multiprofiler

maintainer laserk3000 · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a source tarball from NEC's official update domain for building the software, which is a legitimate use of a non-whitelisted host; the content is not executed remotely and the checksums are verified.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source tarball from NEC's official update domain for building the software, which is a legitimate use of a non-whitelisted host; the content is not executed remotely and the checksums are verified.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:22 source=("http://update.necdisplay.com/multiprofiler/NEC_MultiProfiler_Linux_x64_v$pkgver.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: laserK <echo 'Y29udGFjdEBrYXJzdGVucHVmYWhsLmRlCg==' | base64 -d>
    
      2pkgname=multiprofiler
    
      3pkgver=1.3.60
    
      4pkgrel=2
    
      5epoch=
    
      6pkgdesc="Customization and color management tool for NEC PA series monitors"
    
      7arch=('i686' 'x86_64')
    
      8url="http://www.necdisplay.com/support-and-services/multi-profiler/overview"
    
      9license=('custom')
    
      10groups=()
    
      11depends=(qt4)
    
      12makedepends=(gendesk)
    
      13checkdepends=()
    
      14optdepends=()
    
      15provides=()
    
      16conflicts=()
    
      17replaces=()
    
      18backup=()
    
      19options=()
    
      20install=
    
      21changelog=
    
      22source=("http://update.necdisplay.com/multiprofiler/NEC_MultiProfiler_Linux_x64_v$pkgver.tar.gz"
    
      23	"multiprofiler.png"
    
      24	"54-multiprofiler.rules")
    
      25noextract=()
    
      26sha512sums=('d1f12ecf5d79f5b7ddad5887a52c37cf456673b065a8bf16eda2db45bafe1636d511a17eaa59a9a4b2804997eb18518fb95f1e43600327bf0e356b7be486011b'
    
      27            'e2f2b7fe1b82b5ca3a422cb3cf30b20f006a27d36fed21d19847147f85e93a10b3e8cbc8930e31f0b1f62a5a643866a0d0071bac61d448d64b9ae3ea1c805312'
    
      28            '5532707d284c6918f8627dabd0f15f7e591f747eb99a56a3e2cbf26cd47fc33801538c66da37daf8c003528ce4ecc54394e43fd3ec5ff3c17d1640c99304ff94')
    
      29validpgpkeys=()
    
      30
    
      31prepare() {
    
      32	gendesk -f -n --pkgname "$pkgname" --pkgdesc "$pkgdesc" --categories "Utility;Graphics"
    
      33	
    
      34}
    
      35
    
      36package() {
    
      37	#install modified udev rules (660 rather than 666 for NEC devices and all i2c devices)
    
      38	install -dm755 "$pkgdir/etc/udev/rules.d/"
    
      39	install -Dm644 "54-multiprofiler.rules" "$pkgdir/etc/udev/rules.d/"
    
      40
    
      41	# there is a space between the major and minor version tag
    
      42	rm -f $srcdir/NEC_MultiProfiler_V1.3.60_170424_Linux_x64
    
      43	if [ -d "$srcdir/NEC_MultiProfiler_V1 .3.60_170424_Linux_x64/" ]; then
    
      44		echo hello
    
      45		mv "$srcdir/NEC_MultiProfiler_V1 .3.60_170424_Linux_x64/" "$srcdir/NEC_MultiProfiler_V1.3.60_170424_Linux_x64"
    
      46	fi
    
      47
    
      48	cd $srcdir/NEC_MultiProfiler_V${pkgver}_[0-9][0-9][0-9][0-9][0-9][0-9]_Linux_x64/
    
      49	install -dm755 "$pkgdir/usr/bin"
    
      50	install -dm755 "$pkgdir/usr/share/$pkgname"
    
      51	install -dm755 "$pkgdir/usr/share/pixmaps"
    
      52	install -dm755 "$pkgdir/usr/share/applications"
    
      53
    
      54	install -Dm755 NEC_MultiProfiler_x64/BUILD_B/MultiProfiler /$pkgdir/usr/share/$pkgname/
    
      55	install -Dm755 NEC_MultiProfiler_x64/BUILD_B/cmdlineddclite /$pkgdir/usr/share/$pkgname/
    
      56
    
      57	#i2c kernel module is needed to access the DDC from userspace
    
      58	install -dm755 "$pkgdir/etc/modules-load.d/"
    
      59	echo "i2c-dev" > "$pkgdir/etc/modules-load.d/55-multiprofiler.conf"
    
      60	chmod 644 "$pkgdir/etc/modules-load.d/55-multiprofiler.conf"
    
      61
    
      62	#desktop icon
    
      63	install -Dm644 "$srcdir/$pkgname.desktop" "$pkgdir/usr/share/applications/$pkgname.desktop"
    
      64	install -Dm644 "$srcdir/$pkgname.png" "$pkgdir/usr/share/pixmaps/$pkgname.png"
    
      65	ln -s "/usr/share/$pkgname/MultiProfiler" "$pkgdir/usr/bin/$pkgname"
    
      66	install -D -m644 NEC_MultiProfiler_x64/license.txt "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      67
    
      68}
    
      69

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2