flydigi-vader4d
The package builds from a source tarball hosted on the maintainer's GitHub repository, which is plausibly the project's own; the source is not executed remotely, and the only risk is a low-confidence, unverifiable checksum due to 'SKIP', but it is not malicious or executing untrusted prebuilt code.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a source tarball hosted on the maintainer's GitHub repository, which is plausibly the project's own; the source is not executed remotely, and the only risk is a low-confidence, unverifiable checksum due to 'SKIP', but it is not malicious or executing untrusted prebuilt code.
PKGBUILD
# Maintainer: Jochem Kuipers <jochem@localhost>
pkgname=flydigi-vader4d
pkgver=0.1.0
pkgrel=1
pkgdesc='Userspace DInput driver for Flydigi Vader 4 Pro'
arch=('any')
url='https://github.com/JochemKuipers/flydigi-spacestation-linux'
license=('MIT')
depends=('python' 'python-evdev' 'systemd')
makedepends=('python' 'git')
install="$pkgname.install"
source=("$pkgname-$pkgver.tar.gz::https://github.com/JochemKuipers/flydigi-spacestation-linux/archive/refs/tags/v$pkgver.tar.gz")
sha256sums=('SKIP')
prepare() {
ln -sfn "flydigi-spacestation-linux-$pkgver" "$srcdir/$pkgname-$pkgver"
}
build() {
cd "$srcdir/$pkgname-$pkgver"
python packaging/stage.py driver --out "$srcdir/stage-driver"
}
package() {
cp -a "$srcdir/stage-driver/." "$pkgdir/"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-25 13:42:47 | Low | 2 |