write_stylus
LOW
maintainer dybdeskarphet
21 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package builds from the project's own GitHub repositories and a data file (EULA) from the official domain; SKIP'd checksums are for git submodules which are common in AUR packages, and no untrusted executable code is downloaded or executed.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the project's own GitHub repositories and a data file (EULA) from the official domain; SKIP'd checksums are for git submodules which are common in AUR packages, and no untrusted executable code is downloaded or executed.
2 higher static findings superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:18
"http://www.styluslabs.com/write/eula.docx"
Medium
Recently orphaned & re-adopted
orphaned_readopted
This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Ahmet Arda Kavakcı <ahmetardakavakci {at} gmail {dot} com>
2
# Contributor: envolution
3
# Contributor: Adam Goldsmith <contact@adamgoldsmith.name>
4
# Contributor: Janosch Dobler <janosch.dobler [at} gmx [dot} de>
5
# shellcheck shell=bash disable=SC2034,SC2154
6
7
pkgname=write_stylus
8
pkgver=jul.2025
9
pkgrel=2
10
pkgdesc="Write(orignal name) - A word processor for handwriting"
11
arch=(i686 x86_64)
12
url="http://www.styluslabs.com/"
13
license=('AGPL-3.0-only')
14
depends=(sdl2 pugixml libxi)
15
makedepends=(git)
16
source=(
17
"${pkgname}::git+https://github.com/styluslabs/Write.git#tag=${pkgver//./-}"
18
"http://www.styluslabs.com/write/eula.docx"
19
git+https://github.com/styluslabs/nanovgXC.git
20
git+https://github.com/styluslabs/ulib.git
21
git+https://github.com/styluslabs/usvg.git
22
git+https://github.com/styluslabs/ugui.git)
23
sha256sums=('f0749381323ba2794a22a227c10689a58d213a8b7da76232a03928cdfc1b8be4'
24
'637c47c1843860a16f1ca87e2df5d72b4396ff23cefacf6244de95cdac23de6e'
25
'SKIP'
26
'SKIP'
27
'SKIP'
28
'SKIP')
29
noextract=("eula.docx")
30
31
prepare() {
32
git -C "${pkgname}" submodule init
33
git -C "${pkgname}" config --local submodule.deps/nanovgXC.url "${srcdir}/nanovgXC"
34
git -C "${pkgname}" config --local submodule.deps/ulib.url "${srcdir}/ulib"
35
git -C "${pkgname}" config --local submodule.deps/usvg.url "${srcdir}/usvg"
36
git -C "${pkgname}" config --local submodule.deps/ugui.url "${srcdir}/ugui"
37
git -C "${pkgname}" -c protocol.file.allow='always' submodule update
38
39
sed -i '/^#pragma once/a #include <cstdint>' write_stylus/usvg/svgnode.h
40
sed -i 's#^Exec=.*#Exec=/usr/bin/write_stylus#' write_stylus/scribbleres/linux/Write.desktop
41
sed -i 's#^Icon=.*#Icon=write_stylus#' write_stylus/scribbleres/linux/Write.desktop
42
sed -i '/#ifndef NDEBUG/,/#endif/s/#define SCRIBBLE_TEST 1/#undef SCRIBBLE_TEST/' write_stylus/syncscribble/basics.h
43
}
44
build() {
45
cd $pkgname/syncscribble
46
DEBUG=0 make \
47
CFLAGS+="$(pkg-config --cflags sdl2) -DPUGIXML_NO_XPATH -DPUGIXML_NO_EXCEPTIONS -I/usr/include -Wno-error -Wno-format-security -DNDEBUG" \
48
CXXFLAGS+="$(pkg-config --cflags sdl2) -DPUGIXML_NO_XPATH -DPUGIXML_NO_EXCEPTIONS -I/usr/include -Wno-error -Wno-format-security -DNDEBUG -fno-char8_t" \
49
LDFLAGS+="$(pkg-config --libs sdl2)" \
50
USE_SYSTEM_SDL=1
51
}
52
package() {
53
install -dm755 "$pkgdir/usr/share/$pkgname"
54
install -Dm755 "$pkgname/syncscribble/Release/Write" "$pkgdir/usr/share/$pkgname/Write"
55
install -Dm644 "$pkgname/scribbleres/fonts/"{DroidSansFallback.ttf,Roboto-Regular.ttf} "$pkgdir/usr/share/$pkgname/"
56
install -Dm644 "$pkgname/scribbleres/Intro.svg" "$pkgdir/usr/share/$pkgname/"
57
58
install -dm755 "$pkgdir/usr/bin"
59
cat <<'EOF' >"$pkgdir/usr/bin/write_stylus"
60
#!/bin/sh
61
export SDL_VIDEODRIVER=x11
62
exec /usr/share/write_stylus/Write "$@"
63
EOF
64
chmod 755 "$pkgdir/usr/bin/write_stylus"
65
66
install -Dm644 "eula.docx" "$pkgdir/usr/share/licenses/$pkgname/eula.docx"
67
68
install -Dm644 "$pkgname/scribbleres/linux/Write.desktop" "$pkgdir/usr/share/applications/Write.desktop"
69
install -Dm644 "$pkgname/scribbleres/linux/Write144x144.png" "$pkgdir/usr/share/pixmaps/write_stylus.png"
70
}
71
72
# vim:set ts=2 sw=2 et:
73
Changes since previous scan
--- PKGBUILD @ 2026-09-08 00:18+++ PKGBUILD @ 2026-09-17 00:27@@ -1,11 +1,12 @@-# Maintainer: envolution+# Maintainer: Ahmet Arda Kavakcı <ahmetardakavakci {at} gmail {dot} com>+# Contributor: envolution # Contributor: Adam Goldsmith <contact@adamgoldsmith.name> # Contributor: Janosch Dobler <janosch.dobler [at} gmx [dot} de> # shellcheck shell=bash disable=SC2034,SC2154 pkgname=write_stylus pkgver=jul.2025-pkgrel=1+pkgrel=2 pkgdesc="Write(orignal name) - A word processor for handwriting" arch=(i686 x86_64) url="http://www.styluslabs.com/"@@ -20,11 +21,11 @@ git+https://github.com/styluslabs/usvg.git git+https://github.com/styluslabs/ugui.git) sha256sums=('f0749381323ba2794a22a227c10689a58d213a8b7da76232a03928cdfc1b8be4'- '637c47c1843860a16f1ca87e2df5d72b4396ff23cefacf6244de95cdac23de6e'- 'SKIP'- 'SKIP'- 'SKIP'- 'SKIP')+ '637c47c1843860a16f1ca87e2df5d72b4396ff23cefacf6244de95cdac23de6e'+ 'SKIP'+ 'SKIP'+ 'SKIP'+ 'SKIP') noextract=("eula.docx") prepare() {@@ -44,7 +45,7 @@ cd $pkgname/syncscribble DEBUG=0 make \ CFLAGS+="$(pkg-config --cflags sdl2) -DPUGIXML_NO_XPATH -DPUGIXML_NO_EXCEPTIONS -I/usr/include -Wno-error -Wno-format-security -DNDEBUG" \- CXXFLAGS+="$(pkg-config --cflags sdl2) -DPUGIXML_NO_XPATH -DPUGIXML_NO_EXCEPTIONS -I/usr/include -Wno-error -Wno-format-security -DNDEBUG" \+ CXXFLAGS+="$(pkg-config --cflags sdl2) -DPUGIXML_NO_XPATH -DPUGIXML_NO_EXCEPTIONS -I/usr/include -Wno-error -Wno-format-security -DNDEBUG -fno-char8_t" \ LDFLAGS+="$(pkg-config --libs sdl2)" \ USE_SYSTEM_SDL=1 }@@ -54,8 +55,13 @@ install -Dm644 "$pkgname/scribbleres/fonts/"{DroidSansFallback.ttf,Roboto-Regular.ttf} "$pkgdir/usr/share/$pkgname/" install -Dm644 "$pkgname/scribbleres/Intro.svg" "$pkgdir/usr/share/$pkgname/" - install -dm755 "$pkgdir/usr/bin/"- ln -s /usr/share/$pkgname/Write "$pkgdir/usr/bin/write_stylus"+ install -dm755 "$pkgdir/usr/bin"+ cat <<'EOF' >"$pkgdir/usr/bin/write_stylus"+#!/bin/sh+export SDL_VIDEODRIVER=x11+exec /usr/share/write_stylus/Write "$@"+EOF+ chmod 755 "$pkgdir/usr/bin/write_stylus" install -Dm644 "eula.docx" "$pkgdir/usr/share/licenses/$pkgname/eula.docx" Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 3 |
| 2026-09-16 00:03:17 | Low | 3 |
| 2026-09-15 00:25:31 | Low | 3 |
| 2026-09-14 00:27:57 | Low | 3 |
| 2026-09-13 00:19:54 | Low | 3 |
| 2026-09-12 00:25:17 | Low | 3 |
| 2026-09-11 00:19:22 | Low | 3 |
| 2026-09-10 00:22:44 | Low | 3 |
| 2026-09-09 00:04:09 | Low | 3 |
| 2026-09-08 03:15:31 | Medium | 2 |
| 2026-09-08 00:18:08 | Low | 3 |
| 2026-09-07 00:30:15 | Low | 3 |
| 2026-09-06 13:11:32 | Medium | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |