teensyduino
maintainer fabian-ang
· 25 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package builds from source URLs on non-whitelisted hosts (github.com, pjrc.com, downloads.arduino.cc), but these are the official project and vendor sites for Teensyduino and Arduino; the sources are either official releases or versioned tarballs, and the package installs only built artifacts and data files without executing untrusted remote code.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source URLs on non-whitelisted hosts (github.com, pjrc.com, downloads.arduino.cc), but these are the official project and vendor sites for Teensyduino and Arduino; the sources are either official releases or versioned tarballs, and the package installs only built artifacts and data files without executing untrusted remote code.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:27
"https://www.pjrc.com/teensy/00-teensy.rules" -
PKGBUILD:29
"http://downloads.arduino.cc/arduino-${_arduinover}-linux64.tar.xz"
PKGBUILD
2 offending line(s) highlighted
1
# Maintainer: Fabian Angenoorth <fabian-ang at mailbox dot org>
2
# Contributor: Niels Martignène <niels.martignene@gmail.com>
3
# Contributor: PyroPeter <googlemail.com@abi1789>
4
# Contributor: darkapex <me@jailuthra.in>
5
# Contributor: tty0 <vt.tty0[d0t]gmail.com>
6
7
pkgname=teensyduino
8
pkgver=1.57
9
_arduinover=1.8.19
10
_pkgname_loader="teensy_loader_cli"
11
_pkgver_loader=2.2
12
pkgrel=1
13
pkgdesc="Arduino SDK with Teensyduino"
14
arch=('x86_64')
15
url="http://www.pjrc.com/teensy/teensyduino.html"
16
options=(!strip staticlibs)
17
license=('GPL' 'LGPL' 'custom')
18
depends=('gtk2' 'libusb-compat' 'libusb' 'java-runtime' 'libpng12' 'libsm'
19
'desktop-file-utils' 'giflib')
20
makedepends=('git')
21
provides=('arduino' 'teensy-loader' 'teensy-loader-cli')
22
conflicts=('arduino' 'teensy-loader' 'teensy-loader-cli' 'teensy-loader-cli-git')
23
install="teensyduino.install"
24
source=('arduino.xml'
25
'teensy-loader.desktop'
26
"$_pkgname_loader-$_pkgver_loader.tar.gz::https://github.com/PaulStoffregen/$_pkgname_loader/archive/$_pkgver_loader.tar.gz"
27
"https://www.pjrc.com/teensy/00-teensy.rules"
28
'LICENSE'
29
"http://downloads.arduino.cc/arduino-${_arduinover}-linux64.tar.xz"
30
"TeensyduinoInstall_${pkgver//./}_x86_64::http://www.pjrc.com/teensy/td_${pkgver//./}/TeensyduinoInstall.linux64")
31
32
sha256sums=('473b82156505e9bd903e4d8484e8d183f2e3bf3c1f7e29940b815929ae597b68'
33
'837a865ab3bf81163c95a8a5898f9d5f0de7740a4207949bc331409cbb40faba'
34
'103c691f412d04906c4f46038c234d3e5f78322c1b78ded102df9f900724cd54'
35
'17f56b63603271e2cdae291fed347b66dfbdfd089b2847cf0b4383c877ffacfb'
36
'25980feb5927b8bea8b8e999f5002e110825b1bc3d546fa902c2db5c824d33f3'
37
'eb68bddc1d1c0120be2fca1350a03ee34531cf37f51847b21210b6e70545bc9b'
38
'0864870639593f4b1df5e9cf7cb6eb6e8e1d9446d0745e6f448d813288ace400')
39
40
build() {
41
echo "Installing Teensyduino"
42
43
chmod +x "TeensyduinoInstall_${pkgver//./}_${CARCH}"
44
./TeensyduinoInstall_${pkgver//./}_${CARCH} --dir="${srcdir}/arduino-${_arduinover}"
45
46
echo "Building Teensy Loader command line"
47
48
cd $_pkgname_loader-$_pkgver_loader
49
make
50
}
51
52
package() {
53
cd "arduino-${_arduinover}"
54
55
mkdir -p "${pkgdir}/usr/bin"
56
mkdir -p "${pkgdir}/usr/share/"{applications,icons/hicolor,mime/packages,licenses/teensyduino}
57
mkdir -p "${pkgdir}/etc/udev/rules.d"
58
59
# copy the whole SDK to /usr/share/arduino/
60
cp -a . "${pkgdir}/usr/share/arduino"
61
62
ln -s /usr/share/arduino/arduino "${pkgdir}/usr/bin/arduino"
63
64
# remove bundled java to use system's java environment
65
rm -rf "${pkgdir}/usr/share/arduino/java"
66
67
# remove bundled arduino boards; they can be downloaded later in the board manager
68
rm -rf "${pkgdir}/usr/share/arduino/hardware/arduino"
69
rm -rf "${pkgdir}/usr/share/arduino/hardware/tools/avr"
70
71
# desktop icon
72
cp -a lib/icons/* "${pkgdir}/usr/share/icons/hicolor"
73
rm -rf "${pkgdir}/usr/share/arduino/lib/icons"
74
ln -s /usr/share/icons/hicolor "${pkgdir}/usr/share/arduino/lib/icons"
75
76
# desktop and mimetype files
77
sed "s,<BINARY_LOCATION>,arduino %U,g;s,<ICON_NAME>,arduino,g" lib/desktop.template > "${pkgdir}/usr/share/applications/arduino.desktop"
78
install -m644 "${srcdir}/arduino.xml" "${pkgdir}/usr/share/mime/packages/"
79
80
# install custom PJRC license
81
install -m644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/teensyduino/"
82
83
# install teensy udev rule
84
install -m644 "${srcdir}/00-teensy.rules" "${pkgdir}/etc/udev/rules.d"
85
86
# install teensy loader files
87
ln -s /usr/share/arduino/hardware/tools/teensy "${pkgdir}/usr/bin/teensy-loader"
88
install -m644 "${srcdir}/teensy-loader.desktop" "${pkgdir}/usr/share/applications/"
89
90
# install command-line teensy loader
91
install -m755 "${srcdir}/$_pkgname_loader-$_pkgver_loader/$_pkgname_loader" "${pkgdir}/usr/bin/$_pkgname_loader"
92
}
93
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |