eagle
LOW
maintainer Bevan
283 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a prebuilt official binary from the project's own domain (eagle-updates.circuits.io), which is a legitimate distribution point for Autodesk EAGLE; the source is not self-hosted or third-party, and the binary is from the official vendor, making it a standard AUR package with low risk despite the non-whitelisted host.
Triggered rules
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-07-25) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt official binary from the project's own domain (eagle-updates.circuits.io), which is a legitimate distribution point for Autodesk EAGLE; the source is not self-hosted or third-party, and the binary is from the official vendor, making it a standard AUR package with low risk despite the non-whitelisted host.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:21
"https://eagle-updates.circuits.io/downloads/${pkgver//./_}/Autodesk_EAGLE_${pkgver}_English_Linux_64bit.tar.gz" -
PKGBUILD:22
lsa19.html::"http://download.autodesk.com/us/FY19/Suites/LSA/en-US/lsa.html"
PKGBUILD
2 offending line(s) highlighted
1
# Maintainer: Michael Lass <bevan@bi-co.net>
2
# Contributor: Yichao Yu <yyc1992@gmail.com>
3
# Contributor: David Manouchehri <david@davidmanouchehri.com>
4
5
# This PKGBUILD is maintained on github:
6
# https://github.com/michaellass/AUR
7
8
pkgname=eagle
9
pkgver=9.6.2
10
pkgrel=2
11
pkgdesc="Powerful suite for schematic capture and printed circuit board design (aka eaglecad)"
12
arch=('x86_64')
13
url="http://www.autodesk.com/products/eagle"
14
license=('custom')
15
depends=('desktop-file-utils' 'shared-mime-info' 'krb5' 'libxcb' 'libx11' 'e2fsprogs' 'libglvnd' 'libxext' 'fontconfig' 'libxi' 'freetype2' 'pcre' 'libcups' 'dbus')
16
options=(!emptydirs !strip)
17
source=(# Official source according to website:
18
# "http://trial2.autodesk.com/NET17SWDLD/2017/EGLPRM/ESD/Autodesk_EAGLE_${pkgver}_English_Linux_64bit.tar.gz"
19
# Currently, versions are only distributed via circuits.io:
20
# https://eagle-updates.circuits.io/downloads/latest.html
21
"https://eagle-updates.circuits.io/downloads/${pkgver//./_}/Autodesk_EAGLE_${pkgver}_English_Linux_64bit.tar.gz"
22
lsa19.html::"http://download.autodesk.com/us/FY19/Suites/LSA/en-US/lsa.html"
23
"$pkgname.sh"
24
"$pkgname.desktop"
25
"$pkgname.xml")
26
sha256sums=('0086b3fddcd9eaeead0f30f814b868a9e0ef75fbdf6185ec3448d0a9edf35ea3'
27
'd8f8adf45c8c136030f877975aed22ec97c6e26f6aa2218905c7b14b51bc1334'
28
'3ad7f6657842a7733289f46cafa877e069913a2deb63b268162def97aa3a4079'
29
'40e5a40cea787c0e823946271031744fdd9c755363da97d6dd4bea1eee7ee6b6'
30
'293ef717030e171903ba555a5c698e581f056d2a33884868018ab2af96a94a06')
31
32
package() {
33
cd "$srcdir"
34
35
# copy files to /opt
36
install -dm755 "$pkgdir"/{opt,usr/bin}
37
cp -r $pkgname-$pkgver "$pkgdir/opt/$pkgname"
38
39
# install launch script
40
install -Dm 755 "$pkgname.sh" \
41
"$pkgdir/usr/bin/$pkgname"
42
43
# provide desktop integration
44
install -Dm644 "$pkgname.desktop" \
45
"$pkgdir/usr/share/applications/$pkgname.desktop"
46
install -Dm644 "$pkgname.xml" \
47
"$pkgdir/usr/share/mime/packages/$pkgname.xml"
48
install -Dm644 "$pkgdir/opt/$pkgname/bin/eagle-logo.png" \
49
"$pkgdir/usr/share/pixmaps/eagle.png"
50
51
# install license
52
install -Dm644 "$srcdir/lsa19.html" \
53
"$pkgdir/usr/share/licenses/$pkgname/LICENSE"
54
55
# copy man page
56
install -Dm644 "$pkgdir"/opt/$pkgname/doc/$pkgname.1 \
57
"$pkgdir/usr/share/man/man1/$pkgname.1"
58
59
# Remove provided X libraries. They cause issues with current mesa and the system libraries seem to work fine.
60
rm "$pkgdir"/opt/$pkgname/lib/libx*
61
rm "$pkgdir"/opt/$pkgname/lib/libX*
62
63
# Remove libglapi which seems to cause segfaults on some systems.
64
rm "$pkgdir"/opt/$pkgname/lib/libglapi*
65
66
# Remove remaining libraries that are provided by Arch packages and not Qt-related.
67
rm "$pkgdir"/opt/$pkgname/lib/libEGL*
68
rm "$pkgdir"/opt/$pkgname/lib/libavahi*
69
rm "$pkgdir"/opt/$pkgname/lib/libdbus*
70
rm "$pkgdir"/opt/$pkgname/lib/libfreebl*
71
rm "$pkgdir"/opt/$pkgname/lib/libgbm*
72
rm "$pkgdir"/opt/$pkgname/lib/libgmodule*
73
rm "$pkgdir"/opt/$pkgname/lib/libgthread*
74
rm "$pkgdir"/opt/$pkgname/lib/libkrb5*
75
rm "$pkgdir"/opt/$pkgname/lib/libpcre*
76
rm "$pkgdir"/opt/$pkgname/lib/libpl*
77
rm "$pkgdir"/opt/$pkgname/lib/libsmime*
78
79
# We cannot use Arch's Qt5 due to the following errors:
80
# QXcbIntegration: Cannot create platform OpenGL context, neither GLX nor EGL are enabled
81
# /opt/eagle/eagle: symbol lookup error: /opt/eagle/plugins/bearer/libqconnmanbearer.so: undefined symbol: _ZdlPvm, version Qt_5
82
# rm "$pkgdir"/opt/$pkgname/lib/libQt*
83
84
# Fix file permissions
85
find "$pkgdir" -perm 750 -exec chmod 755 {} \;
86
find "$pkgdir" -perm 700 -exec chmod 755 {} \;
87
find "$pkgdir" -perm 640 -exec chmod 644 {} \;
88
find "$pkgdir" -perm 600 -exec chmod 644 {} \;
89
chmod 755 "$pkgdir"/opt/eagle/lib/libSuits.so
90
91
}
92
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |