edid-generator-git

maintainer dreieck · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a git checkout from a plausible project-owned GitHub repository, which is normal for AUR packages; the non-whitelisted host is GitHub, a common and expected forge, and the package builds from source without executing untrusted binaries.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a git checkout from a plausible project-owned GitHub repository, which is normal for AUR packages; the non-whitelisted host is GitHub, a common and expected forge, and the package builds from source without executing untrusted binaries.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:42 "${_pkgname}::git+https://${_githost}/${_gituser}/${_gitname}.git"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: dreieck (https://aur.archlinux.org/account/dreieck)
    
      2
    
      3_gitname="edid-generator"
    
      4_pkgname="${_gitname}"
    
      5pkgname="${_pkgname}-git"
    
      6pkgver=r30.20231120.476a016
    
      7pkgrel=2
    
      8pkgdesc="Hackerswork to generate an EDID binary file from given Xorg Modelines."
    
      9arch=(
    
      10  'any'
    
      11)
    
      12_githost='github.com'
    
      13_gituser='akatrevorjay'
    
      14url="https://${_githost}/${_gituser}/${_gitname}"
    
      15license=("GPL-3.0-or-later")
    
      16depends=(
    
      17  'bash'      # Interpreter for the bundled script
    
      18  'binutils'  # for 'objcopy'
    
      19  'coreutils' # for 'cat' and 'mktemp'
    
      20  'dos2unix'
    
      21  'v4l-utils'
    
      22  'gcc'       # for 'cc'
    
      23  'make'      # to run the Makefile
    
      24  'zsh'       # Interpreter for the upstream script
    
      25)
    
      26makedepends=(
    
      27  'git'
    
      28)
    
      29optdepends=()
    
      30checkdepends=()
    
      31provides=(
    
      32  "${_pkgname}"
    
      33  "modeline2edid"
    
      34  "modeline2edid-git=${pkgver}"
    
      35)
    
      36conflicts=(
    
      37  "${_pkgname}"
    
      38  "modeline2edid"
    
      39)
    
      40
    
      41source=(
    
      42  "${_pkgname}::git+https://${_githost}/${_gituser}/${_gitname}.git"
    
      43  "edid-generator.sh"
    
      44)
    
      45sha256sums=(
    
      46  'SKIP'
    
      47  'c6c834ac652500b3fbb55b0bed7308badef0cfeb98e7d2e5990fa1695f79cfd0'
    
      48)
    
      49
    
      50prepare() {
    
      51  cd "${srcdir}/${_pkgname}"
    
      52
    
      53  git log > "${srcdir}/git.log"
    
      54}
    
      55
    
      56pkgver() {
    
      57  cd "${srcdir}/${_pkgname}"
    
      58
    
      59  _rev="$(git rev-list --count HEAD)"
    
      60  _date="$(git log -1 --date=format:"%Y%m%d" --format="%ad")"
    
      61  _hash="$(git rev-parse --short HEAD)"
    
      62
    
      63  if [ -z "${_rev}" ]; then
    
      64    error "Git commit count could not be determined."
    
      65    return 1
    
      66  else
    
      67    printf '%s' "r${_rev}.${_date}.${_hash}"
    
      68  fi
    
      69}
    
      70
    
      71package() {
    
      72  cd "${srcdir}/${_pkgname}"
    
      73  printf '%s\n' "    > installing ..."
    
      74
    
      75  install -Dvm644 -t "${pkgdir}/usr/lib/${_pkgname}"   "hex" "Makefile" edid.S
    
      76  install -Dvm755 -t "${pkgdir}/usr/lib/${_pkgname}"   "modeline2edid"
    
      77  install -Dvm755  "${srcdir}/edid-generator.sh"         "${pkgdir}/usr/bin/edid-generator"
    
      78  ln -svr "${pkgdir}/usr/lib/${_pkgname}/modeline2edid"  "${pkgdir}/usr/bin/modeline2edid"
    
      79
    
      80  _licensefiles=(
    
      81    LICENSE
    
      82  )
    
      83  printf '%s\n' "    > installing documentation ..."
    
      84  install -Dvm644 -t "${pkgdir}/usr/share/doc/${_pkgname}" README.md EXAMPLE_MODELINES [0-9]*x[0-9]*.S "${srcdir}/git.log"
    
      85
    
      86  printf '%s\n' "    > installing license ..."
    
      87  for _licensefile in "${_licensefiles[@]}"; do
    
      88    install -D -v -m644 "${_licensefile}" "${pkgdir}/usr/share/licenses/${pkgname}/$(basename "${_licensefile}")"
    
      89    ln -svr "${pkgdir}/usr/share/licenses/${pkgname}/$(basename "${_licensefile}")" "${pkgdir}/usr/share/doc/${_pkgname}/$(basename "${_licensefile}")"
    
      90  done
    
      91}
    
      92
    
      93

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2