guide-bin

maintainer orphaned · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a source tarball from a non-whitelisted but plausibly official host (download.noi.cn, related to the National Olympiad in Informatics), builds from it without executing arbitrary remote code, and installs static data and a binary; the worst case of a swapped source is limited to code execution within the context of the application, but the host is likely legitimate and the package otherwise follows standard AUR practices.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source tarball from a non-whitelisted but plausibly official host (download.noi.cn, related to the National Olympiad in Informatics), builds from it without executing arbitrary remote code, and installs static data and a binary; the worst case of a swapped source is limited to code execution within the context of the application, but the host is likely legitimate and the package otherwise follows standard AUR practices.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:33 "http://download.noi.cn/T/noi/GUIDE-${pkgver}-ubuntu.tar"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Yufan You <ouuansteve at gmail>
    
      2# Contributor: Coelacanthus <liuhongwu2003@outlook.com>
    
      3
    
      4pkgname=guide-bin
    
      5pkgver=1.0.2
    
      6pkgrel=6
    
      7pkgdesc='由北航 GAIT 研究组开发的、专门为 NOI 选手设计的轻型集成开发环境'
    
      8arch=('i686' 'x86_64')
    
      9url='http://www.noi.cn/xw/2009-03-23/714714.shtml'
    
      10license=('custom')
    
      11depends=(
    
      12  'hicolor-icon-theme'
    
      13  'lib32-libpng12'
    
      14  'lib32-libsm'
    
      15  'lib32-libice'
    
      16  'lib32-libxi'
    
      17  'lib32-libxrender'
    
      18  'lib32-libxrandr'
    
      19  'lib32-freetype2'
    
      20  'lib32-fontconfig'
    
      21  'lib32-libxext'
    
      22  'lib32-libx11'
    
      23  'lib32-zlib'
    
      24  'lib32-glib2'
    
      25  'lib32-glibc'
    
      26  'lib32-gcc-libs'
    
      27)
    
      28optdepends=(
    
      29  'gdb: Debug C++'
    
      30  'fpc: Pascal'
    
      31)
    
      32source=(
    
      33  "http://download.noi.cn/T/noi/GUIDE-${pkgver}-ubuntu.tar"
    
      34  'GUIDE.desktop'
    
      35)
    
      36sha256sums=('263af8b4710408f08c772edf065dd9d41e287f8bbd3e57054fdb5b612c6f3086'
    
      37            '121f3e0eebc4bfa911fefa55025ed4d6a74a183b225dee8801361e6873e24859')
    
      38
    
      39package() {
    
      40  cd "$srcdir/GUIDE-${pkgver}-ubuntu"
    
      41  install -Dm644 doc/*.* -t "$pkgdir"/usr/share/doc/GUIDE/html/
    
      42  install -Dm644 doc/images/*.* -t "$pkgdir"/usr/share/doc/GUIDE/html/images/
    
      43  install -Dm644 lang_en.qm -t "$pkgdir"/usr/share/
    
      44  install -Dm644 apis/* -t "$pkgdir"/usr/share/apis/
    
      45  install -Dm644 doc/images/Manna.png "$pkgdir"/usr/share/icons/hicolor/128x128/apps/GUIDE.png
    
      46  install -Dm755 GUIDE -t "$pkgdir"/usr/bin/
    
      47  cd ..
    
      48  install -Dm644 GUIDE.desktop -t "$pkgdir"/usr/share/applications
    
      49}
    
      50

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2