pango-design-suite-bin
LOW
maintainer taotieren
3 votes
scanned 2026-09-15 00:25:31.187355
Why flagged
The package downloads a source tarball from the official project domain (pangomicro.com) which is plausibly the vendor's own release infrastructure; despite the static analyzer flag for a non-standard host, this is a legitimate build of vendor-provided software with no evidence of code execution from untrusted sources.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source tarball from the official project domain (pangomicro.com) which is plausibly the vendor's own release infrastructure; despite the static analyzer flag for a non-standard host, this is a legitimate build of vendor-provided software with no evidence of code execution from untrusted sources.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:44
"${_pkg_file_name}.tar.gz::https://www.pangomicro.com/uploads/soft/${_name}/${_file_name}-OW/${_os}-64bit/${_pkg_file_name}.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: taotieren <admin@taotieren.com>
2
3
pkgname=pango-design-suite-bin
4
pkgver=6.7.1
5
pkgrel=4
6
# epoch=1
7
pkgdesc="Pango Design Suite (PDS) 软件是紫光同创自主研发的从HDL描述到位流生成与下载调试的可编程工具套件，为公司全系列FPGA芯片提供高效友好的集成设计环境。该软件支持业界标准的开发流程，已具备支持大规模FPGA芯片的应用开发能力。"
8
arch=('x86_64')
9
url="https://www.pangomicro.com/product/pds/"
10
license=('LicenseRef-scancode-commercial-license')
11
provides=(${pkgname%-bin})
12
conflicts=(${pkgname%-bin})
13
replaces=()
14
depends=(
15
sh
16
python
17
libz.so
18
)
19
makedepends=(
20
libarchive
21
sed
22
)
23
optdepends=(
24
'fcitx5-qt: Fcitx5 Qt Library (Qt5 & Qt6 integrations)'
25
'fcitx-qt5: Qt5 IM Module for Fcitx'
26
'fcitx-qt6: Qt6 IM Module for Fcitx'
27
)
28
backup=(etc/${pkgname%-bin}-license.conf)
29
options=(!debug !strip !emptydirs !staticlibs)
30
install=${pkgname}.install
31
_name=PDS
32
_year=2022.2
33
_os=CentOS
34
_mojar=SP${pkgver}
35
_min=7.3
36
_file_name=${_name}_${_year}-${_mojar}-ads
37
_pkg_file_name=${_file_name}-${_os}${_min}-x64
38
# https://www.pangomicro.com/uploads/soft/PDS/PDS_2022.2-SP6.7.1-ads-OW/CentOS-64bit/PDS_2022.2-SP6.7.1-ads-CentOS7.3-x64.tar.gz
39
source=(
40
"pango-design-suite-license.conf"
41
"pango-design-suite-license.sh"
42
"pango-design-suite.png"
43
"${pkgname}.install"
44
"${_pkg_file_name}.tar.gz::https://www.pangomicro.com/uploads/soft/${_name}/${_file_name}-OW/${_os}-64bit/${_pkg_file_name}.tar.gz"
45
)
46
sha256sums=('36a132b356038a6497d16bed20dc2c1a5539da6bdacf29a82e7a6e4845ece305'
47
'66140ded6003519d378165f0c82f0b53329587a840ce7036c83a4a93b76eb8bd'
48
'30ac601f2d44cc86731ee17dc1f8d5d714654fd3e6626d5409e5564684f20c67'
49
'06aa1d5b573e6e23f3317cdf740d65929b133e09a8c4c0857243ca721bd360bc'
50
'd7e00eadd36ce24b1ccef778af6117f6c4a0dcde26ee871a94ef281ba2ec8b92')
51
# noextract=(${_pkg_file_name}.tar.gz)
52
53
package() {
54
install -Dm644 "${srcdir}/${pkgname%-bin}-license.conf" -t "${pkgdir}/etc/"
55
install -Dm755 "${srcdir}/${pkgname%-bin}-license.sh" -t "${pkgdir}/etc/profile.d/"
56
install -Dm644 "${srcdir}/${pkgname%-bin}.png" -t "${pkgdir}/usr/share/pixmaps/"
57
install -Dm644 "${srcdir}/Pango_Design_Suite_Linux_Install_Guide.pdf" -t "${pkgdir}/usr/share/doc/${pkgname}/"
58
sed -i 's|users|uucp|g' "${srcdir}/${_pkg_file_name}/99-zpangodevices-udev.rules"
59
install -Dm644 "${srcdir}/${_pkg_file_name}/99-zpangodevices-udev.rules" -t "${pkgdir}/usr/lib/udev/rules.d/"
60
install -Dm644 "${srcdir}/${_pkg_file_name}/license.txt" -t "${pkgdir}/usr/share/licenses/${pkgname}/"
61
mv "${srcdir}/${_pkg_file_name}/opensource_licenses" "${pkgdir}/usr/share/licenses/${pkgname}/"
62
mv "${srcdir}/${_pkg_file_name}/doc" "${pkgdir}/usr/share/doc/${pkgname}/"
63
64
install -dm0755 "${pkgdir}/opt/pangomicro/${pkgname%-bin}/"
65
mv ${srcdir}/${_pkg_file_name}/{arch,bin,driver,example,install.sh,ip,lib} "${pkgdir}/opt/pangomicro/${pkgname%-bin}/"
66
67
install -dm0755 "${pkgdir}/opt/pangomicro/${pkgname%-bin}/lib/plugins/platforminputcontexts/"
68
ln -sf /usr/lib/qt/plugins/platforminputcontexts/libfcitx5platforminputcontextplugin.so \
69
"${pkgdir}/opt/pangomicro/${pkgname%-bin}/lib/plugins/platforminputcontexts/libfcitx5platforminputcontextplugin.so"
70
71
ln -sf /usr/lib/qt/plugins/platforminputcontexts/libfcitxplatforminputcontextplugin.so \
72
"${pkgdir}/opt/pangomicro/${pkgname%-bin}/lib/plugins/platforminputcontexts/libfcitxplatforminputcontextplugin.so"
73
74
ln -sf /usr/lib/qt6/plugins/platforminputcontexts/libfcitxplatforminputcontextplugin-qt6.so \
75
"${pkgdir}/opt/pangomicro/${pkgname%-bin}/lib/plugins/platforminputcontexts/libfcitxplatforminputcontextplugin-qt6.so"
76
77
install -Dm0755 /dev/stdin "${pkgdir}/etc/profile.d/${pkgname%-bin}.sh" <<EOF
78
#!/bin/sh
79
[ -d /opt/pangomicro/${pkgname%-bin}/bin ] && append_path '/opt/pangomicro/${pkgname%-bin}/bin'
80
81
export PATH
82
EOF
83
install -Dm0755 /dev/stdin "${pkgdir}/usr/bin/${pkgname%-bin}" <<EOF
84
#!/bin/bash
85
QT_PLUGIN_PATH=/opt/pangomicro/${pkgname%-bin}/lib/plugins
86
# QT_IM_MODULE=fcitx
87
/opt/pangomicro/${pkgname%-bin}/bin/pds "\$@"
88
EOF
89
90
install -Dm0644 /dev/stdin "${pkgdir}/usr/share/metainfo/com.pangomicro.pds.metainfo.xml" <<EOF
91
<?xml version="1.0" encoding="UTF-8"?>
92
<component type="desktop-application">
93
<id>com.pangomicro.pds</id>
94
95
<name>PDS</name>
96
<summary>Pango Design Suite (PDS)</summary>
97
98
<metadata_license>MIT</metadata_license>
99
<project_license>GPL-2.0-or-later</project_license>
100
101
<description>
102
<p>
103
Pango Design Suite (PDS) 软件是紫光同创自主研发的从HDL描述到位流生成与下载调试的可编程工具套件，为公司全系列FPGA芯片提供高效友好的集成设计环境。该软件支持业界标准的开发流程，已具备支持大规模FPGA芯片的应用开发能力。
104
</p>
105
</description>
106
107
<launchable type="desktop-id">com.pangomicro.pds.desktop</launchable>
108
</component>
109
EOF
110
111
install -Dm0644 /dev/stdin "${pkgdir}/usr/share/applications/com.pangomicro.pds.desktop" <<EOF
112
[Desktop Entry]
113
Version=1.0
114
Type=Application
115
116
Name=pds
117
Comment=Pango Design Suite (PDS)
118
Categories=Development;Electronics;
119
120
Icon=${pkgname%-bin}
121
Exec=${pkgname%-bin} %U
122
Terminal=false
123
EOF
124
# chown -R root:root "${pkgdir}/"
125
}
126
Changes since previous scan
--- PKGBUILD @ 2026-06-20 00:18+++ PKGBUILD @ 2026-09-15 00:25@@ -2,7 +2,7 @@ pkgname=pango-design-suite-bin pkgver=6.7.1-pkgrel=3+pkgrel=4 # epoch=1 pkgdesc="Pango Design Suite (PDS) 软件是紫光同创自主研发的从HDL描述到位流生成与下载调试的可编程工具套件，为公司全系列FPGA芯片提供高效友好的集成设计环境。该软件支持业界标准的开发流程，已具备支持大规模FPGA芯片的应用开发能力。" arch=('x86_64')@@ -12,11 +12,9 @@ conflicts=(${pkgname%-bin}) replaces=() depends=(- bash- gcc-libs- glibc+ sh python- zlib+ libz.so ) makedepends=( libarchiveScan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 23:18:17 | Medium | 1 |
| 2026-06-20 00:18:46 | Clean | 2 |
| 2026-06-19 23:51:18 | Medium | 2 |
| 2026-06-19 19:07:35 | Low | 2 |
| 2026-06-18 16:11:54 | Medium | 1 |