teensyduino
LOW
maintainer fabian-ang
25 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package builds from source URLs on non-whitelisted hosts (github.com, pjrc.com, downloads.arduino.cc), but these are the official project and vendor sites for Teensyduino and Arduino; the sources are either official releases or versioned tarballs, and the package installs only built artifacts and data files without executing untrusted remote code.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source URLs on non-whitelisted hosts (github.com, pjrc.com, downloads.arduino.cc), but these are the official project and vendor sites for Teensyduino and Arduino; the sources are either official releases or versioned tarballs, and the package installs only built artifacts and data files without executing untrusted remote code.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:27
"https://www.pjrc.com/teensy/00-teensy.rules" -
PKGBUILD:29
"http://downloads.arduino.cc/arduino-${_arduinover}-linux64.tar.xz"
PKGBUILD
2 offending line(s) highlighted
1
# Maintainer: Fabian Angenoorth <fabian-ang at mailbox dot org>
2
# Contributor: Niels Martignène <niels.martignene@gmail.com>
3
# Contributor: PyroPeter <googlemail.com@abi1789>
4
# Contributor: darkapex <me@jailuthra.in>
5
# Contributor: tty0 <vt.tty0[d0t]gmail.com>
6
7
pkgname=teensyduino
8
pkgver=1.57
9
_arduinover=1.8.19
10
_pkgname_loader="teensy_loader_cli"
11
_pkgver_loader=2.2
12
pkgrel=1
13
pkgdesc="Arduino SDK with Teensyduino"
14
arch=('x86_64')
15
url="http://www.pjrc.com/teensy/teensyduino.html"
16
options=(!strip staticlibs)
17
license=('GPL' 'LGPL' 'custom')
18
depends=('gtk2' 'libusb-compat' 'libusb' 'java-runtime' 'libpng12' 'libsm'
19
'desktop-file-utils' 'giflib')
20
makedepends=('git')
21
provides=('arduino' 'teensy-loader' 'teensy-loader-cli')
22
conflicts=('arduino' 'teensy-loader' 'teensy-loader-cli' 'teensy-loader-cli-git')
23
install="teensyduino.install"
24
source=('arduino.xml'
25
'teensy-loader.desktop'
26
"$_pkgname_loader-$_pkgver_loader.tar.gz::https://github.com/PaulStoffregen/$_pkgname_loader/archive/$_pkgver_loader.tar.gz"
27
"https://www.pjrc.com/teensy/00-teensy.rules"
28
'LICENSE'
29
"http://downloads.arduino.cc/arduino-${_arduinover}-linux64.tar.xz"
30
"TeensyduinoInstall_${pkgver//./}_x86_64::http://www.pjrc.com/teensy/td_${pkgver//./}/TeensyduinoInstall.linux64")
31
32
sha256sums=('473b82156505e9bd903e4d8484e8d183f2e3bf3c1f7e29940b815929ae597b68'
33
'837a865ab3bf81163c95a8a5898f9d5f0de7740a4207949bc331409cbb40faba'
34
'103c691f412d04906c4f46038c234d3e5f78322c1b78ded102df9f900724cd54'
35
'17f56b63603271e2cdae291fed347b66dfbdfd089b2847cf0b4383c877ffacfb'
36
'25980feb5927b8bea8b8e999f5002e110825b1bc3d546fa902c2db5c824d33f3'
37
'eb68bddc1d1c0120be2fca1350a03ee34531cf37f51847b21210b6e70545bc9b'
38
'0864870639593f4b1df5e9cf7cb6eb6e8e1d9446d0745e6f448d813288ace400')
39
40
build() {
41
echo "Installing Teensyduino"
42
43
chmod +x "TeensyduinoInstall_${pkgver//./}_${CARCH}"
44
./TeensyduinoInstall_${pkgver//./}_${CARCH} --dir="${srcdir}/arduino-${_arduinover}"
45
46
echo "Building Teensy Loader command line"
47
48
cd $_pkgname_loader-$_pkgver_loader
49
make
50
}
51
52
package() {
53
cd "arduino-${_arduinover}"
54
55
mkdir -p "${pkgdir}/usr/bin"
56
mkdir -p "${pkgdir}/usr/share/"{applications,icons/hicolor,mime/packages,licenses/teensyduino}
57
mkdir -p "${pkgdir}/etc/udev/rules.d"
58
59
# copy the whole SDK to /usr/share/arduino/
60
cp -a . "${pkgdir}/usr/share/arduino"
61
62
ln -s /usr/share/arduino/arduino "${pkgdir}/usr/bin/arduino"
63
64
# remove bundled java to use system's java environment
65
rm -rf "${pkgdir}/usr/share/arduino/java"
66
67
# remove bundled arduino boards; they can be downloaded later in the board manager
68
rm -rf "${pkgdir}/usr/share/arduino/hardware/arduino"
69
rm -rf "${pkgdir}/usr/share/arduino/hardware/tools/avr"
70
71
# desktop icon
72
cp -a lib/icons/* "${pkgdir}/usr/share/icons/hicolor"
73
rm -rf "${pkgdir}/usr/share/arduino/lib/icons"
74
ln -s /usr/share/icons/hicolor "${pkgdir}/usr/share/arduino/lib/icons"
75
76
# desktop and mimetype files
77
sed "s,<BINARY_LOCATION>,arduino %U,g;s,<ICON_NAME>,arduino,g" lib/desktop.template > "${pkgdir}/usr/share/applications/arduino.desktop"
78
install -m644 "${srcdir}/arduino.xml" "${pkgdir}/usr/share/mime/packages/"
79
80
# install custom PJRC license
81
install -m644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/teensyduino/"
82
83
# install teensy udev rule
84
install -m644 "${srcdir}/00-teensy.rules" "${pkgdir}/etc/udev/rules.d"
85
86
# install teensy loader files
87
ln -s /usr/share/arduino/hardware/tools/teensy "${pkgdir}/usr/bin/teensy-loader"
88
install -m644 "${srcdir}/teensy-loader.desktop" "${pkgdir}/usr/share/applications/"
89
90
# install command-line teensy loader
91
install -m755 "${srcdir}/$_pkgname_loader-$_pkgver_loader/$_pkgname_loader" "${pkgdir}/usr/bin/$_pkgname_loader"
92
}
93
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |