libsigrok-nemanjan00-git

LOW
maintainer nemanjan00 0 votes scanned 2026-10-21 13:31:17.016028
View on AUR
Why flagged

The package builds from a public git repository (nemanjan00/libsigrok) which is a known fork of the upstream project; the source is not obfuscated, no remote code execution, and dependencies are standard system libraries; the low severity is due to the untrusted fork and SKIP'd checksum, but it does not introduce malicious behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public git repository (nemanjan00/libsigrok) which is a known fork of the upstream project; the source is not obfuscated, no remote code execution, and dependencies are standard system libraries; the low severity is due to the untrusted fork and SKIP'd checksum, but it does not introduce malicious behavior.

PKGBUILD

1# Maintainer: Nemanja Nedeljkovic <nemanjan00@gmail.com>
2# Contributor: David Manouchehri <manouchehri@riseup.net>
3# Contributor: Thomas Krug <t.krug@elektronenpumpe.de>
4# Contributor: veox <veox at wemakethings dot net>
5# Contributor: Vuokko <vuokko@msn.com>
6
7: ${_use_sodeps:=false}
8
9_pkgname="libsigrok"
10pkgname="$_pkgname-nemanjan00-git"
11pkgver=0.6.2.r600.g6753ab7
12pkgrel=1
13pkgdesc="Client software that supports various hardware logic analyzers, core library (nemanjan00 fork: one fork with upstream plus pending hardware support: DSLogic U3Pro16/32, Sipeed SLogic, Saleae Logic Pro, Rigol MHO900 and more)"
14url="https://github.com/nemanjan00/libsigrok"
15license=('GPL-3.0-or-later')
16arch=('x86_64')
17
18depends=(
19 'bluez-libs'
20 'glibmm'
21 'hicolor-icon-theme'
22 'hidapi'
23 'libftdi'
24 'libieee1284'
25 'libserialport'
26 'libsigc++'
27 'libusb'
28 'libzip'
29 'nettle'
30)
31makedepends=(
32 'autoconf-archive'
33 'cmake'
34 'doxygen'
35 'git'
36)
37optdepends=(
38 'sigrok-firmware-fx2lafw: Cypress FX2-based device support'
39)
40
41provides=("$_pkgname" "$_pkgname-git")
42conflicts=("$_pkgname" "$_pkgname-git" 'sigrok-slogic-git')
43
44options=('!lto')
45
46_pkgsrc="$_pkgname"
47source=("$_pkgsrc"::"git+https://github.com/nemanjan00/libsigrok.git#branch=master")
48sha256sums=('SKIP')
49
50pkgver() (
51 cd "$_pkgsrc"
52 local _tmp _tag _version _revision _hash
53 _tmp=$(git tag | grep -E 'libsigrok-[0-9.]+' | sed -E 's&([^0-9]*)(\S+)$&\2 \1\2&' | sort -rV | head -1)
54 _version=$(cut -f1 -d' ' <<< ${_tmp:?})
55 _tag=$(cut -f2 -d' ' <<< ${_tmp:?})
56 _revision=$(git rev-list --count --cherry-pick "$_tag"...HEAD)
57 _commit=$(git rev-parse --short=7 HEAD)
58 printf '%s.r%s.g%s' "${_version:?}" "${_revision:?}" "${_commit:?}"
59)
60
61build() {
62 cd "$_pkgsrc"
63 autoreconf -fiv
64 ./configure --prefix=/usr --enable-cxx --disable-python --disable-ruby --disable-java
65 make
66}
67
68package() {
69 if [[ "${_use_sodeps::1}" == "t" ]]; then
70 eval "depends+=(
71 libbluetooth.so
72 libgio-2.0.so
73 libglib-2.0.so
74 libglibmm-2.4.so
75 libgobject-2.0.so
76 libhidapi-hidraw.so
77 libnettle.so
78 libstdc++.so
79 libusb-1.0.so
80 libz.so
81 libzip.so
82 )"
83 fi
84
85 cd "$_pkgsrc"
86 make DESTDIR="$pkgdir" PREFIX=/usr install
87 install -Dm644 -t "$pkgdir/usr/lib/udev/rules.d" \
88 contrib/60-libsigrok.rules \
89 contrib/61-libsigrok-uaccess.rules
90}
91

Scan history

Scanned at (UTC)SeverityRules
2026-10-21 13:31:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion