virtualhub-v2

LOW

maintainer sylvainb 0 votes scanned 2026-09-11 09:25:47.336198

View on AUR

Why flagged

Downloads a prebuilt binary from yoctopuce.com, which is the official vendor domain for Yoctopuce products, making this a legitimate official release artifact; the SKIP'd checksum is sloppy but the source is the vendor's own infrastructure, not a swappable third-party host.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 70%): Downloads a prebuilt binary from yoctopuce.com, which is the official vendor domain for Yoctopuce products, making this a legitimate official release artifact; the SKIP'd checksum is sloppy but the source is the vendor's own infrastructure, not a swappable third-party host.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:14 source=("VirtualHubV2.linux.$_build.zip::https://www.yoctopuce.com/FR/downloads/VirtualHubV2.linux.$_build.zip")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Sylvainb
    
      2pkgname=virtualhub-v2
    
      3_build=75391
    
      4pkgver=2.1.15391
    
      5pkgrel=1
    
      6pkgdesc="Yoctopuce VirtualHub V2 - network gateway for Yoctopuce USB modules"
    
      7arch=('x86_64' 'i686' 'armv7h' 'aarch64')
    
      8url="https://www.yoctopuce.com/"
    
      9license=('custom')
    
      10depends=('glibc')
    
      11options=('!strip')
    
      12install="$pkgname.install"
    
      13
    
      14source=("VirtualHubV2.linux.$_build.zip::https://www.yoctopuce.com/FR/downloads/VirtualHubV2.linux.$_build.zip")
    
      15# update with `updpkgsums`
    
      16sha256sums=('SKIP')
    
      17
    
      18_srcdir() {
    
      19  case "$CARCH" in
    
      20    x86_64)  echo "x86_64" ;;
    
      21    i686)    echo "i386"   ;;
    
      22    armv7h)  echo "armhf"  ;;
    
      23    aarch64) echo "aarch64";;
    
      24    *) echo "Unsuported architecture: $CARCH" >&2; return 1 ;;
    
      25  esac
    
      26}
    
      27
    
      28package() {
    
      29  cd "$srcdir"
    
      30  local d
    
      31  d="$(_srcdir)" || return 1
    
      32
    
      33  install -Dm755 "$d/VirtualHub-V2" "$pkgdir/usr/bin/VirtualHub-V2"
    
      34
    
      35  install -d "$pkgdir/usr/lib/systemd/system"
    
      36  cat > "$pkgdir/usr/lib/systemd/system/yvirtualhub-v2.service" <<'EOF'
    
      37[Unit]
    
      38Description=Yoctopuce VirtualHub V2
    
      39After=network-online.target
    
      40Wants=network-online.target
    
      41
    
      42[Service]
    
      43Type=simple
    
      44ExecStart=/usr/bin/VirtualHub-V2
    
      45StateDirectory=virtualhub-v2
    
      46Environment=HOME=/var/lib/virtualhub-v2
    
      47Restart=on-failure
    
      48RestartSec=5
    
      49
    
      50[Install]
    
      51WantedBy=multi-user.target
    
      52EOF
    
      53
    
      54  # udev: access for all users (0666), to restrict to "yoctogroup", use _group intead of _all above.
    
      55  install -Dm644 "udev_conf/51-yoctopuce_all.rules" \
    
      56    "$pkgdir/usr/lib/udev/rules.d/51-yoctopuce.rules"
    
      57
    
      58  install -Dm644 "LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      59  install -Dm644 "LISEZMOI.txt" "$pkgdir/usr/share/doc/$pkgname/LISEZMOI.txt"
    
      60  install -Dm644 "README.txt"   "$pkgdir/usr/share/doc/$pkgname/README.txt"
    
      61  install -Dm644 "Documentation/VirtualHub-manual-EN.pdf" \
    
      62    "$pkgdir/usr/share/doc/$pkgname/VirtualHub-manual-EN.pdf"
    
      63  install -Dm644 "Documentation/VirtualHub-manual-FR.pdf" \
    
      64    "$pkgdir/usr/share/doc/$pkgname/VirtualHub-manual-FR.pdf"
    
      65}
    
      66

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-11 09:25:47	Low	3
2026-09-11 09:22:22	Medium	2