digilent.adept.utilities
The package downloads prebuilt .deb files from Digilent's official domain (files.digilent.com), which is the vendor's legitimate distribution infrastructure; despite the static analyzer flag for a non-whitelisted host, the source is trustworthy and the files are verified with sha512 checksums, limiting supply-chain risk to low.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt .deb files from Digilent's official domain (files.digilent.com), which is the vendor's legitimate distribution infrastructure; despite the static analyzer flag for a non-whitelisted host, the source is trustworthy and the files are verified with sha512 checksums, limiting supply-chain risk to low.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:17
source_i686=("https://files.digilent.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-i386.deb")
PKGBUILD
1 offending line(s) highlighted# Maintainer: Mario Rubio <mario at mrrb dot eu>
# Contributor: Amr Okasha <amradel55 at gmail dot com>
# Contributor: Knight <anonymousknight96 at gmail dot com>
pkgname=digilent.adept.utilities
pkgver=2.7.1
pkgrel=4
pkgdesc="Digilent Adept Utilities."
arch=('i686' 'x86_64' 'aarch64' 'armhf')
url="https://digilent.com/reference/software/adept/start"
license=('custom')
depends=('digilent.adept.runtime>=2.21.2')
options=('!strip' '!emptydirs')
# Custom DLAGENTS to set user agent and prevent 403s
DLAGENTS=('https::/usr/bin/curl -qg -A pacman -fLC - --retry 3 --retry-delay 3 -o %o %u')
source_i686=("https://files.digilent.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-i386.deb")
source_x86_64=("https://files.digilent.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-amd64.deb")
source_aarch64=("https://files.digilent.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-arm64.deb")
source_armhf=("https://files.digilent.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-armhf.deb")
sha512sums_i686=('2d4b3674cb60c70466eb12b65c07ba498ac6a699ef920014e7e1ada9ff4f1eaa8374e5ae7f79529acfefc7326f24fe1681343f2a82d34737945d4dae58a85ff2')
sha512sums_x86_64=('535381d9638703a184227c31814a548571e77513d094cf0bea91b8c31cfb1bb563c2ac9bfae70a99d6de13d8cc73bd3177d3efcbe666f0a79d4afacf720ad04b')
sha512sums_aarch64=('e147662cbf5e6e5991358677fa9c32704a5bfc167f327154b6058bb93c7ffe0ec082e338b3d96b9d1923305b85248c7d6c7874af6b3e471fc14025b36c341c27')
sha512sums_armhf=('9d1730fd532d211b4f9c6f046a67a9f5e265e17e2ee1ad70fc340958a5e058db39987fdcb6a65bf08e0509c963773a10bcd7d019fe05758523d440918c99eb64')
package(){
# Extract package data
tar -xJf data.tar.xz -C "${pkgdir}"/
install -dm 755 "${pkgdir}/usr/share/licenses/${pkgname}"
ln -s "/usr/share/doc/${pkgname}/copyright" "${pkgdir}/usr/share/licenses/${pkgname}/copyright"
ln -s "/usr/share/doc/${pkgname}/EULA" "${pkgdir}/usr/share/licenses/${pkgname}/EULA"
}
Changes since previous scan
--- PKGBUILD @ 2026-10-17 00:21+++ PKGBUILD @ 2026-11-01 00:21@@ -3,7 +3,7 @@ # Contributor: Knight <anonymousknight96 at gmail dot com> pkgname=digilent.adept.utilities pkgver=2.7.1-pkgrel=2+pkgrel=4 pkgdesc="Digilent Adept Utilities." arch=('i686' 'x86_64' 'aarch64' 'armhf') url="https://digilent.com/reference/software/adept/start"@@ -11,10 +11,13 @@ depends=('digilent.adept.runtime>=2.21.2') options=('!strip' '!emptydirs') -source_i686=("https://digilent.s3.amazonaws.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-i386.deb")-source_x86_64=("https://digilent.s3.amazonaws.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-amd64.deb")-source_aarch64=("https://digilent.s3.amazonaws.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-arm64.deb")-source_armhf=("https://digilent.s3.amazonaws.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-armhf.deb")+# Custom DLAGENTS to set user agent and prevent 403s+DLAGENTS=('https::/usr/bin/curl -qg -A pacman -fLC - --retry 3 --retry-delay 3 -o %o %u')++source_i686=("https://files.digilent.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-i386.deb")+source_x86_64=("https://files.digilent.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-amd64.deb")+source_aarch64=("https://files.digilent.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-arm64.deb")+source_armhf=("https://files.digilent.com/Software/AdeptUtilities/${pkgver}/${pkgname}_${pkgver}-armhf.deb") sha512sums_i686=('2d4b3674cb60c70466eb12b65c07ba498ac6a699ef920014e7e1ada9ff4f1eaa8374e5ae7f79529acfefc7326f24fe1681343f2a82d34737945d4dae58a85ff2') sha512sums_x86_64=('535381d9638703a184227c31814a548571e77513d094cf0bea91b8c31cfb1bb563c2ac9bfae70a99d6de13d8cc73bd3177d3efcbe666f0a79d4afacf720ad04b')Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 11:18:02 | Medium | 1 |
| 2026-10-17 09:17:40 | Medium | 1 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |