boost-65-compat
LOW
maintainer andreas_baumann
5 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a legitimate Boost release tarball from archives.boost.io, a project-endorsed archive host; the patches are from GitHub and Fedora, all for compatibility fixes; the build process is standard and self-contained, posing no execution risk beyond normal compilation.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a legitimate Boost release tarball from archives.boost.io, a project-endorsed archive host; the patches are from GitHub and Fedora, all for compatibility fixes; the build process is standard and self-contained, posing no execution risk beyond normal compilation.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:18
source=(https://archives.boost.io/release/${pkgver}/source/boost_${_boostver}.tar.bz2
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Andreas Baumann <mail@andreasbaumann.cc>
2
# Contributor: piernov <piernov@piernov.org>
3
# Contributor: Dmitry Kharitonov <darksab0r at gmail com>
4
# Contributor: Marcin Kornat <rarvolt+aur@gmail.com>
5
# Contributor: Bartłomiej Piotrowski <bpiotrowski@archlinux.org>
6
7
pkgname=('boost-65-compat' 'boost-65-compat-libs')
8
_pkgname=boost
9
pkgver=1.65.1
10
_boostver=${pkgver//./_}
11
_mainpkgver=1.65
12
pkgrel=11
13
pkgdesc="Free peer-reviewed portable C++ source libraries - compat version"
14
arch=('x86_64')
15
url='https://www.boost.org/'
16
license=('custom')
17
makedepends=('python312' 'python-numpy')
18
source=(https://archives.boost.io/release/${pkgver}/source/boost_${_boostver}.tar.bz2
19
https://github.com/boostorg/build/commit/2f84a23f8d747f4ebe9d29ea7e8722a543f33f2b.patch
20
https://github.com/boostorg/build/commit/48e9017139dd94446633480661e5447c7e0d8b1b.patch
21
https://github.com/boostorg/build/commit/2b44ccf5dc5850c79f6bbe9811a91a1a7ad37f3d.patch
22
https://github.com/boostorg/python/commit/660487c43fde76f3e64f1cb2e644500da92fe582.patch
23
https://github.com/boostorg/python/commit/0474de0f6cc9c6e7230aeb7164af2f7e4ccf74bf.patch
24
https://github.com/boostorg/python/commit/99a5352b5cf790c559a7b976c1ba99520431d9d1.patch
25
boost-1.73-python3.10-Py_fopen.patch::https://src.fedoraproject.org/fork/thrnciar/rpms/boost/raw/047403fc9c6ea6f581f38214f680f3173e157138/f/boost-1.73-python3.10-Py_fopen.patch
26
500194edb7833d0627ce7a2595fec49d0aae2484_python_tree.patch
27
500194edb7833d0627ce7a2595fec49d0aae2484_boost_tree.patch)
28
#source=(https://downloads.sourceforge.net/project/${_pkgname}/${_pkgname}/${pkgver}/${_pkgname}_${_boostver}.tar.bz2)
29
sha256sums=('9807a5d16566c57fd74fb522764e0b134a8bbe6b6e8967b83afefd30dcd3be81'
30
'2e533e553bd87cdf8ddf97927d26eb998cb00090e2735253d308b9329200bc39'
31
'efe3964b341b25181bb111890547feba2f86f2b4b106cc4d678525d53f389c31'
32
'390a8cbd10a838cdbb50175d54db2fb80759799d7e412e7672a2f9f2e00052dc'
33
'00d66b49b548aa6254ec8dc5b6b859ab3ff9ca7c0cf0ceba72401f71a572bffd'
34
'ccda8ef8126c93f4c8d29ba43b5f301952e5eacdc7fecb2ae3d01115a2222c53'
35
'4ddb143714af0e38d5f48b3b07b57161fd86398da4ace6787802836cdc2903d8'
36
'a03de50c3b7a6c07fc797551c6f52368aba2a139db0780bfd385db9039f5627d'
37
'ed5a609549491fa6e7640dc9d80f23a34dee899af61850f31fe3f0e99c1754ad'
38
'ecd7f0548143fbaeb79155f04e409fe295a4f13bfd9e95518fcb1dd6b73abed3')
39
40
prepare() {
41
cd $srcdir/${_pkgname}_${_boostver}/tools/build
42
patch -p1 < "${srcdir}"/2f84a23f8d747f4ebe9d29ea7e8722a543f33f2b.patch
43
patch -p1 < "${srcdir}"/48e9017139dd94446633480661e5447c7e0d8b1b.patch
44
patch -p1 < "${srcdir}"/2b44ccf5dc5850c79f6bbe9811a91a1a7ad37f3d.patch
45
cd $srcdir/${_pkgname}_${_boostver}/libs/python
46
patch -p1 < "${srcdir}"/660487c43fde76f3e64f1cb2e644500da92fe582.patch
47
patch -p1 < "${srcdir}"/500194edb7833d0627ce7a2595fec49d0aae2484_python_tree.patch
48
patch -p1 < "${srcdir}"/0474de0f6cc9c6e7230aeb7164af2f7e4ccf74bf.patch
49
patch -p1 < "${srcdir}"/99a5352b5cf790c559a7b976c1ba99520431d9d1.patch
50
cd $srcdir/${_pkgname}_${_boostver}
51
patch -p1 < "${srcdir}"/boost-1.73-python3.10-Py_fopen.patch
52
patch -p2 < "${srcdir}"/500194edb7833d0627ce7a2595fec49d0aae2484_boost_tree.patch
53
}
54
55
build() {
56
export _stagedir="${srcdir}/stagedir"
57
local JOBS="$(sed -e 's/.*\(-j *[0-9]\+\).*/\1/' <<< ${MAKEFLAGS})"
58
59
cd ${_pkgname}_${_boostver}
60
./bootstrap.sh --with-toolset=gcc --with-icu --with-python=/usr/bin/python3.12
61
62
_bindir="bin.linuxx86"
63
[[ "${CARCH}" = "x86_64" ]] && _bindir="bin.linuxx86_64"
64
install -Dm755 tools/build/src/engine/$_bindir/b2 "${_stagedir}"/bin/b2
65
66
# Support for OpenMPI
67
echo "using mpi ;" >> project-config.jam
68
69
# boostbook is needed by quickbook
70
install -dm755 "${_stagedir}"/share/boostbook
71
cp -a tools/boostbook/{xsl,dtd} "${_stagedir}"/share/boostbook/
72
73
# default "minimal" install: "release link=shared,static
74
# runtime-link=shared threading=single,multi"
75
# --layout=tagged will add the "-mt" suffix for multithreaded libraries
76
# and installs includes in /usr/include/boost.
77
# --layout=system no longer adds the -mt suffix for multi-threaded libs.
78
# install to ${_stagedir} in preparation for split packaging
79
"${_stagedir}"/bin/b2 \
80
variant=release \
81
debug-symbols=off \
82
threading=multi \
83
runtime-link=shared \
84
link=shared,static \
85
toolset=gcc \
86
python=3.12 \
87
cflags="${CPPFLAGS} ${CFLAGS} -fPIC -O3" \
88
cxxflags="${CPPFLAGS} ${CXXFLAGS} -std=c++14 -fPIC -O3" \
89
linkflags="${LDFLAGS}" \
90
--layout=system \
91
${JOBS} \
92
\
93
--prefix="${_stagedir}" \
94
install
95
}
96
97
package_boost-65-compat() {
98
pkgdesc+=' - development headers'
99
depends=("boost-65-compat-libs=${pkgver}")
100
optdepends=('python: for python bindings')
101
options=('staticlibs')
102
103
install -dm755 "${pkgdir}"/opt/boost-${_mainpkgver}
104
cp -a "${_stagedir}"/{bin,include,share} "${pkgdir}"/opt/boost-${_mainpkgver}
105
106
install -d "${pkgdir}"/opt/boost-${_mainpkgver}/lib
107
cp -a "${_stagedir}"/lib/*.a "${pkgdir}"/opt/boost-${_mainpkgver}/lib
108
cp -a "${_stagedir}"/lib/libboost_*.so "${pkgdir}"/opt/boost-${_mainpkgver}/lib
109
110
install -Dm644 "${srcdir}/"${_pkgname}_${_boostver}/LICENSE_1_0.txt \
111
"${pkgdir}"/usr/share/licenses/boost-65-compat/LICENSE_1_0.txt
112
113
install -dm755 "${pkgdir}"/usr
114
install -dm755 "${pkgdir}"/usr/bin
115
ln -s /usr/bin/b2 "$pkgdir"/usr/bin/bjam-1.65
116
}
117
118
package_boost-65-compat-libs() {
119
pkgdesc+=' - runtime libraries'
120
depends=('bzip2' 'zlib' 'icu' 'zstd')
121
optdepends=('openmpi: for mpi support')
122
provides=(libboost_atomic.so.$pkgver libboost_chrono.so.$pkgver libboost_container.so.$pkgver
123
libboost_context.so.$pkgver libboost_coroutine.so.$pkgver
124
libboost_date_time.so.$pkgver libboost_fiber.so.$pkgver libboost_filesystem.so.$pkgver
125
libboost_graph.so.$pkgver libboost_graph_parallel.so.$pkgver libboost_iostreams.so.$pkgver
126
libboost_locale.so.$pkgver libboost_log.so.$pkgver libboost_log_setup.so.$pkgver
127
libboost_math_c99.so.$pkgver libboost_math_c99f.so.$pkgver libboost_math_c99l.so.$pkgver
128
libboost_math_tr1.so.$pkgver libboost_math_tr1f.so.$pkgver libboost_math_tr1l.so.$pkgver
129
libboost_mpi.so.$pkgver libboost_mpi_python.so.$pkgver libboost_numpy.so.$pkgver libboost_numpy3.so.$pkgver
130
libboost_prg_exec_monitor.so.$pkgver libboost_program_options.so.$pkgver
131
libboost_python3.so.$pkgver libboost_random.so.$pkgver
132
libboost_regex.so.$pkgver libboost_serialization.so.$pkgver libboost_signals.so.$pkgver
133
libboost_stacktrace_addr2line.so.$pkgver libboost_stacktrace_basic.so.$pkgver
134
libboost_stacktrace_noop.so.$pkgver libboost_system.so libboost_thread.so.$pkgver
135
libboost_timer.so.$pkgver libboost_type_erasure.so.$pkgver libboost_unit_test_framework.so.$pkgver
136
libboost_wave.so.$pkgver libboost_wserialization.so.$pkgver)
137
138
install -dm755 "${pkgdir}"/usr
139
cp -a "${_stagedir}"/lib "${pkgdir}"/usr
140
rm "${pkgdir}"/usr/lib/*.a
141
rm "${pkgdir}"/usr/lib/*.so
142
143
install -Dm644 "${srcdir}/"${_pkgname}_${_boostver}/LICENSE_1_0.txt \
144
"${pkgdir}"/usr/share/licenses/boost-65-compat-libs/LICENSE_1_0.txt
145
}
146
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |