swiftpoint-x1-control-panel
The package downloads a source tarball and assets from the vendor's official Azure blob storage and support site, which is plausible for the project; it builds and installs the vendor's own software without executing untrusted remote code or introducing malicious payloads.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source tarball and assets from the vendor's official Azure blob storage and support site, which is plausible for the project; it builds and installs the vendor's own software without executing untrusted remote code or introducing malicious payloads.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:16
"Swiftpoint_X1_Control_Panel_${pkgver}.tar.xz::https://swiftpointdrivers.blob.core.windows.net/pro/public/linux/Swiftpoint%20X1%20Control%20Panel%20${pkgver}-33507352.tar.xz" -
PKGBUILD:17
"com.swiftpoint.png::https://support.swiftpoint.com/portal/api/publicImages/236657000020283222?portalId=edbsn0d3aa90196a4e3b6b39dfa53f41ea57346e362747d42eef1744d58b0281647e9"
PKGBUILD
2 offending line(s) highlighted#Maintainer: Antony Rinaldi <antony@atyrnal.dev>
pkgname=swiftpoint-x1-control-panel
pkgver=3.1.4.0
pkgrel=3
pkgdesc="Control panel for Swiftpoint devices"
arch=('x86_64')
url="https://support.swiftpoint.com/portal/en/kb/articles/swiftpoint-x1-control-panel-download"
license=('custom')
options=(!debug)
provides=(swiftpoint-x1-control-panel)
conflicts=(swiftpoint-x1-control-panel)
optdepends=('gnome-shell-extension-appindicator: tray icon on GNOME')
backup=('etc/xdg/Swiftpoint X1 Control Panel/policy.ini') #Leave any user changes to policy.ini
source=(
"Swiftpoint_X1_Control_Panel_${pkgver}.tar.xz::https://swiftpointdrivers.blob.core.windows.net/pro/public/linux/Swiftpoint%20X1%20Control%20Panel%20${pkgver}-33507352.tar.xz"
"com.swiftpoint.png::https://support.swiftpoint.com/portal/api/publicImages/236657000020283222?portalId=edbsn0d3aa90196a4e3b6b39dfa53f41ea57346e362747d42eef1744d58b0281647e9"
"com.swiftpoint.X1_Control_Panel.desktop"
)
install=Swiftpoint_X1_Control_Panel.install
sha256sums=('59324a145e7fcc2f5a54b38789bea9d99aea941e7b29fc63d148da7e28411913'
'a7117e87abf569325fe6257d5ec5e7043b156d06feebd9ac22bd54f181b936f9'
'1f392375193f0ce122b0d0c8f10e3f50b6ca60f0fbfdd6e3f26f3b765ee14c0d')
package() {
cd "${srcdir}/Swiftpoint X1 Control Panel ${pkgver}"
# Install binary
install -Dm755 "Swiftpoint X1 Control Panel" \
"$pkgdir/usr/lib/swiftpoint/Swiftpoint X1 Control Panel"
# Copy config and starter mappings
install -Dm644 "qt.conf" \
"$pkgdir/usr/lib/swiftpoint/qt.conf"
install -Dm644 "Starter Mappings.spcf" \
"$pkgdir/usr/lib/swiftpoint/Starter Mappings.spcf"
# Copy subdirectories
cp -r lib "$pkgdir/usr/lib/swiftpoint/lib"
cp -r plugins "$pkgdir/usr/lib/swiftpoint/plugins"
cp -r translations "$pkgdir/usr/lib/swiftpoint/translations"
cp -r profiles "$pkgdir/usr/lib/swiftpoint/profiles"
cp -r fw "$pkgdir/usr/lib/swiftpoint/fw"
# Create a wrapper script to ensure libaries load correctly
install -Dm755 /dev/stdin "$pkgdir/usr/bin/swiftpoint-x1-control-panel" <<EOF
#!/bin/sh
export LD_LIBRARY_PATH="/usr/lib/swiftpoint/lib:\$LD_LIBRARY_PATH"
exec "/usr/lib/swiftpoint/Swiftpoint X1 Control Panel" "\$@"
EOF
# Install udev rules
install -Dm644 "60-Swiftpoint.rules" \
"$pkgdir/usr/lib/udev/rules.d/60-Swiftpoint.rules"
# Install icons, license, and desktop file
install -Dm644 "${srcdir}/com.swiftpoint.png" \
"$pkgdir/usr/share/pixmaps/com.swiftpoint.png"
install -Dm644 "${srcdir}/com.swiftpoint.X1_Control_Panel.desktop" \
"$pkgdir/usr/share/applications/com.swiftpoint.X1_Control_Panel.desktop"
install -Dm644 "Swiftpoint X1 Control Panel Licence.txt" \
"$pkgdir/usr/share/licenses/$pkgname/LICENSE"
install -Dm644 "THIRD-PARTY-NOTICES.txt" \
"$pkgdir/usr/share/licenses/$pkgname/THIRD-PARTY-NOTICES"
#The custom service was removed as of package ver 3.1.4.0-2. If you want autostart, copy the .desktop file
#To your ~/.config/autostart directory.
# Disable swiftpoint's auto update feature (since we're managing versions with pacman)
# This can be re-enabled by editing /etc/xdg/Swiftpoint X1 Control Panel/policy.ini
install -Dm644 /dev/stdin "$pkgdir/etc/xdg/Swiftpoint X1 Control Panel/policy.ini" <<EOF
[General]
DisableUpdates=true
EOF
}
Changes since previous scan
--- PKGBUILD @ 2026-10-19 00:03+++ PKGBUILD @ 2026-11-01 00:21@@ -1,54 +1,76 @@+#Maintainer: Antony Rinaldi <antony@atyrnal.dev>+ pkgname=swiftpoint-x1-control-panel pkgver=3.1.4.0-pkgrel=1+pkgrel=3 pkgdesc="Control panel for Swiftpoint devices" arch=('x86_64') url="https://support.swiftpoint.com/portal/en/kb/articles/swiftpoint-x1-control-panel-download" license=('custom') options=(!debug)+provides=(swiftpoint-x1-control-panel)+conflicts=(swiftpoint-x1-control-panel)+optdepends=('gnome-shell-extension-appindicator: tray icon on GNOME')+backup=('etc/xdg/Swiftpoint X1 Control Panel/policy.ini') #Leave any user changes to policy.ini source=( "Swiftpoint_X1_Control_Panel_${pkgver}.tar.xz::https://swiftpointdrivers.blob.core.windows.net/pro/public/linux/Swiftpoint%20X1%20Control%20Panel%20${pkgver}-33507352.tar.xz" "com.swiftpoint.png::https://support.swiftpoint.com/portal/api/publicImages/236657000020283222?portalId=edbsn0d3aa90196a4e3b6b39dfa53f41ea57346e362747d42eef1744d58b0281647e9" "com.swiftpoint.X1_Control_Panel.desktop"- "swiftpoint-x1-control-panel.service" ) install=Swiftpoint_X1_Control_Panel.install sha256sums=('59324a145e7fcc2f5a54b38789bea9d99aea941e7b29fc63d148da7e28411913' 'a7117e87abf569325fe6257d5ec5e7043b156d06feebd9ac22bd54f181b936f9'- '1f392375193f0ce122b0d0c8f10e3f50b6ca60f0fbfdd6e3f26f3b765ee14c0d'- '0b06cc7dd26a4743b7333b2ebf575828c73c8e652ea572fa177cfcbdc9faed23')+ '1f392375193f0ce122b0d0c8f10e3f50b6ca60f0fbfdd6e3f26f3b765ee14c0d') package() { cd "${srcdir}/Swiftpoint X1 Control Panel ${pkgver}" - install -Dm755 "Swiftpoint X1 Control Panel" \- "$pkgdir/usr/lib/swiftpoint/Swiftpoint X1 Control Panel"+ # Install binary+ install -Dm755 "Swiftpoint X1 Control Panel" \+ "$pkgdir/usr/lib/swiftpoint/Swiftpoint X1 Control Panel"++ # Copy config and starter mappings install -Dm644 "qt.conf" \ "$pkgdir/usr/lib/swiftpoint/qt.conf" install -Dm644 "Starter Mappings.spcf" \ "$pkgdir/usr/lib/swiftpoint/Starter Mappings.spcf" -+ # Copy subdirectories cp -r lib "$pkgdir/usr/lib/swiftpoint/lib" cp -r plugins "$pkgdir/usr/lib/swiftpoint/plugins" cp -r translations "$pkgdir/usr/lib/swiftpoint/translations" cp -r profiles "$pkgdir/usr/lib/swiftpoint/profiles"+ cp -r fw "$pkgdir/usr/lib/swiftpoint/fw" + # Create a wrapper script to ensure libaries load correctly install -Dm755 /dev/stdin "$pkgdir/usr/bin/swiftpoint-x1-control-panel" <<EOF #!/bin/sh export LD_LIBRARY_PATH="/usr/lib/swiftpoint/lib:\$LD_LIBRARY_PATH" exec "/usr/lib/swiftpoint/Swiftpoint X1 Control Panel" "\$@" EOF - install -Dm644 "60-Swiftpoint.rules" \- "$pkgdir/usr/lib/udev/rules.d/60-Swiftpoint.rules"+ # Install udev rules+ install -Dm644 "60-Swiftpoint.rules" \+ "$pkgdir/usr/lib/udev/rules.d/60-Swiftpoint.rules"++ # Install icons, license, and desktop file install -Dm644 "${srcdir}/com.swiftpoint.png" \ "$pkgdir/usr/share/pixmaps/com.swiftpoint.png"- install -Dm644 "${srcdir}/com.swiftpoint.X1_Control_Panel.desktop" \- "$pkgdir/usr/share/applications/com.swiftpoint.X1_Control_Panel.desktop"+ install -Dm644 "${srcdir}/com.swiftpoint.X1_Control_Panel.desktop" \+ "$pkgdir/usr/share/applications/com.swiftpoint.X1_Control_Panel.desktop" install -Dm644 "Swiftpoint X1 Control Panel Licence.txt" \ "$pkgdir/usr/share/licenses/$pkgname/LICENSE"- install -Dm644 "${srcdir}/swiftpoint-x1-control-panel.service" \- "$pkgdir/usr/lib/systemd/user/swiftpoint-x1-control-panel.service"+ install -Dm644 "THIRD-PARTY-NOTICES.txt" \+ "$pkgdir/usr/share/licenses/$pkgname/THIRD-PARTY-NOTICES"++ #The custom service was removed as of package ver 3.1.4.0-2. If you want autostart, copy the .desktop file+ #To your ~/.config/autostart directory.++ # Disable swiftpoint's auto update feature (since we're managing versions with pacman)+ # This can be re-enabled by editing /etc/xdg/Swiftpoint X1 Control Panel/policy.ini+ install -Dm644 /dev/stdin "$pkgdir/etc/xdg/Swiftpoint X1 Control Panel/policy.ini" <<EOF+[General]+DisableUpdates=true+EOF } Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 15:25:12 | Medium | 1 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 15:16:11 | Medium | 1 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |