stm32cubeide
The package builds from a local source file that the user must manually download from the official ST website, which is a normal and safe AUR practice; the non-standard host flag is a false positive since the actual source is user-provided and not automatically fetched from an untrusted location.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a local source file that the user must manually download from the official ST website, which is a normal and safe AUR practice; the non-standard host flag is a false positive since the actual source is user-provided and not automatically fetched from an untrusted location.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:34
"${_pkg_license_name}::https://www.st.com/resource/en/license_agreement/dm00218346.pdf"
PKGBUILD
1 offending line(s) highlighted# Maintainer: kumen
# Contributor: nightuser <nightuser.android@gmail.com>
pkgname="stm32cubeide"
pkgver=2.2.0
pkgrel=1
pkgdesc="Integrated Development Environment for STM32"
arch=("x86_64")
makedepends=('imagemagick')
depends=('glibc' 'libusb' 'ncurses5-compat-libs' 'webkit2gtk-4.1' 'stlink-server')
optdepends=('jlink-software-and-documentation' 'stlink' 'arm-none-eabi-gdb' 'stm32cubemx')
conflicts=()
url="https://www.st.com/en/development-tools/stm32cubeide.html"
license=('custom:SLA0048')
options=(!strip)
_pkgver_ext=2.2.0_29186_20260626_0934
_pkg_file_name=stm32cubeide_2.2.0-Lin-x86_64.sh.zip
_pkg_license_name="${pkgname}_SLA0048.pdf"
_pkg_additional_terms="${pkgname}_v${pkgver}_additional_license_terms.html"
if [ ! -f ${PWD}/${_pkg_file_name} ]; then
echo ""
echo "Package not found!"
echo "The ${pkgname} can be downloaded here: ${url}"
echo "Please remember to put a downloaded package ${_pkg_file_name} into the build directory (${PWD}) before build."
echo ""
fi
DLAGENTS=("https::/usr/bin/curl -gqb '' --retry 3 --retry-delay 3 -H "@${srcdir}http_headers" -o %o -L --compressed %u")
source=("local://${_pkg_file_name}"
"99-jlink.rules.patch"
"${_pkg_license_name}::https://www.st.com/resource/en/license_agreement/dm00218346.pdf"
#"${_pkg_additional_terms}::https://www.st.com/resource/en/additional_license_terms/additional-license-terms-stm32cubeide-v2-1-0.html"
"http_headers"
"stm32cubeide.desktop"
"stm32cubeide"
"stm32cubeide_wayland"
)
sha256sums=('6a3480814f718fd05dd43cd6c2f4ccb97556273029fab3a605b0dc34742911d0'
'0f3f69f7c980a701bf814e94595f5acb51a5d91be76b74e5b632220cfb0e7bb3'
'SKIP'
#'SKIP'
'4fc6f177425adbd491cbb7326969a4e77a78588c30e674a1e3455981ad523c40'
'acd87925cc9e8003a45c03f26f4554e6c190da18c86300a77f7cce91664017a9'
'59063401ec21ed8a88cfebbc71328331165108919758a2655454bb00dfdf174f'
'accaaa9d5e9bdac89418fcb0bfdb7c9c76c4faa58ccb70b32137864808fa9984'
)
prepare(){
mkdir -p build
sh "${srcdir}/"${pkgname}_${_pkgver_ext}-Lin-x86_64.sh --quiet --noexec --nox11 --target "${srcdir}/build"
mkdir -p "${srcdir}/build/stlink-server"
sh "${srcdir}/build/"st-stlink-server.*.install.sh --quiet --noexec --nox11 --target "${srcdir}/build/stlink-server"
