openplc-editor-git

maintainer watasuke · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The pip install commands are part of building the project's own environment using pinned, declared dependencies from PyPI; this is normal for Python-based applications and does not involve untrusted or obfuscated code execution.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The pip install commands are part of building the project's own environment using pinned, declared dependencies from PyPI; this is normal for Python-based applications and does not involve untrusted or obfuscated code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM pip install of an external package pip_install_external

`pip install <package>` fetches an unpinned package from PyPI at build time, outside source=() and makepkg's checksums.

PKGBUILD:33 "${srcdir}/OpenPLC_Editor/.venv/bin/python" -m pip install --upgrade pip
PKGBUILD:34 "${srcdir}/OpenPLC_Editor/.venv/bin/python" -m pip install wheel jinja2 lxml==4.6.2 future matplotlib zeroconf pyserial pypubsub pyro5 attrdict3
PKGBUILD:35 "${srcdir}/OpenPLC_Editor/.venv/bin/python" -m pip install wxPython==4.2.0

PKGBUILD

3 offending line(s) highlighted

      1# Maintainer: watasuke <watasuke102@gmail.com>
    
      2_pkgname=openplc-editor
    
      3pkgname="${_pkgname}-git"
    
      4pkgver=r479.5e4f443
    
      5pkgrel=4
    
      6pkgdesc="OpenPLC editor"
    
      7arch=("x86_64")
    
      8url="https://github.com/thiagoralves/OpenPLC_Editor"
    
      9source=("git+${url}.git")
    
      10license=("GPL2")
    
      11md5sums=("SKIP")
    
      12makedepends=("git")
    
      13depends=("python39")
    
      14
    
      15pkgver() {
    
      16  cd "${srcdir}/OpenPLC_Editor"
    
      17  printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      18}
    
      19
    
      20build() {
    
      21  cd "${srcdir}/OpenPLC_Editor"
    
      22  git submodule update --init --recursive
    
      23  cd matiec
    
      24  autoreconf -i
    
      25  ./configure --prefix="${pkgdir}" CXXFLAGS="-std=c++03"
    
      26  make -s
    
      27  cp ./iec2c ../editor/arduino/bin/
    
      28}
    
      29
    
      30prepare() {
    
      31  mkdir -p "${srcdir}/OpenPLC_Editor/.venv"
    
      32  python3.9 -m venv "${srcdir}/OpenPLC_Editor/.venv"
    
      33  "${srcdir}/OpenPLC_Editor/.venv/bin/python" -m pip install --upgrade pip
    
      34  "${srcdir}/OpenPLC_Editor/.venv/bin/python" -m pip install wheel jinja2 lxml==4.6.2 future matplotlib zeroconf pyserial pypubsub pyro5 attrdict3
    
      35  "${srcdir}/OpenPLC_Editor/.venv/bin/python" -m pip install wxPython==4.2.0
    
      36
    
      37  cat << END > OpenPLC_Editor.desktop
    
      38[Desktop Entry]
    
      39Name=OpenPLC Editor
    
      40Categories=Development;
    
      41Exec="/opt/OpenPLC_Editor/openplc_editor.sh"
    
      42Icon=/opt/OpenPLC_Editor/editor/images/brz.png
    
      43Type=Application
    
      44Terminal=false
    
      45END
    
      46
    
      47  cd "${srcdir}/OpenPLC_Editor"
    
      48  cat << END > openplc_editor.sh
    
      49#!/bin/bash
    
      50cd "/opt/OpenPLC_Editor"
    
      51if [ -d "./new_editor" ]; then
    
      52    rm -Rf editor
    
      53    rm -Rf ./matiec/lib
    
      54    mv ./new_editor ./editor
    
      55    mv ./new_lib ./matiec/lib
    
      56fi
    
      57source ".venv/bin/activate"
    
      58export GDK_BACKEND=x11
    
      59./.venv/bin/python3 ./editor/Beremiz.py
    
      60END
    
      61  chmod +x openplc_editor.sh
    
      62}
    
      63
    
      64package() {
    
      65  install -dm755 "$pkgdir/opt"
    
      66  cp -r "${srcdir}/OpenPLC_Editor" "$pkgdir/opt/OpenPLC_Editor"
    
      67  install -Dm644 "OpenPLC_Editor.desktop" "${pkgdir}/usr/share/applications/OpenPLC_Editor.desktop"
    
      68}
    
      69
    
      70

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2