pianoteq-trial-bin
LOW
maintainer SpotlightKid
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a prebuilt trial binary from the official vendor's domain (implied by local file with matching checksum), and the non-whitelisted URL is only for an icon image, posing minimal risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a prebuilt trial binary from the official vendor's domain (implied by local file with matching checksum), and the non-whitelisted URL is only for an icon image, posing minimal risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:24
'https://www.pianoteq.com/images/logo/pianoteq_icon_128.png')
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Christopher Arndt <aur -at- chrisarndt -dot- de>
2
# Contributor: CrocoDuck <crocoduck dot oducks at gmail dot com>
3
# Contributor: Simon Thorpe <simon@hivetechnology.com.au>
4
5
pkgname=pianoteq-trial-bin
6
pkgver=9.2.5
7
pkgrel=1
8
_name="Pianoteq ${pkgver%%.*}"
9
pkgdesc='Physical modelling piano instrument standalone program, VST3 and LV2 plugin. Trial version'
10
arch=(aarch64 armv7h x86_64)
11
url="https://www.modartt.com/pianoteq"
12
license=(LicenseRef-EULA)
13
groups=(lv2-plugins pro-audio vst3-plugins)
14
depends=(alsa-lib fontconfig freetype2 gcc-libs glibc libglvnd ttf-font)
15
makedepends=(gendesk)
16
optdepends=(
17
'jack: JACK support for stand-alone application'
18
'lv2-host: for loading the LV2 plugin'
19
'vst3-host: for loading the VST3 plugin'
20
)
21
provides=(${pkgname%-*})
22
conflicts=(${pkgname%-*} pianoteq-standard-bin pianoteq-standard-trial-bin pianoteq-stage-trial-bin)
23
source=("local://pianoteq_trial_v${pkgver//./}.tar.xz"
24
'https://www.pianoteq.com/images/logo/pianoteq_icon_128.png')
25
sha256sums=('3d7136e8b714f7f12b0aba28522d18c541b3963f66c56b725244f081f393f0cd'
26
'94ee64cf6688a49d74f0bf70d811e7466abac103feeab17496a89f828afcc6d3')
27
28
prepare() {
29
cd "$_name"
30
# Generate Desktop Entry:
31
gendesk -f -n \
32
--pkgname=${pkgname%-*} \
33
--pkgdesc="$pkgdesc" \
34
--name="$_name" \
35
--exec="\"$_name\"" \
36
--categories='Audio;AudioVideo;AudioVideoEditing;Midi;Music;Sequencer;'
37
}
38
39
package() {
40
depends+=(libasound.so libfreetype.so libfontconfig.so)
41
cd "$_name"
42
43
# Define architecture specific directory:
44
if [[ "$CARCH" == x86_64 ]]; then
45
_archdir=x86-64bit
46
elif [[ "$CARCH" == armv7h ]]; then
47
_archdir=arm-32bit
48
elif [[ "$CARCH" == aarch64 ]]; then
49
_archdir=arm-64bit
50
fi
51
52
# Install stand-alone executable and symlink
53
install -Dvm 755 "$_archdir/$_name" -t "$pkgdir"/usr/bin
54
ln -sf "$_name" "$pkgdir"/usr/bin/${pkgname%-bin}-${pkgver%%.*}
55
# Install VST3 plug-in bundle
56
install -vDm 755 "$_archdir/$_name.vst3"/Contents/$CARCH-linux/*.so \
57
-t "$pkgdir/usr/lib/vst3/$_name.vst3"/Contents/$CARCH-linux
58
# Install LV2 plug-in bundle
59
install -vDm 755 "$_archdir/$_name.lv2"/*.so -t "$pkgdir/usr/lib/lv2/$_name.lv2"
60
install -vDm 644 "$_archdir/$_name.lv2"/*.ttl -t "$pkgdir/usr/lib/lv2/$_name.lv2"
61
62
# Install desktop launcher
63
install -vDm 644 "$srcdir"/pianoteq_icon_128.png \
64
"$pkgdir"/usr/share/pixmaps/${pkgname%-*}.png
65
install -vDm 644 ${pkgname%-*}.desktop -t "$pkgdir"/usr/share/applications
66
67
# Install license
68
install -vDm 644 *Licence* -t "$pkgdir"/usr/share/licenses/$pkgname
69
70
# Install documentation
71
install -vDm 644 README_LINUX.txt Documentation/* -t "$pkgdir"/usr/share/doc/$pkgname
72
}
73
Changes since previous scan
--- PKGBUILD @ 2026-09-12 00:25+++ PKGBUILD @ 2026-09-17 00:27@@ -3,7 +3,7 @@ # Contributor: Simon Thorpe <simon@hivetechnology.com.au> pkgname=pianoteq-trial-bin-pkgver=9.2.1+pkgver=9.2.5 pkgrel=1 _name="Pianoteq ${pkgver%%.*}" pkgdesc='Physical modelling piano instrument standalone program, VST3 and LV2 plugin. Trial version'@@ -22,7 +22,7 @@ conflicts=(${pkgname%-*} pianoteq-standard-bin pianoteq-standard-trial-bin pianoteq-stage-trial-bin) source=("local://pianoteq_trial_v${pkgver//./}.tar.xz" 'https://www.pianoteq.com/images/logo/pianoteq_icon_128.png')-sha256sums=('41030b62f9fb296eeee0961e342ab113eed89f7e9b47e6d30366cfd887101998'+sha256sums=('3d7136e8b714f7f12b0aba28522d18c541b3963f66c56b725244f081f393f0cd' '94ee64cf6688a49d74f0bf70d811e7466abac103feeab17496a89f828afcc6d3') prepare() {Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 13:12:15 | Medium | 1 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |