3dslicer-git

LOW

maintainer hottea 1 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is a git clone from the official GitHub repository of the project and a logo from its official website, both legitimate; building from source is standard practice and the non-whitelisted host (github.com) is plausibly the project's own.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a git clone from the official GitHub repository of the project and a logo from its official website, both legitimate; building from source is standard practice and the non-whitelisted host (github.com) is plausibly the project's own.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:59 "${_pkgname}.svg::https://www.slicer.org/assets/img/3D-Slicer-Mark.svg"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Butui Hu <hot123tea123@gmail.com>
    
      2
    
      3_pkgname=3dslicer
    
      4pkgname=3dslicer-git
    
      5pkgver=5.12.3.r91.5863505aa6
    
      6pkgrel=1
    
      7pkgdesc='A free, open source and multi-platform software package widely used for medical, biomedical, and related imaging research'
    
      8arch=('x86_64')
    
      9url='https://www.slicer.org'
    
      10license=('BSD-3-Clause')
    
      11depends=(
    
bzip2
    
curl
    
dcmtk
    
fftw
    
glibc
    
hwloc
    
libarchive
    
libffi
    
libglvnd
    
libice
    
libpng
    
libsm
    
libx11
    
libxcrypt
    
libxcursor
    
libxext
    
libxfixes
    
libxrender
    
openssl
    
qt5-base
    
qt5-declarative
    
qt5-location
    
qt5-multimedia
    
qt5-svg
    
qt5-webchannel
    
qt5-webengine
    
qt5-x11extras
    
qt5-xmlpatterns
    
teem
    
util-linux-libs
    
xz
    
zlib
    
      44)
    
      45makedepends=(
    
clang
    
cmake
    
gendesk
    
git
    
ninja
    
qt5-script
    
qt5-tools
    
subversion
    
      54)
    
      55options=(!emptydirs !strip)
    
      56provides=(3dslicer=${pkgver})
    
      57conflicts=(3dslicer)
    
      58source=("${_pkgname}::git+https://github.com/Slicer/Slicer.git"
    
      "${_pkgname}.svg::https://www.slicer.org/assets/img/3D-Slicer-Mark.svg"
    
      "0001-ENH-Add-pip-target-fallback-for-read-only-site-packages.patch"
    
      "slicer-vtk-regex-version-script-name.patch"
    
      62)
    
      63sha512sums=('SKIP'
    
          '3422d244f819a7ec4c475d3d8a90c79fcb73738920c0830b100c6342ca24d5be607ba60ee3d91892402036a0adf31d5ab7c8fc83f451121a7b537f7de5306014'
    
          '7870c6172dd4af00b9b9cd87a28d224cb8c5360717b98f1fdc2df2bab3bda0a6bcd8530fa0c2b6e25f90a88aa4b5f35cafe79eda77a154abced0fa09e70e0bed'
    
          '3ac8a9e98953ddbffa28dcac5f67156670e24a190433e580e00691856f805602a995104c0e6bdf388289b9a2d0ba6e6a19b4bbea89da71a19d080e8dd7981307'
    
      67)
    
      68
    
      69pkgver() {
    
cd "${srcdir}/${_pkgname}"
    
_max_tag=$(git tag --sort=-v:refname | head -n1)
    
_commit_count=$(git rev-list --count "${_max_tag}"..HEAD)
    
_commit_hash=$(git rev-parse --short HEAD)
    
_max_tag=$(echo "$_max_tag" | sed 's/^v//')
    
_full_version="${_max_tag}.r${_commit_count}.${_commit_hash}"
    
printf "%s" "${_full_version}"
    
      77}
    
      78
    
      79prepare() {
    
echo "Creating desktop file"
    
gendesk -f -n --pkgname ${_pkgname} \
    
  --categories "Science;MedicalSoftware;Education;MedicalSoftware" \
    
  --exec "Slicer" \
    
  --icon "${_pkgname}" \
    
  --pkgdesc "${pkgdesc}" \
    
  --startupnotify \
    
  --custom="StartupWMClass=Slicer"
    
patch -d ${_pkgname} -p1 -i ${srcdir}/0001-ENH-Add-pip-target-fallback-for-read-only-site-packages.patch
    
patch -d "${srcdir}/${_pkgname}" -p1 -i "${srcdir}/slicer-vtk-regex-version-script-name.patch"
    
      90}
    
      91
    
      92build() {
    
export CC=clang
    
export CXX=clang++
    
cmake \
    
  -B "${srcdir}/build" \
    
  -DBUILD_TESTING=OFF \
    
  -DCMAKE_BUILD_TYPE=Release \
    
  -DCMAKE_INSTALL_PREFIX=/usr \
    
  -DSlicer_BUILD_DOCUMENTATION=OFF \
    
  -DSlicer_BUILD_I18N_SUPPORT=ON \
    
  -DSlicer_BUILD_PARAMETERSERIALIZER_SUPPORT=OFF \
    
  -DSlicer_REQUIRED_QT_VERSION=5 \
    
  -DSlicer_STORE_SETTINGS_IN_APPLICATION_HOME_DIR=OFF \
    
  -DSlicer_USE_GIT_PROTOCOL=OFF \
    
  -DSlicer_USE_PYTHONQT=ON \
    
  -DSlicer_USE_SYSTEM_bzip2=ON \
    
  -DSlicer_USE_SYSTEM_CTK=OFF \
    
  -DSlicer_USE_SYSTEM_CTKAPPLAUNCHER=OFF \
    
  -DSlicer_USE_SYSTEM_CTKAppLauncherLib=OFF \
    
  -DSlicer_USE_SYSTEM_curl=ON \
    
  -DSlicer_USE_SYSTEM_DCMTK=ON \
    
  -DSlicer_USE_SYSTEM_ITK=OFF \
    
  -DSlicer_USE_SYSTEM_JsonCpp=OFF \
    
  -DSlicer_USE_SYSTEM_LibArchive=ON \
    
  -DSlicer_USE_SYSTEM_LibFFI=ON \
    
  -DSlicer_USE_SYSTEM_LZMA=ON \
    
  -DSlicer_USE_SYSTEM_OpenSSL=ON \
    
  -DSlicer_USE_SYSTEM_ParameterSerializer=OFF \
    
  -DSlicer_USE_SYSTEM_python=OFF \
    
  -DSlicer_USE_SYSTEM_qRestAPI=OFF \
    
  -DSlicer_USE_SYSTEM_QT=ON \
    
  -DSlicer_USE_SYSTEM_RapidJSON=OFF \
    
  -DSlicer_USE_SYSTEM_SlicerExecutionModel=OFF \
    
  -DSlicer_USE_SYSTEM_sqlite=OFF \
    
  -DSlicer_USE_SYSTEM_tbb=OFF \
    
  -DSlicer_USE_SYSTEM_teem=ON \
    
  -DSlicer_USE_SYSTEM_VTK=OFF \
    
  -DSlicer_USE_SYSTEM_zlib=ON \
    
  -GNinja \
    
  -S "${srcdir}/${_pkgname}" \
    
  -Wno-dev
    
cmake --build "${srcdir}/build"
    
      134}
    
      135
    
      136package() {
    
cmake --build "${srcdir}/build/Slicer-build" --target package
    
install -d "${pkgdir}/opt/${_pkgname}" "${pkgdir}/usr/bin"
    
tar xvf "${srcdir}/build/Slicer-build/"*.tar.gz -C "${pkgdir}/opt/${_pkgname}" --strip-components 1
    
ln -s /opt/${_pkgname}/Slicer "${pkgdir}/usr/bin/Slicer"
    
install -Dm644 "${srcdir}/${_pkgname}.desktop" "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
    
install -Dm644 "${srcdir}/${_pkgname}.svg" "${pkgdir}/usr/share/pixmaps/${_pkgname}.svg"
    
      143}
    
      144# vim:set ts=2 sw=2 et:
    
      145

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2