libfprint-zk9500-git

LOW
maintainer arqueon 0 votes scanned 2026-10-30 01:55:02.802430
View on AUR
Why flagged

The package builds from source using Git repositories with SKIP'd checksums, but the sources are from legitimate project forges (GitLab and GitHub) and the build process is transparent; the low severity is due to lack of verifiable integrity checks, not malicious intent.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source using Git repositories with SKIP'd checksums, but the sources are from legitimate project forges (GitLab and GitHub) and the build process is transparent; the low severity is due to lack of verifiable integrity checks, not malicious intent.

PKGBUILD

1# Maintainer: arqueon <66568719+arqueon@users.noreply.github.com>
2pkgname=libfprint-zk9500-git
3pkgver=1.94.100.r3.gfbf28c1
4pkgrel=1
5pkgdesc="libfprint-2 with native ZKTeco ZK9500 (1b55:0124) optical fingerprint reader support"
6arch=('x86_64' 'aarch64')
7url="https://github.com/arqueon/zk9500-libfprint"
8license=('LGPL-2.1-or-later')
9groups=('fprint')
10depends=(
11 'glib2'
12 'glibc'
13 'libgcc'
14 'libgudev'
15 'libgusb'
16 'libusb'
17 'openssl'
18 'pixman'
19)
20optdepends=(
21 'fprintd: D-Bus daemon and PAM module for fingerprint authentication'
22 'python-gobject: for zk9500-fprintd multi-reader enrollment and PAM status CLI'
23)
24makedepends=(
25 'git'
26 'glib2-devel'
27 'meson'
28 'ninja'
29 'pkgconf'
30)
31provides=(
32 "libfprint=${pkgver}"
33 'libfprint-2.so'
34 'libfprint-zk9500'
35)
36conflicts=(
37 'libfprint'
38)
39source=(
40 'libfprint::git+https://gitlab.freedesktop.org/libfprint/libfprint.git'
41 'zk9500-libfprint::git+https://github.com/arqueon/zk9500-libfprint.git'
42)
43sha256sums=(
44 'SKIP'
45 'SKIP'
46)
47
48pkgver() {
49 cd "${srcdir}/libfprint"
50 local _base _rev _hash
51 _base="$(meson introspect --projectinfo meson.build 2>/dev/null | sed -n 's/.*"version": *"\([^"]*\)".*/\1/p')"
52 [[ -z "${_base}" ]] && _base="1.94.100"
53 cd "${srcdir}/zk9500-libfprint"
54 _rev="$(git rev-list --count HEAD)"
55 _hash="$(git rev-parse --short=7 HEAD)"
56 printf '%s.r%s.g%s' "${_base}" "${_rev}" "${_hash}"
57}
58
59prepare() {
60 cd "${srcdir}/libfprint"
61 git checkout -- .
62 patch -Np1 -i "${srcdir}/zk9500-libfprint/patches/0001-upstream-libfprint-zk9500.patch"
63 install -Dm644 "${srcdir}/zk9500-libfprint/drivers/zk9500.c" "libfprint/drivers/zk9500.c"
64}
65
66build() {
67 local _gir_opt="-Dintrospection=false"
68 if [[ -x /usr/bin/g-ir-scanner ]]; then
69 _gir_opt="-Dintrospection=true"
70 fi
71
72 arch-meson "${srcdir}/libfprint" build \
73 "${_gir_opt}" \
74 -Dudev_hwdb=enabled \
75 -Dinstalled-tests=false \
76 -Ddoc=false \
77 -Dgtk-examples=false
78
79 meson compile -C build
80
81 # shellcheck disable=SC2046,SC2086
82 cc ${CFLAGS} ${CPPFLAGS} -O2 -Wall -Wextra \
83 "${srcdir}/zk9500-libfprint/tools/zk9500-probe.c" -o "${srcdir}/zk9500-probe" \
84 $(pkg-config --cflags --libs libusb-1.0) ${LDFLAGS}
85}
86
87check() {
88 meson test -C build --suite unit-tests --print-errorlogs
89 ./build/libfprint/fprint-list-supported-devices | grep -q "1b55:0124"
90}
91
92package() {
93 meson install -C build --destdir "${pkgdir}"
94 install -Dm755 "${srcdir}/zk9500-probe" \
95 "${pkgdir}/usr/bin/zk9500-probe"
96 install -Dm755 "${srcdir}/zk9500-libfprint/tools/zk9500-fprintd" \
97 "${pkgdir}/usr/bin/zk9500-fprintd"
98 install -Dm644 "${srcdir}/zk9500-libfprint/udev/70-zk9500-libfprint.rules" \
99 "${pkgdir}/usr/lib/udev/rules.d/70-zk9500-libfprint.rules"
100}
101

Scan history

Scanned at (UTC)SeverityRules
2026-10-30 01:55:02 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion