenses/${pkgname}"
32 ln -s "/usr/share/doc/${pkgname}/copyright" "${pkgdir}/usr/share/licenses/${pkgname}/copyright"
33 ln -s "/usr/share/doc/${pkgname}/EULA" "${pkgdir}/usr/share/licenses/${pkgname}/EULA"
34}
35

Changes since previous scan

--- PKGBUILD @ 2026-10-17 00:21
+++ PKGBUILD @ 2026-11-01 00:21
@@ -3,7 +3,7 @@
# Contributor: Knight <anonymousknight96 at gmail dot com>
pkgname=digilent.adept.utilities
pkgver=2.7.1
-pkgrel=2
+pkgrel=4
pkgdesc="Digilent Adept Utilities."
arch=('i686' 'x86_64' 'aarch64' 'armhf')
url="https://digilent.com/reference/software/adept/start"
@@ -11,10 +11,13 @@
depends=('digilent.adept.runtime>=2.21.2')
options=('!strip' '!emptydirs')
-source_i686=("https://digilent.s3.amazonaws.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-i386.deb")
-source_x86_64=("https://digilent.s3.amazonaws.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-amd64.deb")
-source_aarch64=("https://digilent.s3.amazonaws.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-arm64.deb")
-source_armhf=("https://digilent.s3.amazonaws.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-armhf.deb")
+# Custom DLAGENTS to set user agent and prevent 403s
+DLAGENTS=('https::/usr/bin/curl -qg -A pacman -fLC - --retry 3 --retry-delay 3 -o %o %u')
+
+source_i686=("https://files.digilent.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-i386.deb")
+source_x86_64=("https://files.digilent.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-amd64.deb")
+source_aarch64=("https://files.digilent.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-arm64.deb")
+source_armhf=("https://files.digilent.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-armhf.deb")
sha512sums_i686=('2d4b3674cb60c70466eb12b65c07ba498ac6a699ef920014e7e1ada9ff4f1eaa8374e5ae7f79529acfefc7326f24fe1681343f2a82d34737945d4dae58a85ff2')
sha512sums_x86_64=('535381d9638703a184227c31814a548571e77513d094cf0bea91b8c31cfb1bb563c2ac9bfae70a99d6de13d8cc73bd3177d3efcbe666f0a79d4afacf720ad04b')

Scan history

Scanned at (UTC)SeverityRules
2026-11-01 00:21:48 Low 2
2026-10-31 00:07:41 Low 2
2026-10-30 00:29:30 Low 2
2026-10-29 00:13:55 Low 2
2026-10-28 00:06:54 Low 2
2026-10-27 00:23:28 Low 2
2026-10-26 00:12:40 Low 2
2026-10-25 00:20:48 Low 2
2026-10-24 00:14:55 Low 2
2026-10-23 00:02:19 Low 2
2026-10-22 00:13:10 Low 2
2026-10-21 00:12:50 Low 2
2026-10-20 00:10:31 Low 2
2026-10-19 00:03:55 Low 2
2026-10-18 00:06:55 Low 2
2026-10-17 11:18:02 Medium 1
2026-10-17 09:17:40 Medium 1
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion