spectraview2-bin

maintainer lbschenkel · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a prebuilt proprietary binary from a plausible project-related host (necds-engineering.com) used for NEC monitor color management; while the host is not whitelisted, it is plausibly official, and the package installs only data and binaries intended for local execution without remote code execution or exfiltration risks.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a prebuilt proprietary binary from a plausible project-related host (necds-engineering.com) used for NEC monitor color management; while the host is not whitelisted, it is plausibly official, and the package installs only data and binaries intended for local execution without remote code execution or exfiltration risks.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:22 source=("http://www.necds-engineering.com/spectraview/NEC_SpectraView_Linux_x64_${pkgver}_multilanguage.tar.gz" "spectraview2.png")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Leonardo Brondani Schenkel <leonardo at schenkel dot net>
    
      2pkgname=spectraview2-bin
    
      3pkgver=1.1.38
    
      4pkgrel=2
    
      5epoch=
    
      6pkgdesc="Profiling  and color management tool for NEC monitors"
    
      7arch=('x86_64')
    
      8url="https://www.sharpnecdisplays.us/support-and-services/spectraviewii/4"
    
      9license=('LicenseRef-proprietary')
    
      10groups=()
    
      11depends=(fontconfig freetype2 libice libsm libudev0-shim libusb-compat libxrandr libxrender libxxf86vm)
    
      12makedepends=(gendesk)
    
      13checkdepends=()
    
      14optdepends=()
    
      15provides=()
    
      16conflicts=(spectraview2)
    
      17replaces=()
    
      18backup=()
    
      19options=()
    
      20install=
    
      21changelog=
    
      22source=("http://www.necds-engineering.com/spectraview/NEC_SpectraView_Linux_x64_${pkgver}_multilanguage.tar.gz" "spectraview2.png")
    
      23noextract=()
    
      24sha512sums=('0dc6e3352dfde3d53d7cadd4eb5b4ff90d913cc14da407e998ff11cc61cea0588b69a700a7f8ff4c7d1369d8774e4665751bd2a3f70b07153c15f447da2a80e1'
    
      25            'e2f2b7fe1b82b5ca3a422cb3cf30b20f006a27d36fed21d19847147f85e93a10b3e8cbc8930e31f0b1f62a5a643866a0d0071bac61d448d64b9ae3ea1c805312')
    
      26validpgpkeys=()
    
      27
    
      28_pkgname="SpectraView"
    
      29
    
      30prepare() {
    
      31	gendesk -f -n --pkgname "$_pkgname" --pkgdesc "$pkgdesc" --categories "Utility;Graphics"
    
      32}
    
      33
    
      34package() {
    
      35	cd $srcdir/NEC_SpectraView_V${pkgver}_[0-9][0-9][0-9][0-9][0-9][0-9]_Linux_x64/
    
      36
    
      37	# modify udev rules (660 rather than 666 for NEC devices and all i2c devices)
    
      38	sed -i 's/MODE="0666"/MODE="0660"/g' NEC_SpectraView_x64/55-NEC.rules
    
      39	install -dm755 "$pkgdir/etc/udev/rules.d/"
    
      40	install -Dm644 NEC_SpectraView_x64/55-NEC.rules "$pkgdir/etc/udev/rules.d/"
    
      41
    
      42	install -dm755 "$pkgdir/usr/bin"	
    
      43	install -dm755 "$pkgdir/usr/lib/$_pkgname"
    
      44	install -dm755 "$pkgdir/usr/share/pixmaps"
    
      45	install -dm755 "$pkgdir/usr/share/applications"
    
      46
    
      47	install -Dm755 NEC_SpectraView_x64/BUILD_A/SpectraView /$pkgdir/usr/lib/$_pkgname/
    
      48	install -Dm755 NEC_SpectraView_x64/BUILD_A/cmdlineddclite /$pkgdir/usr/lib/$_pkgname/
    
      49	install -Dm755 NEC_SpectraView_x64/BUILD_A/i1d2 /$pkgdir/usr/lib/$_pkgname/
    
      50	install -Dm755 NEC_SpectraView_x64/BUILD_A/i1d3 /$pkgdir/usr/lib/$_pkgname/
    
      51	cp -R         "NEC_SpectraView_x64/BUILD_A/i1d3 Support Files" /$pkgdir/usr/lib/$_pkgname/
    
      52	
    
      53	#install libs for x-rite/GretagMacBeth i1 display colorimeters
    
      54	cp -R         "NEC_SpectraView_x64/libraries to install/i1d2/." "$pkgdir/usr/lib/"
    
      55	cp -R         "NEC_SpectraView_x64/libraries to install/i1d3/." "$pkgdir/usr/lib/"
    
      56	chmod -R 755 "$pkgdir/usr/lib/"
    
      57
    
      58	#i2c kernel module is needed to access the DDC from userspace
    
      59	install -dm755 "$pkgdir/etc/modules-load.d/"
    
      60	echo "i2c-dev" > "$pkgdir/etc/modules-load.d/55-$_pkgname.conf"
    
      61	chmod 644 "$pkgdir/etc/modules-load.d/55-$_pkgname.conf"
    
      62
    
      63	#desktop icon
    
      64	install -Dm644 "$srcdir/$_pkgname.desktop" "$pkgdir/usr/share/applications/$_pkgname.desktop"
    
      65	install -Dm644 "$srcdir/spectraview2.png" "$pkgdir/usr/share/pixmaps/$_pkgname.png"
    
      66	ln -s "/usr/lib/$_pkgname/SpectraView" "$pkgdir/usr/bin/"
    
      67	install -D -m644 NEC_SpectraView_x64/license.txt "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      68}
    
      69

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2