xsens-device-api
LOW
maintainer orphaned
0 votes
scanned 2026-10-17 00:21:55.226236
Why flagged
The package downloads a source tarball from the official xsens.com domain, which is the project's legitimate vendor; despite the static analyzer flagging the host as non-standard, the download is from the official vendor's website and the checksum is verified, making the risk low.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source tarball from the official xsens.com domain, which is the project's legitimate vendor; despite the static analyzer flagging the host as non-standard, the download is from the official vendor's website and the checksum is verified, making the risk low.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:15
source=("https://www.xsens.com/hubfs/Downloads/Software/MTSS/Releases/${pkgver}/MT_Software_Suite_linux-x64_${pkgver::6}_${_pkgrev}.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer:
2
# Contributor: Oystein Sture <oysstu@gmail.com>
3
pkgname=xsens-device-api
4
pkgver=2022.0.0
5
pkgrel=1
6
_pkgrev=b7085_r119802
7
pkgdesc="Movella Xsens Device API"
8
url="https://www.xsens.com/software-downloads"
9
arch=('any')
10
license=('custom')
11
depends=('libusb')
12
checkdepends=()
13
optdepends=()
14
makedepends=()
15
source=("https://www.xsens.com/hubfs/Downloads/Software/MTSS/Releases/${pkgver}/MT_Software_Suite_linux-x64_${pkgver::6}_${_pkgrev}.tar.gz")
16
sha256sums=('2872b96f7c48cfdbe0788dc89881973ea17cd59624bce8af8e7a76b1f4d82d43')
17
18
prepare() {
19
# Skip install location dialog
20
cd "${srcdir}/MT_Software_Suite_linux-x64_${pkgver::6}"
21
sed -i -e 's\/usr/local/xsens\${XS_INST_DIR} \g' -e 's\read INSTALL_PREFIX\#ead INSTALL_PREFIX\g' "mtsdk_linux-x64_${pkgver::6}.sh"
22
23
# Unpack sources
24
export XS_INST_DIR=${srcdir}/xda
25
mkdir -p ${XS_INST_DIR}
26
chmod +x "mtsdk_linux-x64_${pkgver::6}.sh"
27
./mtsdk_linux-x64_${pkgver::6}.sh
28
29
# Change install from static to shared library
30
sed -i -e 's/libxscommon.a/libxscommon.so/g' -e 's/ar rcs $@ $^/gcc -shared $^ -o $@/g' "${XS_INST_DIR}/public/xspublic/xscommon/Makefile"
31
sed -i -e 's/libxscontroller.a/libxscontroller.so/g' -e 's/ar rcs $@ $^/gcc -shared $^ -o $@/g' "${XS_INST_DIR}/public/xspublic/xscontroller/Makefile"
32
sed -i -e 's/libxstypes.a/libxstypes.so/g' -e 's/ar rcs $@ $^/gcc -shared $^ -o $@/g' "${XS_INST_DIR}/public/xspublic/xstypes/Makefile"
33
}
34
35
build() {
36
cd "${XS_INST_DIR}/public/xspublic/"
37
export CFLAGS="${CFLAGS} -fPIC -DHAVE_LIBUSB"
38
export CXXFLAGS="${CXXFLAGS} -fPIC -DHAVE_LIBUSB"
39
cd xscommon && make
40
cd ../xstypes && make
41
cd ../xscontroller && make
42
}
43
44
package() {
45
mkdir -p "${pkgdir}/usr/include"
46
cp -r "${XS_INST_DIR}/include" "${pkgdir}/usr/"
47
48
mkdir -p "${pkgdir}/usr/lib"
49
install -m644 "${XS_INST_DIR}/public/xspublic/xscommon/libxscommon.so" "${pkgdir}/usr/lib/libxscommon.so"
50
install -m644 "${XS_INST_DIR}/public/xspublic/xstypes/libxstypes.so" "${pkgdir}/usr/lib/libxstypes.so"
51
install -m644 "${XS_INST_DIR}/public/xspublic/xscontroller/libxscontroller.so" "${pkgdir}/usr/lib/libxscontroller.so"
52
53
install -Dm644 "${XS_INST_DIR}/Xsens Technologies MT SS License Agreement.rtf" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
54
}
55
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |
| 2026-10-12 00:18:51 | Low | 2 |
| 2026-10-11 00:26:05 | Low | 2 |
| 2026-10-10 00:11:52 | Low | 2 |
| 2026-10-09 00:05:33 | Low | 2 |
| 2026-10-08 00:28:03 | Low | 2 |
| 2026-10-07 00:21:34 | Low | 2 |
| 2026-10-06 00:13:36 | Low | 2 |
| 2026-10-05 00:08:03 | Low | 2 |
| 2026-10-04 00:18:08 | Low | 2 |
| 2026-10-03 00:23:04 | Low | 2 |
| 2026-10-02 00:00:32 | Low | 2 |
| 2026-10-01 00:02:06 | Low | 2 |
| 2026-09-30 00:20:07 | Low | 2 |
| 2026-09-29 00:07:46 | Low | 2 |
| 2026-09-28 00:28:32 | Low | 2 |