3dslicer-git

maintainer hottea · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a git clone from the official GitHub repository of the project, which is a normal and safe practice for -git AUR packages, despite the host not being on a whitelist.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a git clone from the official GitHub repository of the project, which is a normal and safe practice for -git AUR packages, despite the host not being on a whitelist.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:59 "${_pkgname}.svg::https://www.slicer.org/assets/img/3D-Slicer-Mark.svg"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Butui Hu <hot123tea123@gmail.com>
    
      2
    
      3_pkgname=3dslicer
    
      4pkgname=3dslicer-git
    
      5pkgver=5.10.0.r292.785744ed8c
    
      6pkgrel=2
    
      7pkgdesc='A free, open source and multi-platform software package widely used for medical, biomedical, and related imaging research'
    
      8arch=('x86_64')
    
      9url='https://www.slicer.org'
    
      10license=('BSD-3-Clause')
    
      11depends=(
    
bzip2
    
curl
    
dcmtk
    
fftw
    
glibc
    
hwloc
    
libarchive
    
libffi
    
libglvnd
    
libice
    
libpng
    
libsm
    
libx11
    
libxcrypt
    
libxcursor
    
libxext
    
libxfixes
    
libxrender
    
openssl
    
qt5-base
    
qt5-declarative
    
qt5-location
    
qt5-multimedia
    
qt5-svg
    
qt5-webchannel
    
qt5-webengine
    
qt5-x11extras
    
qt5-xmlpatterns
    
teem
    
util-linux-libs
    
xz
    
zlib
    
      44)
    
      45makedepends=(
    
clang
    
cmake
    
gendesk
    
git
    
ninja
    
qt5-script
    
qt5-tools
    
subversion
    
      54)
    
      55options=(!emptydirs !strip)
    
      56provides=(3dslicer=${pkgver})
    
      57conflicts=(3dslicer)
    
      58source=("${_pkgname}::git+https://github.com/Slicer/Slicer.git"
    
      "${_pkgname}.svg::https://www.slicer.org/assets/img/3D-Slicer-Mark.svg"
    
      "0001-ENH-Add-pip-target-fallback-for-read-only-site-packages.patch"
    
      61)
    
      62sha512sums=('SKIP'
    
          '3422d244f819a7ec4c475d3d8a90c79fcb73738920c0830b100c6342ca24d5be607ba60ee3d91892402036a0adf31d5ab7c8fc83f451121a7b537f7de5306014'
    
          '7870c6172dd4af00b9b9cd87a28d224cb8c5360717b98f1fdc2df2bab3bda0a6bcd8530fa0c2b6e25f90a88aa4b5f35cafe79eda77a154abced0fa09e70e0bed'
    
      65)
    
      66
    
      67pkgver() {
    
cd "${srcdir}/${_pkgname}"
    
_max_tag=$(git tag --sort=-v:refname | head -n1)
    
_commit_count=$(git rev-list --count "${_max_tag}"..HEAD)
    
_commit_hash=$(git rev-parse --short HEAD)
    
_max_tag=$(echo "$_max_tag" | sed 's/^v//')
    
_full_version="${_max_tag}.r${_commit_count}.${_commit_hash}"
    
printf "%s" "${_full_version}"
    
      75}
    
      76
    
      77prepare() {
    
echo "Creating desktop file"
    
gendesk -f -n --pkgname ${_pkgname} \
    
  --categories "Science;MedicalSoftware;Education;MedicalSoftware" \
    
  --exec "Slicer" \
    
  --icon "${_pkgname}" \
    
  --pkgdesc "${pkgdesc}" \
    
  --startupnotify \
    
  --custom="StartupWMClass=Slicer"
    
patch -d ${_pkgname} -p1 -i ${srcdir}/0001-ENH-Add-pip-target-fallback-for-read-only-site-packages.patch
    
      87}
    
      88
    
      89build() {
    
export CC=clang
    
export CXX=clang++
    
cmake \
    
  -B "${srcdir}/build" \
    
  -DBUILD_TESTING=OFF \
    
  -DCMAKE_BUILD_TYPE=Release \
    
  -DCMAKE_INSTALL_PREFIX=/usr \
    
  -DSlicer_BUILD_DOCUMENTATION=OFF \
    
  -DSlicer_BUILD_I18N_SUPPORT=ON \
    
  -DSlicer_BUILD_PARAMETERSERIALIZER_SUPPORT=OFF \
    
  -DSlicer_REQUIRED_QT_VERSION=5 \
    
  -DSlicer_STORE_SETTINGS_IN_APPLICATION_HOME_DIR=OFF \
    
  -DSlicer_USE_GIT_PROTOCOL=OFF \
    
  -DSlicer_USE_PYTHONQT=ON \
    
  -DSlicer_USE_SYSTEM_bzip2=ON \
    
  -DSlicer_USE_SYSTEM_CTK=OFF \
    
  -DSlicer_USE_SYSTEM_CTKAPPLAUNCHER=OFF \
    
  -DSlicer_USE_SYSTEM_CTKAppLauncherLib=OFF \
    
  -DSlicer_USE_SYSTEM_curl=ON \
    
  -DSlicer_USE_SYSTEM_DCMTK=ON \
    
  -DSlicer_USE_SYSTEM_ITK=OFF \
    
  -DSlicer_USE_SYSTEM_JsonCpp=OFF \
    
  -DSlicer_USE_SYSTEM_LibArchive=ON \
    
  -DSlicer_USE_SYSTEM_LibFFI=ON \
    
  -DSlicer_USE_SYSTEM_LZMA=ON \
    
  -DSlicer_USE_SYSTEM_OpenSSL=ON \
    
  -DSlicer_USE_SYSTEM_ParameterSerializer=OFF \
    
  -DSlicer_USE_SYSTEM_python=OFF \
    
  -DSlicer_USE_SYSTEM_qRestAPI=OFF \
    
  -DSlicer_USE_SYSTEM_QT=ON \
    
  -DSlicer_USE_SYSTEM_RapidJSON=OFF \
    
  -DSlicer_USE_SYSTEM_SlicerExecutionModel=OFF \
    
  -DSlicer_USE_SYSTEM_sqlite=OFF \
    
  -DSlicer_USE_SYSTEM_tbb=OFF \
    
  -DSlicer_USE_SYSTEM_teem=ON \
    
  -DSlicer_USE_SYSTEM_VTK=OFF \
    
  -DSlicer_USE_SYSTEM_zlib=ON \
    
  -GNinja \
    
  -S "${srcdir}/${_pkgname}" \
    
  -Wno-dev
    
cmake --build "${srcdir}/build"
    
      131}
    
      132
    
      133package() {
    
cmake --build "${srcdir}/build/Slicer-build" --target package
    
install -d "${pkgdir}/opt/${_pkgname}" "${pkgdir}/usr/bin"
    
tar xvf "${srcdir}/build/Slicer-build/"*.tar.gz -C "${pkgdir}/opt/${_pkgname}" --strip-components 1
    
ln -s /opt/${_pkgname}/Slicer "${pkgdir}/usr/bin/Slicer"
    
install -Dm644 "${srcdir}/${_pkgname}.desktop" "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
    
install -Dm644 "${srcdir}/${_pkgname}.svg" "${pkgdir}/usr/share/pixmaps/${_pkgname}.svg"
    
      140}
    
      141# vim:set ts=2 sw=2 et:
    
      142

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2