anaconda
maintainer carlosal1015
· 111 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads Anaconda installer scripts from the project's official domain repo.anaconda.com, which is a standard and expected source for Anaconda; the download is verified via sha512sums, and the script is run locally to install into /opt, which is normal for such packages; the flagged non-standard host is actually the legitimate project infrastructure, not a third-party or swappable host.
Triggered rules
LOW
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads Anaconda installer scripts from the project's official domain repo.anaconda.com, which is a standard and expected source for Anaconda; the download is verified via sha512sums, and the script is run locally to install into /opt, which is normal for such packages; the flagged non-standard host is actually the legitimate project infrastructure, not a third-party or swappable host.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:30
source_x86_64=(https://repo.${pkgname}.com/archive/Anaconda3-${_pkgver}-Linux-x86_64.sh)
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Jingbei Li <i@jingbei.li>
2
# Maintainer: Carlos Aznarán <caznaranl@uni.pe>
3
# Contributor: kastik <kastik69420@gmail.com>
4
# Contributor: Ismaël Bouya <ismael.bouya@normalesup.org>
5
# Contributor: Martin Wimpress <code@flexion.org>
6
pkgname=anaconda
7
pkgver=2026.07.1
8
_pkgver=${pkgver%.*}-${pkgver##*.}
9
pkgrel=1
10
pkgdesc="Simplifies package management and deployment of Anaconda"
11
arch=(x86_64 aarch64)
12
url="https://${pkgname}.com"
13
license=('custom')
14
provides=('conda')
15
optdepends=('libxau: for Anaconda Navigator support'
16
'libxi: for Anaconda Navigator support'
17
'libxss: for Anaconda Navigator support'
18
'libxtst: for Anaconda Navigator support'
19
'libxcursor: for Anaconda Navigator support'
20
'libxcomposite: for Anaconda Navigator support'
21
'libxdamage: for Anaconda Navigator support'
22
'libxfixes: for Anaconda Navigator support'
23
'libxrandr: for Anaconda Navigator support'
24
'libxrender: for Anaconda Navigator support'
25
'mesa: for Anaconda Navigator support'
26
'alsa-lib: for Anaconda Navigator support'
27
'libglvnd: for Anaconda Navigator support'
28
'xdg-utils: for ')
29
source=(${pkgname}-navigator.desktop)
30
source_x86_64=(https://repo.${pkgname}.com/archive/Anaconda3-${_pkgver}-Linux-x86_64.sh)
31
source_aarch64=(https://repo.${pkgname}.com/archive/Anaconda3-${_pkgver}-Linux-aarch64.sh)
32
options=(!strip libtool staticlibs)
33
sha512sums=('5822dd55b1668b166134ec6dc414b3ad13f34c4271e9dba8d2d4adb34440c8b664ce5b6f2b6bb9752f5ec115d8671015fca035f2f94c92d5ce8aba2a1782a9d5')
34
sha512sums_x86_64=('4991e6e0cb7c9814d755a47d4fd863478a97ba1f4701a067f517af3beddfaa3df614791135ea46366106f13e5ebdf062603a4194076e2d247edefbbc117a4120')
35
sha512sums_aarch64=('4669fbb939fd626452ad59979d13dabc5aacdea61d7de9fedb156ff62853a633e9e7475d20892c3d7d69f32d6f2498c73c51e517ca942741d731f2b53bcfa1a4')
36
install="${pkgname}.install"
37
38
package() {
39
prefix="${pkgdir}"/opt/${pkgname}
40
LD_PRELOAD="/usr/lib/libfakeroot/libfakeroot.so"
41
42
# Packaging anaconda for installation to /opt/anaconda
43
bash "${srcdir}"/Anaconda3-${_pkgver}-Linux-${CARCH}.sh -b -p $prefix -f
44
[ "$BREAK_EARLY" = 1 ] && exit 1
45
cd $prefix
46
47
# Correcting permissions
48
chmod a+r -R pkgs
49
50
# Stripping $pkgdir
51
sed -e "s|${pkgdir}||g" -i $(grep "${pkgdir}" . -rIl 2>/dev/null)
52
53
# Installing license
54
install -Dm 644 LICENSE.txt -t "${pkgdir}/usr/share/licenses/${pkgname}"
55
56
# Installing .desktop for anaconda navigator
57
install -Dm 644 "${srcdir}/${pkgname}-navigator.desktop" -t "${pkgdir}"/usr/share/applications/
58
}
59
Changes since previous scan
--- PKGBUILD @ 2026-06-19 19:07+++ PKGBUILD @ 2026-08-03 00:08@@ -4,7 +4,7 @@ # Contributor: Ismaël Bouya <ismael.bouya@normalesup.org> # Contributor: Martin Wimpress <code@flexion.org> pkgname=anaconda-pkgver=2025.12.2+pkgver=2026.07.1 _pkgver=${pkgver%.*}-${pkgver##*.} pkgrel=1 pkgdesc="Simplifies package management and deployment of Anaconda"@@ -31,8 +31,8 @@ source_aarch64=(https://repo.${pkgname}.com/archive/Anaconda3-${_pkgver}-Linux-aarch64.sh) options=(!strip libtool staticlibs) sha512sums=('5822dd55b1668b166134ec6dc414b3ad13f34c4271e9dba8d2d4adb34440c8b664ce5b6f2b6bb9752f5ec115d8671015fca035f2f94c92d5ce8aba2a1782a9d5')-sha512sums_x86_64=('126ba7b48f26fd2861c8b4c146671eaf3a65ab12c8b3cfb98e6ae293b0feddbdaeb3e23c12b34178fc529eb9d30c3fd36e7d6568a0ab243d41a508e0cb91ed31')-sha512sums_aarch64=('02e762331481d0f1040e3560bee002c63f218ee7e7a05a9d15a259a5a7df70f1fd1f762e4dfef337242ed7b778a15aac34a6ef7f9c138745a7693c0f81438c8d')+sha512sums_x86_64=('4991e6e0cb7c9814d755a47d4fd863478a97ba1f4701a067f517af3beddfaa3df614791135ea46366106f13e5ebdf062603a4194076e2d247edefbbc117a4120')+sha512sums_aarch64=('4669fbb939fd626452ad59979d13dabc5aacdea61d7de9fedb156ff62853a633e9e7475d20892c3d7d69f32d6f2498c73c51e517ca942741d731f2b53bcfa1a4') install="${pkgname}.install" package() {Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 11:14:12 | LOW | 2 |
| 2026-06-19 19:07:35 | CLEAN | 2 |
| 2026-06-18 16:11:54 | LOW | 1 |