digital

maintainer xente · 17 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from the project's official Git repository; the skipped checksum is a quality issue but does not introduce a real security risk given the source is verifiable and the build process is standard.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the project's official Git repository; the skipped checksum is a quality issue but does not introduce a real security risk given the source is verifiable and the build process is standard.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: alstruit <alsturit at gmail.com>
    
      2# Contributor: Edgar Luque <git@edgarluque.com>
    
      3pkgname=digital
    
      4pkgver=0.31
    
      5pkgrel=5
    
      6pkgdesc="A digital logic designer and circuit simulator."
    
      7arch=('x86_64')
    
      8url="https://github.com/hneemann/Digital"
    
      9license=('GPL-3.0-or-later')
    
      10makedepends=('git' 'maven' 'ttf-font')
    
      11depends=('fontconfig' 'java-runtime')
    
      12source=("$pkgname::git+https://github.com/hneemann/Digital.git")
    
      13sha256sums=("SKIP")
    
      14
    
      15build() {
    
      16    cd "${srcdir}/${pkgname}"
    
      17
    
      18    git checkout v${pkgver%%r*} 2>/dev/null
    
      19
    
      20    mvn package
    
      21}
    
      22
    
      23package() {
    
      24    cd "${srcdir}/${pkgname}/"
    
      25
    
      26    install -vDm644 "target/${pkgname^}.jar" "$pkgdir/usr/share/java/$pkgname/$pkgname.jar"
    
      27
    
      28    #Point exe to jar
    
      29    sed -e  "s,DIR=.*,DIR=/usr/share/java/${pkgname},g" \
    
      30        -e  "s,${pkgname^}.jar,${pkgname}.jar,g" \
    
      31        -i  "distribution/linux/${pkgname^}.sh"
    
      32
    
      33    #Generate .desktop
    
      34    sed -e  "s,<EXEC_LOCATION>,${pkgname},g" \
    
      35        -e  "s,<ICON_LOCATION>,${pkgname},g" "distribution/linux/desktop.template" > "distribution/linux/${pkgname}.desktop"
    
      36
    
      37    install -vDm644 "distribution/ReleaseNotes.txt" "$pkgdir/usr/share/doc/$pkgname/changelog.txt"
    
      38    install -vDm644 "distribution/linux/${pkgname}-simulator.xml" "$pkgdir/usr/share/mime/packages/${pkgname}-simulator.xml"
    
      39    install -vDm644 "distribution/linux/${pkgname}.desktop" "$pkgdir/usr/share/applications/$pkgname.desktop"
    
      40    install -vDm755 "distribution/linux/${pkgname^}.sh" "$pkgdir/usr/bin/$pkgname"
    
      41    install -vDm644 "src/main/svg/icon.svg" "$pkgdir/usr/share/icons/hicolor/scalable/apps/${pkgname}.svg"
    
      42}
    
      43

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 17:21:24	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0