mkdir -p "${srcdir}/build/stlink-udev"
sh "${srcdir}/build/"st-stlink-udev-rules-*-linux-noarch.sh --quiet --noexec --nox11 --target "${srcdir}/build/stlink-udev"
mkdir -p "${srcdir}/build/jlink-udev"
sh "${srcdir}/build/"segger-jlink-udev-rules-*-linux-noarch.sh --quiet --noexec --nox11 --target "${srcdir}/build/jlink-udev"
}
package() {
cd "$srcdir"
echo "Installing ${pkgname}"
install -dm 755 "${pkgdir}/opt/${pkgname}"
tar zxf "./build/${pkgname}_${_pkgver_ext}-Lin.tar.gz" -C "${pkgdir}/opt/${pkgname}"
#echo 'Installing STlink server'
#install -dm 755 "${pkgdir}/usr/bin/"
#install -Dm 755 -o root -g root "${srcdir}/build/stlink-server/stlink-server" "${pkgdir}/usr/bin/"
#echo 'Installing STlink udev rules'
#install -dm 755 "${pkgdir}/usr/lib/udev/rules.d/"
#install -Dm 644 -o root -g root "$srcdir/build/stlink-udev/"*.rules "${pkgdir}/usr/lib/udev/rules.d/"
#echo 'Installing JLink udev rules'
#install -dm 755 "${pkgdir}/usr/lib/udev/rules.d/"
#install -Dm 644 -o root -g root "$srcdir/build/jlink-udev/"*.rules "${pkgdir}/usr/lib/udev/rules.d/"
#patch -i "${srcdir}/99-jlink.rules.patch" "${pkgdir}/usr/lib/udev/rules.d/99-jlink.rules"
echo 'Installing binary files'
install -dm 755 "${pkgdir}/usr/bin/"
install -Dm 755 "${srcdir}/${pkgname}" "${pkgdir}/usr/bin/${pkgname}"
install -Dm 755 "${srcdir}/${pkgname}_wayland" "${pkgdir}/usr/bin/${pkgname}_wayland"
echo 'Installing desktop shortcut and icon'
magick "${pkgdir}/opt/${pkgname}/icon.xpm" "${srcdir}/${pkgname}.png"
install -dm 755 "${pkgdir}/usr/share/pixmaps/"
install -dm 755 "${pkgdir}/usr/share/applications/"
install -Dm 644 "${srcdir}/${pkgname}.png" "${pkgdir}/usr/share/pixmaps/${pkgname}.png"
install -Dm 644 "${srcdir}/${pkgname}.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"
#echo 'Replace GDB by system'
#rm "${pkgdir}/opt/stm32cubeide/plugins/"com.st.stm32cube.ide.mcu.externaltools.gnu-tools-for-stm32*/tools/bin/arm-none-eabi-gdb
#rm "${pkgdir}/opt/stm32cubeide/plugins/"com.st.stm32cube.ide.mcu.externaltools.gnu-tools-for-stm32*/tools/bin/arm-none-eabi-gdb-add-index
#ln -s /usr/bin/arm-none-eabi-gdb "${pkgdir}/opt/stm32cubeide/plugins/"com.st.stm32cube.ide.mcu.externaltools.gnu-tools-for-stm32*/tools/bin
#ln -s /usr/bin/arm-none-eabi-gdb-add-index "${pkgdir}/opt/stm32cubeide/plugins/"com.st.stm32cube.ide.mcu.externaltools.gnu-tools-for-stm32*/tools/bin
echo 'Create symlink from original directory name'
read -r default_install_path < "${srcdir}/build/default_install_path.txt"
install -dm 755 "${pkgdir}/opt/st/"
ln -s "/opt/${pkgname}" "${pkgdir}${default_install_path}"
echo 'Installing license files'
install -dm 755 "${pkgdir}/usr/share/licenses/${pkgname}/"
install -Dm 644 -o root -g root "${srcdir}/${_pkg_license_name}" "${pkgdir}/usr/share/licenses/${pkgname}/"
#install -Dm 644 -o root -g root "${srcdir}/${_pkg_additional_terms}" "${pkgdir}/usr/share/licenses/${pkgname}/"
}
#
# makepkg --printsrcinfo > .SRCINFO
#
# vim: set ts=8 sw=8 tw=0 noet:
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |