ltspice
LOW
maintainer fenugrec
39 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a prebuilt MSI installer from Analog Devices' official domain (ltspice.analog.com), which is the project's legitimate source; despite the non-whitelisted host, this is a normal and expected source for the software, and the installer is verified via a hardcoded SHA-256 checksum.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt MSI installer from Analog Devices' official domain (ltspice.analog.com), which is the project's legitimate source; despite the non-whitelisted host, this is a normal and expected source for the software, and the installer is verified via a hardcoded SHA-256 checksum.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:32
"LTspice64-${pkgver}.msi::https://LTspice.analog.com/download/26.0.2/LTspice64.msi"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: fenugrec <fenugrec users sourceforge net>
2
# Contributor: Max Stabel <max dot stabel03 at gmail dot com>
3
4
# So, versioning is a bit of a mess now. Maybe it will improve over time.
5
# - we have a 'maintainer.sh' script to automate version bumping, that retrieves an 'udpate.txt' file from Analog
6
# - there are permalinks, like https://ltspice.analog.com/download/24.1.0/LTspice64.msi
7
# - the generic URL https://ltspice.analog.com/software/LTspice64.msi links to the 'latest' version
8
# - 'LTspice.json' contains version string '24.0.12' (wasn't updated ?), but the .exe shows the expected 24.1.0
9
# - if you download https://ltspice.analog.com/download/24.0.12/LTspice64.msi, you get a file that self-describes as 24.0.11...
10
# - it would be possible to process the .exe to extract a version string but I don't see the point.
11
12
pkgname=ltspice
13
pkgver=26.0.2.1
14
pkgrel=1
15
pkgdesc="SPICE simulator, schematic capture and waveform viewer."
16
arch=('x86_64')
17
url="https://www.analog.com/en/resources/design-tools-and-calculators/ltspice-simulator.html"
18
license=('LicenseRef-LTspice')
19
depends=('wine')
20
optdepends=('xdg-utils: for launching HTML help files')
21
makedepends=('gawk'
22
'curl'
23
'icoutils'
24
'imagemagick'
25
'msitools'
26
)
27
28
source=("${pkgname}.sh"
29
"${pkgname}-help.sh"
30
"conv.sh"
31
"ltspice.desktop"
32
"LTspice64-${pkgver}.msi::https://LTspice.analog.com/download/26.0.2/LTspice64.msi"
33
)
34
35
installer_sha256='485DABD2D7D8293DE733A399719F6538EFDA4A54B48B181A14E07271186984D3'
36
37
sha256sums=('78f50fd44506093849421ec3c05516eba1d850160192175c4e7db4811df40f1c'
38
'3a0fed134c263a7a0573f36c1f4e49d27bea2cca0c098e069e79e1411d3c302e'
39
'9d1eb3d868376960050469324f8c7e7fbf674bfcbcac76c2a10934dbe77f6b6c'
40
'a8b97e57c3fc33b856d45d8e93f38a84f825938dc461a40957ea0f56464d21ee'
41
${installer_sha256}
42
)
43
44
options=(!strip)
45
46
prepare() {
47
cd "${srcdir}"
48
49
msiextract LTspice64-${pkgver}.msi
50
mv -f "APPDIR:."/* .
51
mv -f "LocalAppDataFolder/LTspice"/* .
52
}
53
54
build() {
55
cd "${srcdir}"
56
57
wrestool -x -t 14 LTspice.exe >${pkgname}.ico
58
magick ${pkgname}.ico ${pkgname}.png
59
rm ${pkgname}.ico
60
61
#tweak mixed-case hyperlinks in help docs
62
cd LTspiceHelp
63
echo '==> Adjusting help files'
64
sh ../conv.sh
65
}
66
67
package()
68
{
69
cd "${srcdir}"
70
71
# Install License
72
install -Dm644 License.txt "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
73
74
# Install Desktop file
75
install -Dm644 "${pkgname}.png" "${pkgdir}/usr/share/pixmaps/${pkgname}.png"
76
install -Dm644 "${pkgname}.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"
77
78
# Install docs
79
install -m755 -d "${pkgdir}/usr/share/doc/${pkgname}"
80
cp -r LTspiceHelp/* "${pkgdir}/usr/share/doc/${pkgname}"
81
82
# Install program files, following
83
# https://wiki.archlinux.org/title/Wine_package_guidelines
84
bin_destdir="${pkgdir}/usr/share/${pkgname}"
85
install -m755 -d "${bin_destdir}"
86
install -m755 *.exe "${bin_destdir}"
87
install -m644 *.zip "${bin_destdir}"
88
install -m644 LTspice.json "${bin_destdir}"
89
install -m644 ChangeLog.txt "${bin_destdir}"
90
91
# symlink help files
92
ln -sv "/usr/share/doc/${pkgname}" "${bin_destdir}/LTspiceHelp"
93
94
# Install /usr/bin startscript
95
install -Dm755 "${srcdir}/${pkgname}.sh" "${pkgdir}/usr/bin/${pkgname}"
96
install -Dm755 "${srcdir}/${pkgname}-help.sh" "${pkgdir}/usr/bin/${pkgname}-help"
97
}
98
99
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |