vfrflight-bin
LOW
maintainer kurthuwig
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a versioned source archive from a personal domain, but it is a static release asset for a flight planning tool; the source is not executed remotely, and the build installs only local files with verified checksums.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a versioned source archive from a personal domain, but it is a static release asset for a flight planning tool; the source is not executed remotely, and the build installs only local files with verified checksums.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:29
"https://www.huwig.de/aur/VfrFlight-${pkgver}.zip"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: dreieck
2
3
_pkgname=vfrflight
4
pkgname="${_pkgname}-bin"
5
pkgver=2.3.1
6
pkgrel=5
7
pkgdesc="Tool for VFR flight planning developed by real world private pilot. Can be used for real world flight planning and trainings in FSX / FSX:SE / Prepar3D / X-Plane 10/11 and FlightGear."
8
arch=(
9
'any'
10
)
11
url="http://web.archive.org/web/20230520051005/http://vfrflight.org/en/index.html"
12
license=('custom')
13
depends=(
14
'bash'
15
'java-environment>=1.7'
16
)
17
makedepends=(
18
)
19
optdepends=(
20
"flightgear-addon-vfrflight: For communication between flightgear and ${_pkgname}."
21
)
22
provides=(
23
"${_pkgname}=${pkgver}"
24
)
25
conflicts=(
26
"${_pkgname}"
27
)
28
source=(
29
"https://www.huwig.de/aur/VfrFlight-${pkgver}.zip"
30
"vfrflight.sh"
31
"TERMS_OF_USE.txt"
32
)
33
sha256sums=(
34
'4248c8da66b109e2145c8cb7542eaa6dca25174cf40cba06762762787c40ddbf'
35
'6e11fbcdbfbf7d7e3ebba164513b201a8935745230c2e3c6e279f85de1f0a6af'
36
'62322af524e2448f04ea289d9881a31ed87e4ba4dbca22e643ec4b2c831c17dd'
37
)
38
39
build() {
40
cd "${srcdir}"
41
msg2 "Generating information files on where to find documentation."
42
printf '%s\n' "${url}" > "${srcdir}/upstream.url"
43
printf '%s\n' "http://web.archive.org/web/20230205010920/http://vfrflight.org/en/documentation.html" > "${srcdir}/doc.url"
44
}
45
46
package() {
47
cd "${srcdir}"
48
49
install -d -v -m755 "${pkgdir}/opt/${_pkgname}"
50
cp -rv "${srcdir}/VfrFlight-${pkgver}"/* "${pkgdir}/opt/${_pkgname}/"
51
52
install -D -v -m755 "${srcdir}/vfrflight.sh" "${pkgdir}/usr/bin/vfrflight"
53
54
for _docfile in upstream.url doc.url; do
55
install -D -v -m644 "${srcdir}/${_docfile}" "${pkgdir}/usr/share/doc/${_pkgname}/${_docfile}"
56
done
57
58
ln -svr "${pkgdir}/opt/${_pkgname}" "${pkgdir}/usr/share/doc/${_pkgname}/installation_dir"
59
60
install -D -v -m644 "${srcdir}/TERMS_OF_USE.txt" "${pkgdir}/usr/share/licenses/${pkgname}/TERMS_OF_USE.txt"
61
ln -svr "${pkgdir}/usr/share/licenses/${pkgname}/TERMS_OF_USE.txt" "${pkgdir}/usr/share/doc/${_pkgname}/TERMS_OF_USE.txt"
62
}
63
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |