ec_access

LOW

maintainer dreieck 0 votes scanned 2026-11-02 00:26:00.633185

View on AUR

Why flagged

Downloads a single C source file from ftp.suse.com (a legitimate SUSE FTP server, plausibly the project's own distribution point) and compiles it locally; the checksum is provided and the binary is a small embedded-controller utility, not an obfuscated payload. The url field pointing to kate is sloppy but harmless.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 70%): Downloads a single C source file from ftp.suse.com (a legitimate SUSE FTP server, plausibly the project's own distribution point) and compiles it locally; the checksum is provided and the binary is a small embedded-controller utility, not an obfuscated payload. The url field pointing to kate is sloppy but harmless.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:35 "https://ftp.suse.com/pub/people/trenn/sources/ec/ec_access.c"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer:  dreieck (https://aur.archlinux.org/account/dreieck)
    
      2
    
      3_pkgname=ec_access
    
      4pkgname="${_pkgname}"
    
      5pkgver='2010.01'
    
      6pkgrel=1
    
      7arch=(
    
      8  'x86_64'
    
      9  'i686'
    
      10  'i386'
    
      11  'armv7h'
    
      12  'armv6h'
    
      13  'aarch64'
    
      14  'pentium4'
    
      15  'riscv64'
    
      16)
    
      17license=(
    
      18  'GPL-2.0-only'
    
      19)
    
      20pkgdesc="Small utility to read and write embedded controllder data at '/sys/kernel/debug/ec/ec0/io' (needs 'ec_sys' kernel module to be loaded)."
    
      21groups=()
    
      22url='https://apps.kde.org/kate/'
    
      23depends=(
    
      24  'glibc'
    
      25)
    
      26optdepends=()
    
      27makedepends=(
    
      28  'gcc'
    
      29)
    
      30checkdepends=()
    
      31conflicts=()
    
      32provides=()
    
      33replaces=()
    
      34source=(
    
      35  "https://ftp.suse.com/pub/people/trenn/sources/ec/ec_access.c"
    
      36  # "https://raw.githubusercontent.com/torvalds/linux/refs/heads/master/tools/power/acpi/tools/ec/ec_access.c"
    
      37)
    
      38sha256sums=(
    
      39  'a173f25bc4b9d5b33920924f02aa20ae0cd39596166c621f130c07fe675313eb'  # ec_access.c
    
      40)
    
      41
    
      42build() {
    
      43  cd "${srcdir}"
    
      44
    
      45  gcc -o ec_access ec_access.c
    
      46}
    
      47
    
      48package() {
    
      49  cd "${srcdir}"
    
      50
    
      51  install -Dvm755 -t "${pkgdir}/usr/bin"  ec_access
    
      52}
    
      53

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-02 00:26:00	Low	3
2026-11-02 00:04:56	Low	3
2026-11-02 00:02:06	Medium	2