x32edit-bin

MEDIUM

maintainer Sokoloft 0 votes scanned 2026-09-24 03:43:10.530131

View on AUR

Why flagged

A prebuilt binary for Behringer X32-Edit is downloaded from 'cdn-media.empowertribe.com', which is not Behringer's official domain and appears to be an unrelated third-party CDN/host, making it a swappable unofficial source for an executable that gets installed to /usr/bin; checksums are present but the host itself is not verifiably controlled by Behringer.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:18 "X32-Edit_LINUX_$pkgver.tar.gz::https://cdn-media.empowertribe.com/23b991ede2e6473d916c7ac56f53d71d/X32-Edit_LINUX_$pkgver.tar.gz"

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 70%): A prebuilt binary for Behringer X32-Edit is downloaded from 'cdn-media.empowertribe.com', which is not Behringer's official domain and appears to be an unrelated third-party CDN/host, making it a swappable unofficial source for an executable that gets installed to /usr/bin; checksums are present but the host itself is not verifiably controlled by Behringer.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Sokoloft <sokoloft nospamat protonmail nospamdot com>
    
      2# Contributor: Adrian Groh <adrian[dot]groh[at]t[dash]online[dot]de>
    
      3# Contributor: Oliver Rümpelein <arch@pheerai.de>; Siegfried Krug <siegfried nospamat fg4f nospamdot de>
    
      4# Contributor: Evan Anderson <evananderson@thelinuxman.us>
    
      5
    
      6pkgname=x32edit-bin
    
      7_pkgname="${pkgname%-bin}" # Removes trailing "-bin"
    
      8pkgver=4.4.1
    
      9pkgrel=1
    
      10pkgdesc="Remote control program for Behringer X32 mixers"
    
      11arch=('x86_64')
    
      12url="https://www.behringer.com"
    
      13license=('custom')
    
      14makedepends=("gendesk")
    
      15depends=("alsa-lib" "freetype2" "curl" "gcc-libs" "glibc")
    
      16
    
      17source=("EULA_2012-09-12.pdf"
    
      18        "X32-Edit_LINUX_$pkgver.tar.gz::https://cdn-media.empowertribe.com/23b991ede2e6473d916c7ac56f53d71d/X32-Edit_LINUX_$pkgver.tar.gz"
    
      19        "${_pkgname}.png")
    
      20
    
      21sha512sums=('fe39285768937d82f31844b789d1075de8196495727653595e59f4f1b282f6dbe18a8a8bc51b837f284601dc37c52211d3d494a8636512f5398da31ff3d30284'
    
      22            '7d5ed5ea0400a63179adb59e701472b78efecd50a5d8c9ffb4ad5df4e9116cf9af35fcd2b856c1d7e899ce923b9fa1822272363969500a180477e5addac8b96f'
    
      23            'b08b60036dc8794d14f5f7e2792c09e89796aa3c4118ebd3e007cbdf5e2e8e09196a0ed434d21a2b5cddbfe7525d37898eb5bf73d179dedf39aace821cbdefdb')
    
      24b2sums=('f3af5fcb0044782d51ef976375b6184d781bab5110fb2184ac40443df7b21fdfc12ffa534448bb0aa41df8210c5e63a7d2995ee54279c2ec0824de5eb83aae64'
    
      25        '16a012f7071d72992c5425a393bf43f855907eb8201a57db348002a88988b8886273b9b5768fd92327ace64da3cccc44397cdce482e6eebc62d9ee4be917c20a'
    
      26        '75f59c457f27432cea3fffe255b9c1222eaf55b8f276306b9272096c01b12a347deb0d1a4ec7acecd9f3405915fffce5f45c64e695a088d48d24d211e2aeede9')
    
      27
    
      28
    
      29prepare() {
    
      30	gendesk -n --pkgname "${_pkgname}" --pkgdesc "${pkgdesc}" --exec="${_pkgname}" --name "X32 Edit" --icon "${_pkgname}.png" --categories "AudioVideo;Audio" --terminal=false --custom="Keywords=Mixer;Behringer;"
    
      31}
    
      32
    
      33package() {
    
      34    install -Dm755 "X32-Edit" "${pkgdir}/usr/bin/${_pkgname}"
    
      35    install -Dm644 "EULA_2012-09-12.pdf" "${pkgdir}/usr/share/licenses/${_pkgname}/license.pdf"
    
      36    install -Dm644 "${_pkgname}.desktop" "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
    
      37    install -Dm644 "${_pkgname}.png" "${pkgdir}/usr/share/pixmaps/${_pkgname}.png"
    
      38}
    
      39

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-24 03:43:10	Medium	3
2026-09-24 03:41:46	Medium	2