agisoft-metashape-pro

LOW
maintainer dobedobedo 4 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The package downloads a prebuilt tarball from a non-whitelisted but plausibly official Amazon S3 host used by the vendor (agisoft.com), which is normal for proprietary software; the content is not executed remotely and the checksum is verified, limiting supply-chain risk to typical AUR levels.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt tarball from a non-whitelisted but plausibly official Amazon S3 host used by the vendor (agisoft.com), which is normal for proprietary software; the content is not executed remotely and the checksum is verified, limiting supply-chain risk to typical AUR levels.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:24 source=("https://s3-eu-west-1.amazonaws.com/download.agisoft.com/${_pkgname}_${pkgver//./_}_amd64.tar.gz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Yu-Hsuan Tu <dobe0331 at gmail dot com>
2_pkgname=metashape-pro
3pkgname=agisoft-${_pkgname}
4pkgver=2.3.2
5pkgrel=1
6pkgdesc="Photogrammetric processing of digital images and 3D spatial data generation software. Professional edition"
7arch=('x86_64')
8url="https://www.agisoft.com/"
9license=('custom:Agisoft EULA' 'custom')
10depends=('gcc' 'libxml2-legacy')
11makedepends=('imagemagick')
12optdepends=('glu: mesa OpenGL lib'
13 'nvidia-utils: nvidia proprietary OpenGL and Vulkan lib'
14 'opencl-mesa: mesa rusticl OpenCL runtime for GPU acceleration'
15 'rocm-opencl-runtime: AMD ROCm OpenCL runtime for GPU acceleration'
16 'cuda: nvidia CUDA runtime for GPU acceleration'
17 'intel-compute-runtime: Intel Neo OpenCL runtime for GPU acceleration'
18 'vulkan-icd-loader: Vulkan installable client driver loader for texture blending on GPU'
19 'vulkan-radeon: AMD Vulkan driver for texture blending on GPU'
20 'vulkan-intel: Intel Vulkan driver for texture blending on GPU')
21provides=('agisoft-metashape-pro' 'agisoft-network-monitor' 'agisoft-viewer')
22options=('!strip')
23install=${pkgname}.install
24source=("https://s3-eu-west-1.amazonaws.com/download.agisoft.com/${_pkgname}_${pkgver//./_}_amd64.tar.gz"
25 "agisoft-metashape-pro-icon-encoded.txt"
26 "agisoft-network-monitor-icon-encoded.txt"
27 "agisoft-viewer-icon-encoded.txt"
28 "agisoft-psx-mime-icon-encoded.txt"
29 "agisoft-psz-mime-icon-encoded.txt"
30 "agisoft-3dv-mime-icon-encoded.txt")
31sha256sums=('b1f0e1bc72c06b3a567412f8220a1dbfdad03739d02e73ba46cea927b4332832'
32 '959eb21ce482a5b1f84a0e04ec6f0d53aaf679c84bce9f813b350afe5dd201ba'
33 'ef484e2a60966a722d7989abdbb85464054c47dd56b2ce182b2c0c5602476599'
34 'a5e29a00393d55a9b589e1fb30acb57a96ef26756507d2793e7f3494d5778ae3'
35 '627df01b98f9f22b31d62ba039127b7809650990d1633e4190f1d9844830a0ff'
36 'd44fb70962175505fd3bfc0e96670e5bf4092c80446e0142cc91a3e0033e1009'
37 '047225857a8b30362bab61f916ab1ddb19c0906959bf57c4ab5e499b8a9c4fc8')
38
39build() {
40 # Create desktop entries
41 echo "[Desktop Entry]
42Type=Application
43Name=Agisoft MetaShape Pro
44Comment=Photogrammetric processing software
45Exec=agisoft-metashape-pro
46MimeType=application/agisoft.psx;application/agisoft.psz
47Icon=agisoft-metashape-pro
48Terminal=false
49Categories=Science;ImageProcessing" > "$srcdir/agisoft-metashape-pro.desktop"
50
51 echo "[Desktop Entry]
52Type=Application
53Name=Agisoft Network Monitor
54Comment=Monitor the network cluster of MetaShape
55Exec=agisoft-network-monitor
56Icon=agisoft-network-monitor
57Terminal=false
58Categories=Science;ImageProcessing" > "$srcdir/agisoft-network-monitor.desktop"
59
60 echo "[Desktop Entry]
61Type=Application
62Name=Agisoft Viewer
63Comment=Visualise the MetaShape output 3D data
64Exec=agisoft-viewer
65MimeType=application/agisoft.3dv;application/agisoft.vpz
66Icon=agisoft-viewer
67Terminal=false
68Categories=Science;ImageProcessing" > "$srcdir/agisoft-viewer.desktop"
69
70 # Create MetaShape MIME type file
71 echo '<?xml version="1.0" encoding="UTF-8"?>
72<mime-info xmlns="http://www.freedesktop.org/standards/shared-mime-info">
73 <mime-type type="application/agisoft.psx">
74 <comment>MetaShape Project</comment>
75 <icon name="application-agisoft-pro-psx"/>
76 <glob-deleteall/>
77 <glob pattern="*.psx"/>
78 </mime-type>
79 <mime-type type="application/agisoft.psz">
80 <comment>MetaShape Archive</comment>
81 <icon name="application-agisoft-pro-psz"/>
82 <glob-deleteall/>
83 <glob pattern="*.psz"/>
84 </mime-type>
85 <mime-type type="application/agisoft.vpz">
86 <comment>Viewer Project</comment>
87 <icon name="application-agisoft-viewer-vpz"/>
88 <glob-deleteall/>
89 <glob pattern="*.vpz"/>
90 </mime-type>
91 <mime-type type="application/agisoft.3dv">
92 <comment>Viewer 1.6 Project</comment>
93 <icon name="application-agisoft-viewer-3dv"/>
94 <glob-deleteall/>
95 <glob pattern="*.3dv"/>
96 </mime-type>
97</mime-info>' > "$srcdir/${pkgname}-mime.xml"
98
99 # Create 128x128 application icons
100 base64 -d "$srcdir/agisoft-metashape-pro-icon-encoded.txt" > "$srcdir/agisoft-metashape-pro_128.png"
101 base64 -d "$srcdir/agisoft-network-monitor-icon-encoded.txt" > "$srcdir/agisoft-network-monitor_128.png"
102 base64 -d "$srcdir/agisoft-viewer-icon-encoded.txt" > "$srcdir/agisoft-viewer_128.png"
103
104 # Create 128x128 mime icons
105 base64 -d "$srcdir/agisoft-psx-mime-icon-encoded.txt" > "$srcdir/application-agisoft-psx_128.png"
106 base64 -d "$srcdir/agisoft-psz-mime-icon-encoded.txt" > "$srcdir/application-agisoft-psz_128.png"
107 base64 -d "$srcdir/agisoft-3dv-mime-icon-encoded.txt" > "$srcdir/application-agisoft-3dv_128.png"
108
109 # Create icons for other resolutions
110 for _res in 16 32 48 64; do
111 magick "$srcdir/agisoft-metashape-pro_128.png" -resize ${_res}x${_res} "$srcdir/agisoft-metashape-pro_${_res}.png"
112 magick "$srcdir/agisoft-network-monitor_128.png" -resize ${_res}x${_res} "$srcdir/agisoft-network-monitor_${_res}.png"
113 magick "$srcdir/agisoft-viewer_128.png" -resize ${_res}x${_res} "$srcdir/agisoft-viewer_${_res}.png"
114 magick "$srcdir/application-agisoft-psx_128.png" -resize ${_res}x${_res} "$srcdir/application-agisoft-psx_${_res}.png"
115 magick "$srcdir/application-agisoft-psz_128.png" -resize ${_res}x${_res} "$srcdir/application-agisoft-psz_${_res}.png"
116 magick "$srcdir/application-agisoft-3dv_128.png" -resize ${_res}x${_res} "$srcdir/application-agisoft-3dv_${_res}.png"
117 done
118
119 # Create executables for /usr/bin
120 echo "#!/bin/bash
121/opt/agisoft/${_pkgname}/metashape.sh \$@" > "$srcdir/agisoft-metashape-pro"
122 echo "#!/bin/bash
123/opt/agisoft/${_pkgname}/monitor.sh \$@" > "$srcdir/agisoft-network-monitor"
124 echo "#!/bin/bash
125/opt/agisoft/${_pkgname}/viewer.sh \$@" > "$srcdir/agisoft-viewer"
126}
127
128package() {
129 # Move extracted folder to opt
130 cd "$pkgdir"
131 mkdir -p "opt/agisoft"
132 mv "${srcdir}/${_pkgname}" "${pkgdir}/opt/agisoft/"
133
134 # Install licenses
135 cd opt/agisoft/${_pkgname}
136 install -Dm644 eula.txt "$pkgdir/usr/share/licenses/$pkgname/eula.txt"
137 mv licenses "$pkgdir/usr/share/licenses/$pkgname"
138 rm eula.txt
139
140 # Move desktop entries
141 mkdir -p "${pkgdir}/usr/share/applications/"
142 mv "${srcdir}/agisoft-metashape-pro.desktop" "${pkgdir}/usr/share/applications/"
143 mv "${srcdir}/agisoft-network-monitor.desktop" "${pkgdir}/usr/share/applications/"
144 mv "${srcdir}/agisoft-viewer.desktop" "${pkgdir}/usr/share/applications/"
145
146 # Create MIME type
147 mkdir -p "${pkgdir}/usr/share/mime/packages"
148 mv "${srcdir}/${pkgname}-mime.xml" "${pkgdir}/usr/share/mime/packages"
149
150 # Move icons
151 for _res in 16x16 32x32 48x48 64x64 128x128; do
152 mkdir -p "${pkgdir}/usr/share/icons/hicolor/${_res}/apps/"
153 mkdir -p "${pkgdir}/usr/share/icons/hicolor/${_res}/mimetypes/"
154 mv "$srcdir/agisoft-metashape-pro_${_res/x*}.png" "${pkgdir}/usr/share/icons/hicolor/${_res}/apps/agisoft-metashape-pro.png"
155 mv "$srcdir/agisoft-network-monitor_${_res/x*}.png" "${pkgdir}/usr/share/icons/hicolor/${_res}/apps/agisoft-network-monitor.png"
156 cp "$srcdir/agisoft-viewer_${_res/x*}.png" "${pkgdir}/usr/share/icons/hicolor/${_res}/mimetypes/application-agisoft-viewer-vpz.png"
157 mv "$srcdir/agisoft-viewer_${_res/x*}.png" "${pkgdir}/usr/share/icons/hicolor/${_res}/apps/agisoft-viewer.png"
158 mv "$srcdir/application-agisoft-psx_${_res/x*}.png" "${pkgdir}/usr/share/icons/hicolor/${_res}/mimetypes/application-agisoft-pro-psx.png"
159 mv "$srcdir/application-agisoft-psz_${_res/x*}.png" "${pkgdir}/usr/share/icons/hicolor/${_res}/mimetypes/application-agisoft-pro-psz.png"
160 mv "$srcdir/application-agisoft-3dv_${_res/x*}.png" "${pkgdir}/usr/share/icons/hicolor/${_res}/mimetypes/application-agisoft-viewer-3dv.png"
161 done
162
163 # Create executables in /usr/bin
164 install -Dm755 "$srcdir/agisoft-metashape-pro" "$pkgdir/usr/bin/agisoft-metashape-pro"
165 install -Dm755 "$srcdir/agisoft-network-monitor" "$pkgdir/usr/bin/agisoft-network-monitor"
166 install -Dm755 "$srcdir/agisoft-viewer" "$pkgdir/usr/bin/agisoft-viewer"
167
168 # Set the rehostable directory and environment variables in executables for activation
169 mkdir -p "${pkgdir}/opt/agisoft/${_pkgname}/licensing"
170 sed -i '/export LD_LIBRARY_PATH/a\\nAGISOFT_LICENSING_DIR=\$dirname/licensing\nexport AGISOFT_LICENSING_DIR' "${pkgdir}/opt/agisoft/${_pkgname}/metashape.sh"
171 sed -i '/export LD_LIBRARY_PATH/a\\nAGISOFT_LICENSING_DIR=\$dirname/licensing\nexport AGISOFT_LICENSING_DIR' "${pkgdir}/opt/agisoft/${_pkgname}/viewer.sh"
172 sed -i '/export LD_LIBRARY_PATH/a\\nAGISOFT_LICENSING_DIR=\$dirname/licensing\nexport AGISOFT_LICENSING_DIR' "${pkgdir}/opt/agisoft/${_pkgname}/monitor.sh"
173
174 # Set correct permission
175 chmod -R g=u "$pkgdir/opt/agisoft/${_pkgname}"
176 chmod -R o=u "$pkgdir/opt/agisoft/${_pkgname}"
177 chmod -R g-w "$pkgdir/opt/agisoft/${_pkgname}"
178 chmod -R o-w "$pkgdir/opt/agisoft/${_pkgname}"
179 chmod -R g=u "$pkgdir/usr/share/licenses/$pkgname/licenses"
180 chmod -R o=u "$pkgdir/usr/share/licenses/$pkgname/licenses"
181 chmod -R g-w "$pkgdir/usr/share/licenses/$pkgname/licenses"
182 chmod -R o-w "$pkgdir/usr/share/licenses/$pkgname/licenses"
183}
184
185

Changes since previous scan

--- PKGBUILD @ 2026-09-11 00:19
+++ PKGBUILD @ 2026-09-17 00:27
@@ -1,8 +1,8 @@
# Maintainer: Yu-Hsuan Tu <dobe0331 at gmail dot com>
_pkgname=metashape-pro
pkgname=agisoft-${_pkgname}
-pkgver=2.3.1
-pkgrel=3
+pkgver=2.3.2
+pkgrel=1
pkgdesc="Photogrammetric processing of digital images and 3D spatial data generation software. Professional edition"
arch=('x86_64')
url="https://www.agisoft.com/"
@@ -28,7 +28,7 @@
"agisoft-psx-mime-icon-encoded.txt"
"agisoft-psz-mime-icon-encoded.txt"
"agisoft-3dv-mime-icon-encoded.txt")
-sha256sums=('2c6a678b4aaa3b9051252c3b1b270ee879ae5acf5bf50a6e14539dd7e41c1de0'
+sha256sums=('b1f0e1bc72c06b3a567412f8220a1dbfdad03739d02e73ba46cea927b4332832'
'959eb21ce482a5b1f84a0e04ec6f0d53aaf679c84bce9f813b350afe5dd201ba'
'ef484e2a60966a722d7989abdbb85464054c47dd56b2ce182b2c0c5602476599'
'a5e29a00393d55a9b589e1fb30acb57a96ef26756507d2793e7f3494d5778ae3'

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 01:21:31 Medium 1
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion