sigrok-bridge-bin

MEDIUM

maintainer taotieren 0 votes scanned 2026-09-04 11:59:46.176116

View on AUR

Why flagged

A prebuilt binary is downloaded directly from dl.sipeed.com (Sipeed's own domain, plausibly official) and installed as an executable; while the host appears to be the vendor's own infrastructure and a sha256 checksum is provided, it is a pre-compiled binary with no source build, so the risk is moderate if the checksum or host were ever compromised, but not high given it appears to be the official vendor download site.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:32 "${pkgname%-bin}-${pkgver}::https://dl.sipeed.com/fileList/SLogic/ngscopeclient/sigrok-bridge"

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 80%): A prebuilt binary is downloaded directly from dl.sipeed.com (Sipeed's own domain, plausibly official) and installed as an executable; while the host appears to be the vendor's own infrastructure and a sha256 checksum is provided, it is a pre-compiled binary with no source build, so the risk is moderate if the checksum or host were ever compromised, but not high given it appears to be the official vendor download site.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: taotieren <admin@taotieren.com>
    
      2
    
      3pkgbase=sigrok-bridge-bin
    
      4pkgname=sigrok-bridge-bin
    
      5_tagname=2026-04-23
    
      6pkgver=${_tagname//-/.}
    
      7pkgrel=1
    
      8pkgdesc="Sigrok bridge server exposing Sipeed SLogic logic analyzers to ngscopeclient over twinlan"
    
      9license=('LicenseRef-custom')
    
      10url="https://wiki.sipeed.com/hardware/zh/logic_analyzer/ngscopeclient/ngscopeclient.html"
    
      11arch=(x86_64)
    
      12options=(!strip !debug)
    
      13depends=(
    
      14    glibc
    
      15    libgcc
    
      16)
    
      17makedepends=()
    
      18optdepends=(
    
      19    "scopehal-apps: ngscopeclient and other client applications for libscopehal"
    
      20)
    
      21provides=(${pkgname%-bin})
    
      22conflicts=(${pkgname%-bin})
    
      23replaces=()
    
      24backup=()
    
      25install=${pkgname%-bin}.install
    
      26source=(
    
      27    "${pkgname%-bin}.service"
    
      28    "${pkgname%-bin}-analog.service"
    
      29    "${pkgname%-bin}.install"
    
      30    "${pkgname%-bin}.firewalld.xml"
    
      31    "${pkgname%-bin}.ufw.profile"
    
      32    "${pkgname%-bin}-${pkgver}::https://dl.sipeed.com/fileList/SLogic/ngscopeclient/sigrok-bridge"
    
      33)
    
      34sha256sums=('34c28e155ba95aa5bfd8b860fb96efb1278f1ecd47828f02022fc8c14c0fcf0d'
    
      35            '2da520518fdffa1ef90a9d050db64733fd5c5fae7e16fcf813f97be7a4d991a3'
    
      36            '1fd8b0a373cd2ae411b638a50d5f0a6a18f5c673509c4d1973a7d2b81f88d4e4'
    
      37            '942eef957c299252ea43d39b8eb45d7a8ff0bc09110764fb4761ff33a1f26598'
    
      38            'd8cc3c9e3db53a1595bd0c0483589bf78f85187a65247be7d5a7fb99eaf6d29b'
    
      39            '905589a3e68e7af20c4c808fed1a22795fd61780116cf3239c20a154fc9a489e')
    
      40noextract=()
    
      41
    
      42package() {
    
      43    install -vDm755 "${srcdir}/${pkgname%-bin}-${pkgver}" "${pkgdir}/usr/bin/${pkgname%-bin}"
    
      44    install -vDm644 ${srcdir}/*.service -t ${pkgdir}/usr/lib/systemd/system/
    
      45
    
      46    # Optional firewall definitions. They stay inert until the admin opts in
    
      47    # ("firewall-cmd --add-service=sigrok-bridge" / "ufw allow sigrok-bridge")
    
      48    # and are only needed when the analyzer is attached to a remote host.
    
      49    install -vDm644 "${srcdir}/${pkgname%-bin}.firewalld.xml" \
    
      50        ${pkgdir}/usr/lib/firewalld/services/sigrok-bridge.xml
    
      51    install -vDm644 "${srcdir}/${pkgname%-bin}.ufw.profile" \
    
      52        ${pkgdir}/etc/ufw/applications.d/sigrok-bridge
    
      53
    
      54    install -vDm644 /dev/stdin ${pkgdir}/usr/lib/udev/rules.d/60-sigrok-slogic.rules <<EOF
    
      55SUBSYSTEM!="usb|usb_device", GOTO="sipeed_rules_end"
    
      56ACTION!="add", GOTO="sipeed_rules_end"
    
      57ATTRS{idVendor}=="359f", MODE="0666", TAG+="uaccess"
    
      58ENV{ID_MM_DEVICE_IGNORE}="1"
    
      59LABEL="sipeed_rules_end"
    
      60EOF
    
      61}
    
      62

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-04 11:59:46	Medium	3
2026-09-04 11:57:41	Medium	2