swiftpoint-x1-control-panel

LOW

maintainer atyrnal 2 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads the official source tarball and assets from the vendor's own blob storage and support domain, which are plausibly controlled by Swiftpoint; the files are verified via sha256sums and consist of application binaries, configs, and resources installed in standard locations without executing remote code.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads the official source tarball and assets from the vendor's own blob storage and support domain, which are plausibly controlled by Swiftpoint; the files are verified via sha256sums and consist of application binaries, configs, and resources installed in standard locations without executing remote code.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:10 "Swiftpoint_X1_Control_Panel_${pkgver}.tar.xz::https://swiftpointdrivers.blob.core.windows.net/pro/beta/linux/Swiftpoint%20X1%20Control%20Panel%20${pkgver}-4c902f5d.tar.xz"
PKGBUILD:11 "com.swiftpoint.png::https://support.swiftpoint.com/portal/api/publicImages/236657000020283222?portalId=edbsn0d3aa90196a4e3b6b39dfa53f41ea57346e362747d42eef1744d58b0281647e9"

PKGBUILD

2 offending line(s) highlighted

      1pkgname=swiftpoint-x1-control-panel
    
      2pkgver=3.1.3.1
    
      3pkgrel=1
    
      4pkgdesc="Control panel for Swiftpoint devices"
    
      5arch=('x86_64')
    
      6url="https://support.swiftpoint.com/portal/en/kb/articles/swiftpoint-x1-control-panel-download"
    
      7license=('custom')
    
      8options=(!debug)
    
      9source=(
    
      10   	"Swiftpoint_X1_Control_Panel_${pkgver}.tar.xz::https://swiftpointdrivers.blob.core.windows.net/pro/beta/linux/Swiftpoint%20X1%20Control%20Panel%20${pkgver}-4c902f5d.tar.xz"
    
      11	"com.swiftpoint.png::https://support.swiftpoint.com/portal/api/publicImages/236657000020283222?portalId=edbsn0d3aa90196a4e3b6b39dfa53f41ea57346e362747d42eef1744d58b0281647e9"
    
      12	"com.swiftpoint.X1_Control_Panel.desktop"
    
      13	"swiftpoint-x1-control-panel.service"
    
      14)
    
      15install=Swiftpoint_X1_Control_Panel.install
    
      16sha256sums=('5cbc12e66fc0ae6b58d4d0b2ae9d71e34ca526ddf5dfe791f4743fab69b2bce8'
    
      17            'a7117e87abf569325fe6257d5ec5e7043b156d06feebd9ac22bd54f181b936f9'
    
      18            '1f392375193f0ce122b0d0c8f10e3f50b6ca60f0fbfdd6e3f26f3b765ee14c0d'
    
      19	    '0b06cc7dd26a4743b7333b2ebf575828c73c8e652ea572fa177cfcbdc9faed23')
    
      20
    
      21package() {
    
      22	cd "${srcdir}/Swiftpoint X1 Control Panel ${pkgver}"
    
      23
    
      24    	install -Dm755 "Swiftpoint X1 Control Panel" \
    
      25        	"$pkgdir/usr/lib/swiftpoint/Swiftpoint X1 Control Panel"
    
      26	install -Dm644 "qt.conf" \
    
      27		"$pkgdir/usr/lib/swiftpoint/qt.conf"
    
      28	install -Dm644 "Starter Mappings.spcf" \
    
      29		"$pkgdir/usr/lib/swiftpoint/Starter Mappings.spcf"
    
      30	
    
      31
    
      32	cp -r lib "$pkgdir/usr/lib/swiftpoint/lib"
    
      33	cp -r plugins "$pkgdir/usr/lib/swiftpoint/plugins"
    
      34	cp -r translations "$pkgdir/usr/lib/swiftpoint/translations"
    
      35	cp -r profiles "$pkgdir/usr/lib/swiftpoint/profiles"
    
      36
    
      37	install -Dm755 /dev/stdin "$pkgdir/usr/bin/swiftpoint-x1-control-panel" <<EOF
    
      38#!/bin/sh
    
      39export LD_LIBRARY_PATH="/usr/lib/swiftpoint/lib:\$LD_LIBRARY_PATH"
    
      40exec "/usr/lib/swiftpoint/Swiftpoint X1 Control Panel" "\$@"
    
      41EOF
    
      42
    
      43    	install -Dm644 "60-Swiftpoint.rules" \
    
      44        	"$pkgdir/usr/lib/udev/rules.d/60-Swiftpoint.rules"
    
      45	install -Dm644 "${srcdir}/com.swiftpoint.png" \
    
      46		"$pkgdir/usr/share/pixmaps/com.swiftpoint.png"
    
      47    	install -Dm644 "${srcdir}/com.swiftpoint.X1_Control_Panel.desktop" \
    
      48        	"$pkgdir/usr/share/applications/com.swiftpoint.X1_Control_Panel.desktop"
    
      49	install -Dm644 "Swiftpoint X1 Control Panel Licence.txt" \
    
      50		"$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      51	install -Dm644 "${srcdir}/swiftpoint-x1-control-panel.service" \
    
      52    		"$pkgdir/usr/lib/systemd/user/swiftpoint-x1-control-panel.service"
    
      53}
    
      54

Changes since previous scan

--- PKGBUILD @ 2026-09-16 00:03
+++ PKGBUILD @ 2026-09-17 00:27
@@ -1,5 +1,5 @@
 pkgname=swiftpoint-x1-control-panel
-pkgver=3.1.2.0
+pkgver=3.1.3.1
 pkgrel=1
 pkgdesc="Control panel for Swiftpoint devices"
 arch=('x86_64')
@@ -7,13 +7,13 @@
 license=('custom')
 options=(!debug)
 source=(
-   	"Swiftpoint_X1_Control_Panel_${pkgver}.tar.xz::https://swiftpointdrivers.blob.core.windows.net/pro/beta/linux/Swiftpoint%20X1%20Control%20Panel%20${pkgver}-75bd9042.tar.xz"
+   	"Swiftpoint_X1_Control_Panel_${pkgver}.tar.xz::https://swiftpointdrivers.blob.core.windows.net/pro/beta/linux/Swiftpoint%20X1%20Control%20Panel%20${pkgver}-4c902f5d.tar.xz"
 	"com.swiftpoint.png::https://support.swiftpoint.com/portal/api/publicImages/236657000020283222?portalId=edbsn0d3aa90196a4e3b6b39dfa53f41ea57346e362747d42eef1744d58b0281647e9"
 	"com.swiftpoint.X1_Control_Panel.desktop"
 	"swiftpoint-x1-control-panel.service"
 )
 install=Swiftpoint_X1_Control_Panel.install
-sha256sums=('00a00a98e2fc8e0ea32ac5b34cb008ff39a177e91e28fc29551070ded371b049'
+sha256sums=('5cbc12e66fc0ae6b58d4d0b2ae9d71e34ca526ddf5dfe791f4743fab69b2bce8'
             'a7117e87abf569325fe6257d5ec5e7043b156d06feebd9ac22bd54f181b936f9'
             '1f392375193f0ce122b0d0c8f10e3f50b6ca60f0fbfdd6e3f26f3b765ee14c0d'
 	    '0b06cc7dd26a4743b7333b2ebf575828c73c8e652ea572fa177cfcbdc9faed23')

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 01:20:46	Medium	1
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2