soundshed-guitar-bin
MEDIUM
maintainer awahab
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a prebuilt executable from a non-standard host (downloads.soundshed.com) with no public version control or build transparency, posing a supply-chain risk if the host is compromised.
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:16
"https://downloads.soundshed.com/downloads/SoundshedGuitar-${pkgver}-Linux-x64.zip"
Medium
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 85%): The package downloads a prebuilt executable from a non-standard host (downloads.soundshed.com) with no public version control or build transparency, posing a supply-chain risk if the host is compromised.
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Adam Wahab <awahab@adhoc.tools>
2
_name=soundshed-guitar
3
pkgname=${_name,,}-bin
4
pkgver=1.5.0
5
pkgrel=0
6
pkgdesc="A guitar/bass effects app and plugin."
7
arch=(x86_64)
8
url="https://guitar.soundshed.com"
9
license=(AGPL-3.0)
10
depends=(webkit2gtk-4.1)
11
makedepends=('unzip')
12
options=()
13
provides=("${_name}")
14
conflicts=("${_name}")
15
source=(
16
"https://downloads.soundshed.com/downloads/SoundshedGuitar-${pkgver}-Linux-x64.zip"
17
"$_name.desktop"
18
)
19
sha256sums=('3beb782a8df8925b42bfcc17f40513348ae6610061c98fadf7e0d3959475f8fa'
20
'841f9d304c6bce88380d30c86c8badc89c985548d9b5ad31e0c6c19cb7ca26a9')
21
22
package() {
23
rm SoundshedGuitar-${pkgver}-Linux-x64.zip
24
cp -a $srcdir/{opt,usr} $pkgdir/
25
install -Dm644 $srcdir/${_name}.desktop -t "$pkgdir/usr/share/applications"
26
}
27
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Medium | 2 |
| 2026-09-16 00:03:17 | Medium | 2 |
| 2026-09-15 00:25:31 | Medium | 2 |
| 2026-09-14 00:27:57 | Medium | 2 |
| 2026-09-13 00:19:54 | Medium | 2 |
| 2026-09-12 00:25:17 | Medium | 2 |
| 2026-09-11 00:19:22 | Medium | 2 |
| 2026-09-10 00:22:44 | Medium | 2 |
| 2026-09-09 00:04:09 | Medium | 2 |
| 2026-09-08 00:18:08 | Medium | 2 |
| 2026-09-07 00:30:15 | Medium | 2 |
| 2026-09-06 00:17:06 | Medium | 2 |
| 2026-09-05 00:16:27 | Medium | 2 |
| 2026-09-04 00:03:13 | Medium | 2 |
| 2026-09-03 00:15:47 | Medium | 2 |
| 2026-09-02 00:02:31 | Medium | 2 |
| 2026-09-01 00:11:19 | Medium | 2 |
| 2026-08-31 00:19:57 | Medium | 2 |
| 2026-08-30 00:04:14 | Medium | 2 |
| 2026-08-29 00:29:17 | Medium | 2 |