ascon-kompas3d-v25-study-full

LOW
maintainer kvrudoy 0 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The package downloads official RPMs from the vendor's own domain (ascon.ru), which is plausibly the project's legitimate source; despite the static analyzer flag for a non-standard host, this constitutes normal sourcing of proprietary software and not a supply-chain risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads official RPMs from the vendor's own domain (ascon.ru), which is plausibly the project's legitimate source; despite the static analyzer flag for a non-standard host, this constitutes normal sourcing of proprietary software and not a supply-chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:72 "https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-helpserver-0.8.1.9-0.x86_64.rpm"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: kvrudoy
2pkgname=ascon-kompas3d-v25-study-full
3pkgver=25.0.1.2738
4pkgrel=2
5pkgdesc="CAD software for mechanical engineering"
6url="https://kompas.ru/"
7arch=("x86_64")
8license=("custom")
9options=(!strip !debug)
10depends=(
11 "freetype2"
12 "xdg-utils"
13 "ttf-opensans"
14 "libxxf86vm"
15 "libdrm"
16 "glu"
17 "libglvnd"
18 "xcb-util-wm"
19 "libxkbfile"
20 "libxss"
21 "libxv"
22 "qt6-base"
23 "xcb-util-keysyms"
24 "libfontenc"
25 "libunwind"
26 "gdk-pixbuf2"
27 "libsm"
28 "libxpm"
29 "libxt"
30 "zlib"
31 "cairo"
32 "at-spi2-core"
33 "xcb-util-image"
34 "libice"
35 "libstdc++"
36 "libcups"
37 "xcb-util-renderutil"
38 "libgcc"
39 "glibc"
40 "glib2"
41 "libwebp"
42 "pango"
43 "libxmu"
44 "hicolor-icon-theme"
45 "libxcomposite"
46 "libc++abi"
47 "libxaw"
48 "libxrandr"
49 "libxinerama"
50 "libxres"
51 "libxcursor"
52 "libxdamage"
53 "libc++"
54 "libxcb"
55 "libxext"
56 "libx11"
57 "xcb-util"
58 "libxtst"
59 "fontconfig"
60 "util-linux-libs"
61 "libatomic"
62 "xcb-util-cursor"
63 "libtiff"
64 "libxdmcp"
65 "libxau"
66 "libxi"
67 "libxrender"
68 "libxfixes"
69 "libgtk-x11-2.0.so"
70)
71source=(
72"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-helpserver-0.8.1.9-0.x86_64.rpm"
73"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-checker-v25-${pkgver}-0.x86_64.rpm"
74"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-common-1.0.0.6-0.x86_64.rpm"
75"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-coupling-v25-${pkgver}-0.x86_64.rpm"
76"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-dimchain-v25-${pkgver}-0.x86_64.rpm"
77"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-featurekompas-v25-${pkgver}-0.x86_64.rpm"
78"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-fonts-1.0.0.7-0.x86_64.rpm"
79"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-graphic-v25-${pkgver}-0.x86_64.rpm"
80"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-help-v25-${pkgver}-0.x86_64.rpm"
81"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-libsamples-v25-${pkgver}-0.x86_64.rpm"
82"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-nesting-v25-${pkgver}-0.x86_64.rpm"
83"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-plugins-v25-${pkgver}-0.x86_64.rpm"
84"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-sdk-v25-${pkgver}-0.x86_64.rpm"
85"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-servicetools-v25-${pkgver}-0.x86_64.rpm"
86"https://repo.ascon.ru/personal/alt/p11/x86_64/RPMS.main/ascon-kompas-study-v25-${pkgver}-0.x86_64.rpm"
87"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas3d-v25-${pkgver}-0.x86_64.rpm"
88"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-polynom-library-24.0-24.0.0.26061516-0.x86_64.rpm"
89"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/grdcontrol-4.5.3-0.x86_64.rpm"
90"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-cable-v25-${pkgver}-0.x86_64.rpm"
91"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-coating3d-v25-${pkgver}-0.x86_64.rpm"
92"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-diecore-v25-${pkgver}-0.x86_64.rpm"
93"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-easysteel-v25-${pkgver}-0.x86_64.rpm"
94"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-ergonomics-v25-${pkgver}-0.x86_64.rpm"
95"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-mouldcore-v25-${pkgver}-0.x86_64.rpm"
96"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-pipeline-v25-${pkgver}-0.x86_64.rpm"
97"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-sdf3dapp-v25-${pkgver}-0.x86_64.rpm"
98"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-splitconnection3d-v25-${pkgver}-0.x86_64.rpm"
99"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-trays-v25-${pkgver}-0.x86_64.rpm"
100"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-tutorials-v25-${pkgver}-0.x86_64.rpm"
101"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-unwrap-v25-25.0.0.14-0.x86_64.rpm"
102"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-ventilation-v25-${pkgver}-0.x86_64.rpm"
103"https://repo.ascon.ru/stable/alt/p11/x86_64/RPMS.main/ascon-kompas-weldconnect-v25-${pkgver}-0.x86_64.rpm"
104)
105sha256sums=('01fcf31a7348e853158649703f3d4a992e64049faadb3ee3ef477bd5c1496176'
106 'f4cecf64bf9c19dde491d00f44d95086d77103a8973ba1fc718b5b91b5b0b3ae'
107 '33e16f2b61c0c9b71e15956e9303dd094be8a6f6bc960659ed8685bbbedfe351'
108 '7b02c40dc3ae36b66386f154525b52c878b1a437d24a14b1cf0ba6ed30ff0d9e'
109 'ed20cfd73ded5cbeb58bf462b42dba62f9ef26909b8965c6da12c0872ffa897e'
110 '8751cb6e14302f9378f3c5e35ef11db30335188652a078fa2854858028d16be7'
111 'f8584143474718e3de97ea5a7d88cefb5e2c0b7e0b0c98a5804f9b03dda474a7'
112 '2534a5c09e9871c668c0f5a1e2d2c151e39668307aceb6919636e2f522de329f'
113 'ac146e3ce78d12cdd77d83efcff355266bcc11024b52cbd8b0bc98a0cc751ec9'
114 '1a06e59b189434ab6936a8b28b1a305710913aeedd18ed6721d9725879000b29'
115 '834241e688926c765becccae5e4bbd24dc757c42d7a620505c41492dd58eef4b'
116 '6ca681d96242be201767acae8212ee251bc680f87cd222c3ced338d4da6ebc94'
117 'b72d4bf12433a3097642d702ce06e069d52ab2e9caf651da726ee1a7c105e113'
118 'eb87e5af375f05cc5b318f5039f22badba5b1f4c9698c11d91c62cb0326fa0d6'
119 '669944df6a1aff05a54dd87ab8abb832d440797bbc3476e2a75126dde4006005'
120 '050d9599194d34cd25935b5251b57cddee3890698b915ae82855d721b19a85d8'
121 '1803649622b741712b72335f87ec9dfafb6492a8b63ab3161b85f4acc3471598'
122 '983e431213cdeea9ac38a633df8acc62f582f01ac5e0d3a1dfa8a8b2b65c77cb'
123 'e157c461068c7e3a5a367f8dd7fc50477a4280476d2684d947d01c1b7fe4bd4b'
124 'c6e69ed40c7ea5ff82579fe6510918c68edb3f20c9b0365256672d391e8decf2'
125 'f3fcb680854eab5c0d3ec2d6f821e803dfe9ef3b6fe4e825a29f0065ec15f619'
126 'f55a005f763661db366ae3e368792ac28501bb0ee6efa7b9c381fd6613f52a3e'
127 '5298f34a38d15f3f54f0af67ad699c84c157afc86749e50928d8e22f5ee23c6b'
128 '202b9354c6d0f7b855fc3cc0956f560995e154e149cce5478c0be0cfc083b813'
129 'b2297d09da2c9e796f2a7c433a405fd25919559c8da91d3f4b6c815145197c10'
130 'e90d1c4860a10cf2b678cfb4f0262629f9a8e38cc386eb67ef605dfa3fa137df'
131 'ba242b602185762bfbed4583f69ab3f6e4431fc987e9ea57fe11a855f24ef45d'
132 'ee8fa65b8c77d1ebd746dcf9e073aa9d8c10493baa703fe0f1c646c9a3704c48'
133 'acd13b4a5432af1fd5051450e142e0906410a268fafc6150c085392433d60e75'
134 '459206e792581b15a219fbc1501a4e5367eb016eb75d68d4dff1a59c9466996e'
135 'e220d10d01fbea42c9bdc02c804d319adee92aa3172b941c9e490925035ac2a8'
136 '2a236ac1ec6fc171e956058eaafed2a2e2489b1d08a9b2b861d78691d612fd4a')
137package() {
138 cp -a $srcdir/etc $pkgdir/etc
139 cp -a $srcdir/opt $pkgdir/opt
140 cp -a $srcdir/usr $pkgdir/usr
141 echo "Name[en]=KOMPAS-3D v25" >> "$pkgdir/usr/share/desktop-directories/kompas-25.directory"
142 ln -s /usr/lib/libunwind.so "$pkgdir/opt/ascon/kompas3d-v25/Bin/libunwind.so.1"
143 chmod +x "$pkgdir/usr/bin/Ascon.HelpServer"
144 ln -s "/opt/ascon/kompas3d-v25/Bin/kStudy" "$pkgdir/usr/bin/kompas-study-v25"
145 mkdir -m0755 -p "$pkgdir/etc/profile.d"
146 echo "export KOMPAS_SDK=/opt/ascon/kompas3d-v25/SDK/" > "$pkgdir/etc/profile.d/ascon-kompas-sdk.sh"
147 ln -sn "/opt/ascon/polynom-library" "$pkgdir/opt/ascon/kompas3d-v25/Libs/PolynomLib"
148 mkdir -m0755 -p "$pkgdir/etc/udev/rules.d"
149 mkdir -m0755 -p "$pkgdir/usr/lib/systemd/system"
150 ln -s "/opt/guardant/grdcontrol/license_wizard" "$pkgdir/usr/bin/license_wizard"
151 cp "$pkgdir/opt/guardant/grdcontrol/95-grdnt.rules" "$pkgdir/etc/udev/rules.d/"
152 cp "$pkgdir/opt/guardant/grdcontrol/grdcontrol.service" "$pkgdir/usr/lib/systemd/system/grdcontrol.service"
153}
154
155

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion