wingedit

LOW

maintainer Jacob_eagle14 2 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads a source tarball from a non-whitelisted but plausibly official Behringer CDN (mediavalet.com) for building; the payload is a legitimate application binary, not executed code or data, and checksums are provided, so the risk is low despite the non-standard host.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source tarball from a non-whitelisted but plausibly official Behringer CDN (mediavalet.com) for building; the payload is a legitimate application binary, not executed code or data, and checksums are provided, so the risk is low despite the non-standard host.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:14 source_x86_64=("https://cdn.mediavalet.com/aunsw/musictribe/cOBFJrXte0GPqwr6AfER2A/iwlHH7bEXE-X1AreNHQLvg/Original/Wing-Edit_LINUX_${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Jakub kubaszek10puchacz@gmail.com
    
      2
    
      3pkgname=wingedit
    
      4pkgver=3.3.1
    
      5pkgrel=1
    
      6pkgdesc="Remote control program for Behringer Wing mixers"
    
      7arch=('x86_64' 'armv7h')
    
      8url="https://www.behringer.com/downloads.html"
    
      9license=('custom:MUSIC Group End User License Agreement')
    
      10depends=('alsa-lib' 'freetype2' 'libcurl-gnutls' 'libglvnd' 'libxext')
    
      11pkgbase=wingedit
    
      12
    
      13
    
      14source_x86_64=("https://cdn.mediavalet.com/aunsw/musictribe/cOBFJrXte0GPqwr6AfER2A/iwlHH7bEXE-X1AreNHQLvg/Original/Wing-Edit_LINUX_${pkgver}.tar.gz"
    
      15               "wingedit.png"
    
      16               "wingedit.desktop")  # Dodanie pliku .desktop do źródeł
    
      17source_armv7h=("https://cdn.mediavalet.com/aunsw/musictribe/4feATL_MLE2v0GfcxD8z8w/2L7p2gnBvE67LADZVADQ0g/Original/Wing-Edit_RASPI64_${pkgver}.tar.gz"
    
      18               "wingedit.png"
    
      19               "wingedit.desktop")
    
      20
    
      21sha256sums_x86_64=('99ca0815313dc66d9709a4ad51d3fd1cb657fff9c637a60007dcfc0d9f6ba9f5'
    
      22                   'e8a8d3e1e433f256f0314804a1fed664ad21c2afe8df37062078aa692ea749cc'
    
      23                   'aa4ddc064fd05f0eed9833164686838682f0ff9df4e09f237eb6fc56ec94da7c')
    
      24sha256sums_armv7h=('d93a78c1b3acef65697b897374eef4e69c9677ae83edfba1b3c6ad6ea9b76a73'
    
      25                   'e8a8d3e1e433f256f0314804a1fed664ad21c2afe8df37062078aa692ea749cc'
    
      26                   'aa4ddc064fd05f0eed9833164686838682f0ff9df4e09f237eb6fc56ec94da7c')
    
      27
    
      28package() {
    
      29    # Rozpakowanie archiwum
    
      30    cd "$srcdir"
    
      31    tar -xzf Wing-Edit_LINUX_${pkgver}.tar.gz
    
      32
    
      33    # Instalacja pliku wykonywalnego do /usr/bin
    
      34    install -Dm755 WING-Edit "$pkgdir/usr/bin/wingedit"
    
      35
    
      36    # Instalacja ikony do /usr/share/pixmaps
    
      37    install -Dm644 "$srcdir/wingedit.png" "$pkgdir/usr/share/pixmaps/wingedit.png"
    
      38
    
      39    # Instalacja pliku .desktop
    
      40    install -Dm644 "$srcdir/wingedit.desktop" "$pkgdir/usr/share/applications/wingedit.desktop"
    
      41} #this thing does what it was made for so you can install this app. However idk why it just doesn't update on AUR
    
      42
    
      43

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2