3dslicer

maintainer hottea · 21 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The source uses a git checkout from the official GitHub repository of the project, which is a normal and safe practice for AUR packages, despite the host not being on a whitelist.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source uses a git checkout from the official GitHub repository of the project, which is a normal and safe practice for AUR packages, despite the host not being on a whitelist.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:57 "${_pkgname}.svg::https://www.slicer.org/assets/img/3D-Slicer-Mark.svg"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Butui Hu <hot123tea123@gmail.com>
    
      2
    
      3_pkgname=3dslicer
    
      4pkgname=3dslicer
    
      5pkgver=5.12.2
    
      6pkgrel=1
    
      7pkgdesc='A free, open source and multi-platform software package widely used for medical, biomedical, and related imaging research'
    
      8arch=('x86_64')
    
      9url='https://www.slicer.org'
    
      10license=('BSD-3-Clause')
    
      11depends=(
    
bzip2
    
curl
    
dcmtk
    
fftw
    
glibc
    
hwloc
    
libarchive
    
libffi
    
libglvnd
    
libice
    
libpng
    
libsm
    
libx11
    
libxcrypt
    
libxcursor
    
libxext
    
libxfixes
    
libxrender
    
openssl
    
qt5-base
    
qt5-declarative
    
qt5-location
    
qt5-multimedia
    
qt5-svg
    
qt5-webchannel
    
qt5-webengine
    
qt5-x11extras
    
qt5-xmlpatterns
    
teem
    
util-linux-libs
    
xz
    
zlib
    
      44)
    
      45makedepends=(
    
clang
    
cmake
    
gendesk
    
git
    
ninja
    
qt5-script
    
qt5-tools
    
subversion
    
      54)
    
      55options=(!emptydirs !strip)
    
      56source=("${_pkgname}::git+https://github.com/Slicer/Slicer.git#tag=v${pkgver}"
    
      "${_pkgname}.svg::https://www.slicer.org/assets/img/3D-Slicer-Mark.svg"
    
      "slicer-vtk-regex-version-script-name.patch"
    
      59)
    
      60sha512sums=('652f3f078c1bdb24a6d275a6d7b4984e91ece432d315ffb91b36e06620bf7f6e85edc441d138d2660db23d6709192ef89600303a447a23b2026edc6fcd08005b'
    
          '3422d244f819a7ec4c475d3d8a90c79fcb73738920c0830b100c6342ca24d5be607ba60ee3d91892402036a0adf31d5ab7c8fc83f451121a7b537f7de5306014'
    
          '3ac8a9e98953ddbffa28dcac5f67156670e24a190433e580e00691856f805602a995104c0e6bdf388289b9a2d0ba6e6a19b4bbea89da71a19d080e8dd7981307')
    
      63
    
      64prepare() {
    
echo "Creating desktop file"
    
gendesk -f -n --pkgname ${_pkgname} \
    
  --categories "Science;MedicalSoftware;Education;MedicalSoftware" \
    
  --exec "Slicer" \
    
  --icon "${_pkgname}" \
    
  --pkgdesc "${pkgdesc}" \
    
  --startupnotify \
    
  --custom="StartupWMClass=Slicer"
    
git -C "${srcdir}/${_pkgname}" apply "${srcdir}/slicer-vtk-regex-version-script-name.patch"
    
