nucleistudioide

maintainer taotieren · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt IDE binary from the vendor's official domain (nucleisys.com), which is plausibly the project's own release infrastructure; the non-whitelisted host is not inherently suspicious given the vendor context, and the binary is from a known legitimate source for this software.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt IDE binary from the vendor's official domain (nucleisys.com), which is plausibly the project's own release infrastructure; the non-whitelisted host is not inherently suspicious given the vendor context, and the binary is from a known legitimate source for this software.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source=("https://download.nucleisys.com/upload/files/nucleistudio/NucleiStudio_IDE_${pkgver}-lin64.tgz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: taotieren <admin@taotieren.com>
    
      2
    
      3pkgbase=nucleistudioide
    
      4pkgname=(nucleistudioide)
    
      5pkgver=202510
    
      6pkgrel=1
    
      7pkgdesc="Nuclei Studio IDE 是基于 MCU Eclipse IDE 开发的一款针对芯来公司处理器核产品的集成开发环境工具，用于 RISC-V 开发继承了 Eclipse IDE 平台的各种优势。"
    
      8arch=("x86_64")
    
      9depends=('nuclei-gcc' 'nuclei-openocd' 'nuclei-qemu')
    
      10optdepends=('jlink-software-and-documentation: Segger JLink software & documentation pack for Linux')
    
      11makedepends=()
    
      12conflicts=()
    
      13url="https://www.nucleisys.com/download.php"
    
      14license=('LicenseRef-unknow')
    
      15options=(!strip !debug)
    
      16source=("https://download.nucleisys.com/upload/files/nucleistudio/NucleiStudio_IDE_${pkgver}-lin64.tgz")
    
      17sha256sums=('22ffa4c2ae3b14be16199997a59dcb5b0513de617766a5a3286e8d701d016a63')
    
      18
    
      19package() {
    
      20	cd "$srcdir"
    
      21
    
      22	msg2 'Installing Nuclei Studio IDE'
    
      23	install -d -m755 "${pkgdir}/opt/nuclei"
    
      24	tar zxf "NucleiStudio_IDE_${pkgver}-lin64.tgz"
    
      25	rm -rf "NucleiStudio_IDE_${pkgver}/NucleiStudio/toolchain/openocd"
    
      26	rm -rf "NucleiStudio_IDE_${pkgver}/NucleiStudio/toolchain/gcc"
    
      27	rm -rf "NucleiStudio_IDE_${pkgver}/NucleiStudio/toolchain/qemu"
    
      28
    
      29	mv "${srcdir}/NucleiStudio_IDE_${pkgver}/NucleiStudio" "${pkgdir}/opt/nuclei"
    
      30
    
      31	msg2 'Instalation of binary file'
    
      32	install -Dm755 /dev/stdin "${pkgdir}/usr/bin/${pkgname}" <<EOF
    
      33#!/bin/sh
    
      34/opt/nuclei/NucleiStudio/NucleiStudio "\$@"
    
      35EOF
    
      36	install -Dm644 /dev/stdin "${pkgdir}/etc/udev/rules.d/99-nuclei.rules" <<EOF
    
      37# Copy this file to /etc/udev/rules.d/
    
      38# If rules fail to reload automatically, you can refresh udev rules
    
      39# with the command "udevadm control --reload"
    
      40
    
      41# This rules are based on the udev rules from the OpenOCD project, with unsupported probes removed.
    
      42# See http://openocd.org/ for more details.
    
      43#
    
      44# This file is available under the GNU General Public License v2.0
    
      45
    
      46ACTION!="add|change", GOTO="nuclei_rules_end"
    
      47
    
      48#SUBSYSTEM=="gpio", MODE="0660", GROUP="plugdev", TAG+="uaccess"
    
      49
    
      50SUBSYSTEM!="usb|tty|hidraw", GOTO="nuclei_rules_end"
    
      51
    
      52# [GNU MCU Eclipse] -----------------------------------------------------------
    
      53# To simplify access, the access rights were changed from:
    
      54#   MODE="660", GROUP="plugdev", TAG+="uaccess"
    
      55# to:
    
      56#   MODE="666"
    
      57# -----------------------------------------------------------------------------
    
      58
    
      59# Please keep this list sorted by VID:PID
    
      60
    
      61# nuclei 
    
      62SUBSYSTEM=="usb", ATTR{idVendor}=="0403", ATTR{idProduct}=="6010", MODE="666", GROUP="plugdev"
    
      63SUBSYSTEM=="tty", ATTRS{idVendor}=="0403", ATTRS{idProduct}=="6010", MODE="666", GROUP="plugdev"
    
      64
    
      65LABEL="nuclei_rules_end"
    
      66EOF
    
      67
    
      68	msg2 'Installing desktop shortcut'
    
      69	install -Dm644 /dev/stdin "$pkgdir/usr/share/applications/${pkgname}.desktop" <<EOF
    
      70[Desktop Entry]
    
      71Name=NucleiStudioIDE
    
      72Comment=NucleiStudioIDE
    
      73GenericName=NucleiStudioIDE
    
      74Exec=env GDK_BACKEND=x11 nucleistudioide %F
    
      75Icon=
    
      76Path=/opt/nuclei/NucleiStudio/
    
      77Terminal=false
    
      78StartupNotify=true
    
      79Type=Application
    
      80Categories=Development
    
      81EOF
    
      82
    
      83}
    
      84
    
      85#
    
      86# makepkg --printsrcinfo > .SRCINFO
    
      87#
    
      88
    
      89# vim: set ts=8 sw=8 tw=0 noet:
    
      90

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2