nudl-bin

LOW

maintainer miq 0 votes scanned 2026-08-28 11:35:03.635011

View on AUR

Why flagged

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Mikołaj <mikolaj.q@wp.pl>
    
      2
    
      3pkgname=nudl-bin
    
      4pkgver=1.1.0
    
      5pkgrel=1
    
      6pkgdesc="Unofficial downloader for Hyundai, Kia and Genesis (HMG) infotainment navigation firmware (precompiled binary)"
    
      7arch=('x86_64' 'aarch64')
    
      8url="https://github.com/chenxiaolong/nudl"
    
      9license=('GPL-3.0-only')
    
      10provides=('nudl')
    
      11conflicts=('nudl')
    
      12makedepends=('openssh')
    
      13options=('!strip')
    
      14
    
      15source_x86_64=(
    
      16  "$pkgname-$pkgver-x86_64.zip::https://github.com/chenxiaolong/nudl/releases/download/v$pkgver/nudl-$pkgver-x86_64-unknown-linux-musl.zip"
    
      17  "$pkgname-$pkgver-x86_64.ssh-sig::https://github.com/chenxiaolong/nudl/releases/download/v$pkgver/nudl-$pkgver-x86_64-unknown-linux-musl.zip.sig"
    
      18)
    
      19sha256sums_x86_64=('502ef5d620af95bb829dbc00945ab64049f7f1cf4f5549b1836bc19fcbeb1efe'
    
      20                    'f804b1c4cb110d5f3666aaff4986ec10a2b96d3674f004fe7ba8fd089fd50b35')
    
      21
    
      22source_aarch64=(
    
      23  "$pkgname-$pkgver-aarch64.zip::https://github.com/chenxiaolong/nudl/releases/download/v$pkgver/nudl-$pkgver-aarch64-unknown-linux-musl.zip"
    
      24  "$pkgname-$pkgver-aarch64.ssh-sig::https://github.com/chenxiaolong/nudl/releases/download/v$pkgver/nudl-$pkgver-aarch64-unknown-linux-musl.zip.sig"
    
      25)
    
      26sha256sums_aarch64=('7837a52747603ae93f8f8a92929f09749ae75f17ac06253fc9c4ed42f12ea544'
    
      27                     '601d57aa7215dc7d3b47407e2d0c1e636675c28a24f95ba9df8ac835d2c6de26')
    
      28
    
      29prepare() {
    
      30  # Weryfikacja podpisu SSH wydania (klucz opublikowany przez autora w
    
      31  # https://github.com/chenxiaolong/chenxiaolong/blob/master/VERIFY_SSH_SIGNATURES.md).
    
      32  # Rozszerzenie pliku podpisu celowo nie kończy się na ".sig", żeby makepkg
    
      33  # nie próbował weryfikować go automatycznie jako podpisu PGP.
    
      34  echo "chenxiaolong ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDOe6/tBnO7xZhAWXRj3ApUYgn+XZ0wnQiXM8B7tPgv4" > chenxiaolong_trusted_keys
    
      35  ssh-keygen -Y verify -f chenxiaolong_trusted_keys -I chenxiaolong -n file \
    
      36    -s "$pkgname-$pkgver-$CARCH.ssh-sig" < "$pkgname-$pkgver-$CARCH.zip"
    
      37}
    
      38
    
      39package() {
    
      40  install -Dm0755 nudl "$pkgdir/usr/bin/nudl"
    
      41  install -Dm0644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      42  install -Dm0644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      43}
    
      44

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-28 11:35:03	Low	1