      74}
    
      75
    
      76build() {
    
export CC=clang
    
export CXX=clang++
    
cmake \
    
  -B "${srcdir}/build" \
    
  -DBUILD_TESTING=OFF \
    
  -DCMAKE_BUILD_TYPE=Release \
    
  -DCMAKE_INSTALL_PREFIX=/usr \
    
  -DSlicer_BUILD_DOCUMENTATION=OFF \
    
  -DSlicer_BUILD_I18N_SUPPORT=ON \
    
  -DSlicer_BUILD_PARAMETERSERIALIZER_SUPPORT=OFF \
    
  -DSlicer_REQUIRED_QT_VERSION=5 \
    
  -DSlicer_STORE_SETTINGS_IN_APPLICATION_HOME_DIR=OFF \
    
  -DSlicer_USE_GIT_PROTOCOL=OFF \
    
  -DSlicer_USE_PYTHONQT=ON \
    
  -DSlicer_USE_SimpleITK_SHARED=ON \
    
  -DSlicer_USE_SimpleITK=ON \
    
  -DSlicer_USE_SYSTEM_bzip2=ON \
    
  -DSlicer_USE_SYSTEM_CTK=OFF \
    
  -DSlicer_USE_SYSTEM_CTKAPPLAUNCHER=OFF \
    
  -DSlicer_USE_SYSTEM_CTKAppLauncherLib=OFF \
    
  -DSlicer_USE_SYSTEM_curl=ON \
    
  -DSlicer_USE_SYSTEM_DCMTK=ON \
    
  -DSlicer_USE_SYSTEM_ITK=OFF \
    
  -DSlicer_USE_SYSTEM_JsonCpp=OFF \
    
  -DSlicer_USE_SYSTEM_LibArchive=ON \
    
  -DSlicer_USE_SYSTEM_LibFFI=ON \
    
  -DSlicer_USE_SYSTEM_LZMA=ON \
    
  -DSlicer_USE_SYSTEM_OpenSSL=ON \
    
  -DSlicer_USE_SYSTEM_ParameterSerializer=OFF \
    
  -DSlicer_USE_SYSTEM_PCRE2=OFF \
    
  -DSlicer_USE_SYSTEM_python=OFF \
    
  -DSlicer_USE_SYSTEM_qRestAPI=OFF \
    
  -DSlicer_USE_SYSTEM_QT=ON \
    
  -DSlicer_USE_SYSTEM_RapidJSON=OFF \
    
  -DSlicer_USE_SYSTEM_SimpleITK=OFF \
    
  -DSlicer_USE_SYSTEM_SlicerExecutionModel=OFF \
    
  -DSlicer_USE_SYSTEM_sqlite=OFF \
    
  -DSlicer_USE_SYSTEM_Swig=OFF \
    
  -DSlicer_USE_SYSTEM_tbb=OFF \
    
  -DSlicer_USE_SYSTEM_teem=ON \
    
  -DSlicer_USE_SYSTEM_VTK=OFF \
    
  -DSlicer_USE_SYSTEM_zlib=ON \
    
  -GNinja \
    
  -S "${srcdir}/${_pkgname}" \
    
  -Wno-dev
    
cmake --build "${srcdir}/build"
    
      123}
    
      124
    
      125package() {
    
cmake --build "${srcdir}/build/Slicer-build" --target package
    
install -d "${pkgdir}/opt/${_pkgname}" "${pkgdir}/usr/bin"
    
tar xvf "${srcdir}/build/Slicer-build/"*.tar.gz -C "${pkgdir}/opt/${_pkgname}" --strip-components 1
    
ln -s /opt/${_pkgname}/Slicer "${pkgdir}/usr/bin/Slicer"
    
install -Dm644 "${srcdir}/${_pkgname}.desktop" "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
    
install -Dm644 "${srcdir}/${_pkgname}.svg" "${pkgdir}/usr/share/pixmaps/${_pkgname}.svg"
    
      132}
    
      133# vim:set ts=2 sw=2 et:
    
      134

Changes since previous scan

--- PKGBUILD @ 2026-07-16 00:05
+++ PKGBUILD @ 2026-08-18 00:03
@@ -2,7 +2,7 @@
 
 _pkgname=3dslicer
 pkgname=3dslicer
-pkgver=5.12.1
+pkgver=5.12.2
 pkgrel=1
 pkgdesc='A free, open source and multi-platform software package widely used for medical, biomedical, and related imaging research'
 arch=('x86_64')
@@ -57,7 +57,7 @@
         "${_pkgname}.svg::https://www.slicer.org/assets/img/3D-Slicer-Mark.svg"
         "slicer-vtk-regex-version-script-name.patch"
 )
-sha512sums=('e994b2b5e3098909e0a3c217365b60e135c34c0c4d0c0885559e48015313c193e0da0d58f9a0ccf2fac365773c763cacedcf17571954ee23fa570474474c8042'
+sha512sums=('652f3f078c1bdb24a6d275a6d7b4984e91ece432d315ffb91b36e06620bf7f6e85edc441d138d2660db23d6709192ef89600303a447a23b2026edc6fcd08005b'
             '3422d244f819a7ec4c475d3d8a90c79fcb73738920c0830b100c6342ca24d5be607ba60ee3d91892402036a0adf31d5ab7c8fc83f451121a7b537f7de5306014'
             '3ac8a9e98953ddbffa28dcac5f67156670e24a190433e580e00691856f805602a995104c0e6bdf388289b9a2d0ba6e6a19b4bbea89da71a19d080e8dd7981307')
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 09:35:23	MEDIUM	1
2026-07-16 00:05:41	CLEAN	2
2026-07-15 23:49:53	MEDIUM	1
2026-07-15 00:09:25	LOW	2
2026-07-14 00:09:48	LOW	2
2026-07-13 00:19:36	LOW	2
2026-07-12 00:27:26	LOW	2
2026-07-11 00:25:18	LOW	2
2026-07-10 15:35:03	MEDIUM	1
2026-07-10 00:20:30	LOW	2
2026-07-09 00:22:38	LOW	2
2026-07-08 00:26:52	LOW	2
2026-07-07 00:22:52	LOW	2
2026-07-06 00:10:58	LOW	2
2026-07-05 00:27:08	LOW	2
2026-07-04 00:27:25	LOW	2
2026-07-03 00:17:07	LOW	2
2026-07-02 00:22:12	LOW	2
2026-07-01 00:30:02	LOW	2