gowin-eda-ide
LOW
maintainer kpn
4 votes
base
gowin-eda
scanned 2026-11-01 00:21:48.120785
Why flagged
The package downloads a source tarball from a plausibly official vendor subdomain (eda.gowinsemi.cn) for building the EDA tool; this is a normal AUR packaging pattern for vendor-locked FPGA tools, and the source is verified via sha256sum.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source tarball from a plausibly official vendor subdomain (eda.gowinsemi.cn) for building the EDA tool; this is a normal AUR packaging pattern for vendor-locked FPGA tools, and the source is verified via sha256sum.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:16
source=("https://eda.gowinsemi.cn/Gowin_V${pkgver/_/-}_linux.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: insmtr <insmtr@insmtr.cn>
2
# Contributor: yjun <jerrysteve1101 at gmail dot com>
3
4
pkgbase=gowin-eda
5
pkgver=1.9.12.04
6
pkgrel=2
7
epoch=1
8
_desc="Gowin EDA, an easy to use integrated design environment provides design engineers one-stop solution from design entry to verification."
9
arch=('x86_64')
10
url="https://www.gowinsemi.com.cn/software/index"
11
license=('unknown')
12
13
# Custom DLAGENTS to set user agent and prevent 403s
14
DLAGENTS=('https::/usr/bin/curl -qgb "" -A pacman -fLC - --retry 3 --retry-delay 3 -o %o %u')
15
16
source=("https://eda.gowinsemi.cn/Gowin_V${pkgver/_/-}_linux.tar.gz"
17
"gw_ide.sh"
18
"gw_sh.sh"
19
"programmer.sh"
20
"programmer_cli.sh"
21
"${pkgbase}.png"
22
"${pkgbase}-ide-project.xml"
23
"${pkgbase}-ide.desktop"
24
"${pkgbase}-programmer.desktop")
25
sha256sums=('62978d54f2845be94098d2d016930c18866c2755d82e5bbb04ec2d104582545f'
26
'2d0366a0f172cf1cf8a076d21085237919277c815920dc0ebf16f607eb439ffc'
27
'21abbbb6f609eb8f5878386a61636de7ba35a42b03a56180e0bb4cc8ea424790'
28
'9a87376bf3b204e7c83cfd7e4f242ee66b7f08d0662a897937ded74884c9348d'
29
'54900d9c54d1862950e21275f3602c880e7b82c902da55f725165bf3cd022342'
30
'346991b57db67aa4a8373ad09fd221e310c87ac7a6c90313cad7b48f7e6934ab'
31
'a95d18239e9ecb6b3f712fa569601e964624ef4ccb39ca85e56dfafa74b573d2'
32
'27894cfb7ab767fc9d4a1392e9d521fefbb819be7806512cbe44118934e16697'
33
'664f20c092c8b6fd018327a8e60c2f31454bbd9a27950b8ea7e98b76895235b8')
34
35
_install() {
36
find ${@: 2} -type f -exec install -Dm$1 {} ${pkgdir}/opt/${pkgname}/{} \;
37
}
38
39
_install_exec() {
40
# executable script
41
install -dm 755 ${pkgdir}/usr/bin/
42
for _exec in $@
43
do
44
install -Dm755 ${srcdir}/${_exec}.sh ${pkgdir}/usr/bin/${_exec}
45
done
46
}
47
48
_package-ide() {
49
pkgdesc="Gowin EDA IDE - ${_desc}"
50
depends=('fontconfig' 'freetype2')
51
optdepends=('openfpgaloader: open source fpga programmer, as a replacement to Gowin Programmer')
52
provides=("gowin-eda-ide" "gowin-ide")
53
backup=("opt/${pkgname}/bin/gwlicense.ini")
54
55
cd ${srcdir}/IDE
56
57
_install 644 doc/
58
_install 644 lib/
59
_install 644 data/
60
_install 644 share/
61
_install 644 simlib/
62
_install 644 ipcore/
63
_install 644 plugins/
64
_install 644 bin/vhdl_packages
65
_install 644 bin/prim_syns
66
_install 644 bin/eye_mon_task_gen.dist
67
_install 644 bin/serdes_toml_to_csr.dist
68
_install 644 bin/ssc_task_gen.dist
69
_install 644 bin/resources
70
_install 644 bin/translations
71
_install 755 bin/ -maxdepth 1
72
73
chmod 644 ${pkgdir}/opt/${pkgname}/bin/prim{itive.xml,_syn.vhd,_syn.v}
74
chmod 644 ${pkgdir}/opt/${pkgname}/bin/qt.conf
75
chmod 644 ${pkgdir}/opt/${pkgname}/bin/programmer.json
76
chmod 666 ${pkgdir}/opt/${pkgname}/bin/gwlicense.ini
77
chmod 644 ${pkgdir}/opt/${pkgname}/bin/hardcore.xml
78
79
# desktop entry
80
install -Dm644 ${srcdir}/${pkgname}.desktop -t ${pkgdir}/usr/share/applications
81
82
#icon
83
install -Dm644 ${srcdir}/${pkgbase}.png ${pkgdir}/usr/share/pixmaps/${pkgname}.png
84
85
_install_exec gw_sh gw_ide
86
87
# fix ide launch error
88
# libfreetype.so.6 from Gowin EDA ide could cause error when launch the IDE:
89
# /opt/gowin-eda-edu-ide/bin/gw_ide: symbol lookup error: /usr/lib/libfontconfig.so.1: undefined symbol: FT_Done_MM_Var
90
#
91
# https://bbs.archlinux.org/viewtopic.php?id=251445
92
# https://mathematica.stackexchange.com/questions/189306/cant-launch-mathematica-11-on-fedora-29
93
rm -f ${pkgdir}/opt/${pkgname}/lib/libfreetype.so.6
94
95
# HACK: fix IDE hardcode path of Programmer
96
sed -i 's|../../Programmer|..////Programmer|g' ${pkgdir}/opt/${pkgname}/bin/gao_{sh,analyzer}
97
sed -i 's|../../Programmer|..////Programmer|g' ${pkgdir}/opt/${pkgname}/bin/gvio_{sh,analyzer}
98
sed -i 's|../../Programmer|..////Programmer|g' ${pkgdir}/opt/${pkgname}/bin/gw_goeye
99
sed -i 's|../../Programmer|..////Programmer|g' ${pkgdir}/opt/${pkgname}/plugins/ide/lib{StartPage,FpgaPrj}.so
100
ln -s /opt/${pkgbase}-programmer ${pkgdir}/opt/${pkgname}/Programmer
101
102
# MimeType association
103
install -Dm644 ${srcdir}/${pkgbase}-ide-project.xml -t ${pkgdir}/usr/share/mime/packages/
104
}
105
106
_package-programmer() {
107
pkgdesc="Gowin EDA Programmer - ${_desc}"
108
# depends=('fontconfig' 'freetype2')
109
provides=("gowin-eda-programmer" "gowin-programmer")
110
options=('emptydirs')
111
112
cd ${srcdir}/Programmer
113
114
_install 644 doc/
115
_install 644 bin/PyQt5
116
_install 644 bin/data
117
_install 644 bin/Crypto -path '*/__pycache__' -prune -o
118
_install 644 bin/tools
119
_install 644 bin/ -maxdepth 1
120
121
_install_exec programmer programmer_cli
122
123
# empty dir
124
install -dm755 ${pkgdir}/opt/${pkgname}/bin/data/output
125
install -dm755 ${pkgdir}/opt/${pkgname}/bin/data/lang
126
127
# desktop entry
128
install -Dm644 ${srcdir}/${pkgname}.desktop -t ${pkgdir}/usr/share/applications
129
130
#icon
131
install -Dm644 ${srcdir}/${pkgbase}.png ${pkgdir}/usr/share/pixmaps/${pkgname}.png
132
133
chmod 755 ${pkgdir}/opt/${pkgname}/bin/programmer{,_cli}
134
chmod 755 ${pkgdir}/opt/${pkgname}/bin/jtagserver{,_lpt}
135
chmod 755 ${pkgdir}/opt/${pkgname}/bin/JTAGLoading
136
}
137
138
pkgname=("${pkgbase}-ide" "${pkgbase}-programmer")
139
for _p in ${pkgname[@]}; do
140
eval "package_${_p}() {
141
$(declare -f "_package${_p#$pkgbase}")
142
_package${_p#${pkgbase}}
143
}"
144
done
145
# vim: set sw=2 ts=2 et:
146
Changes since previous scan
--- PKGBUILD @ 2026-10-27 00:23+++ PKGBUILD @ 2026-11-01 00:21@@ -3,13 +3,17 @@ pkgbase=gowin-eda pkgver=1.9.12.04-pkgrel=1+pkgrel=2 epoch=1 _desc="Gowin EDA, an easy to use integrated design environment provides design engineers one-stop solution from design entry to verification." arch=('x86_64') url="https://www.gowinsemi.com.cn/software/index" license=('unknown')-source=("https://cdn.gowinsemi.com.cn/Gowin_V${pkgver/_/-}_linux.tar.gz"++# Custom DLAGENTS to set user agent and prevent 403s+DLAGENTS=('https::/usr/bin/curl -qgb "" -A pacman -fLC - --retry 3 --retry-delay 3 -o %o %u')++source=("https://eda.gowinsemi.cn/Gowin_V${pkgver/_/-}_linux.tar.gz" "gw_ide.sh" "gw_sh.sh" "programmer.sh"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 09:47:05 | Medium | 1 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |