boost-65-compat

maintainer andreas_baumann · 5 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The source is a legitimate Boost release tarball from archives.boost.io, a project-endorsed archive host; the patches are from GitHub and Fedora, all for compatibility fixes; the build process is standard and self-contained, posing no execution risk beyond normal compilation.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a legitimate Boost release tarball from archives.boost.io, a project-endorsed archive host; the patches are from GitHub and Fedora, all for compatibility fixes; the build process is standard and self-contained, posing no execution risk beyond normal compilation.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:18 source=(https://archives.boost.io/release/${pkgver}/source/boost_${_boostver}.tar.bz2

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Andreas Baumann <mail@andreasbaumann.cc>
2# Contributor: piernov <piernov@piernov.org>
3# Contributor: Dmitry Kharitonov <darksab0r at gmail com>
4# Contributor: Marcin Kornat <rarvolt+aur@gmail.com>
5# Contributor: Bartłomiej Piotrowski <bpiotrowski@archlinux.org>
6
7pkgname=('boost-65-compat' 'boost-65-compat-libs')
8_pkgname=boost
9pkgver=1.65.1
10_boostver=${pkgver//./_}
11_mainpkgver=1.65
12pkgrel=11
13pkgdesc="Free peer-reviewed portable C++ source libraries - compat version"
14arch=('x86_64')
15url='https://www.boost.org/'
16license=('custom')
17makedepends=('python312' 'python-numpy')
18source=(https://archives.boost.io/release/${pkgver}/source/boost_${_boostver}.tar.bz2
19 https://github.com/boostorg/build/commit/2f84a23f8d747f4ebe9d29ea7e8722a543f33f2b.patch
20 https://github.com/boostorg/build/commit/48e9017139dd94446633480661e5447c7e0d8b1b.patch
21 https://github.com/boostorg/build/commit/2b44ccf5dc5850c79f6bbe9811a91a1a7ad37f3d.patch
22 https://github.com/boostorg/python/commit/660487c43fde76f3e64f1cb2e644500da92fe582.patch
23 https://github.com/boostorg/python/commit/0474de0f6cc9c6e7230aeb7164af2f7e4ccf74bf.patch
24 https://github.com/boostorg/python/commit/99a5352b5cf790c559a7b976c1ba99520431d9d1.patch
25 boost-1.73-python3.10-Py_fopen.patch::https://src.fedoraproject.org/fork/thrnciar/rpms/boost/raw/047403fc9c6ea6f581f38214f680f3173e157138/f/boost-1.73-python3.10-Py_fopen.patch
26 500194edb7833d0627ce7a2595fec49d0aae2484_python_tree.patch
27 500194edb7833d0627ce7a2595fec49d0aae2484_boost_tree.patch)
28#source=(https://downloads.sourceforge.net/project/${_pkgname}/${_pkgname}/${pkgver}/${_pkgname}_${_boostver}.tar.bz2)
29sha256sums=('9807a5d16566c57fd74fb522764e0b134a8bbe6b6e8967b83afefd30dcd3be81'
30 '2e533e553bd87cdf8ddf97927d26eb998cb00090e2735253d308b9329200bc39'
31 'efe3964b341b25181bb111890547feba2f86f2b4b106cc4d678525d53f389c31'
32 '390a8cbd10a838cdbb50175d54db2fb80759799d7e412e7672a2f9f2e00052dc'
33 '00d66b49b548aa6254ec8dc5b6b859ab3ff9ca7c0cf0ceba72401f71a572bffd'
34 'ccda8ef8126c93f4c8d29ba43b5f301952e5eacdc7fecb2ae3d01115a2222c53'
35 '4ddb143714af0e38d5f48b3b07b57161fd86398da4ace6787802836cdc2903d8'
36 'a03de50c3b7a6c07fc797551c6f52368aba2a139db0780bfd385db9039f5627d'
37 'ed5a609549491fa6e7640dc9d80f23a34dee899af61850f31fe3f0e99c1754ad'
38 'ecd7f0548143fbaeb79155f04e409fe295a4f13bfd9e95518fcb1dd6b73abed3')
39
40prepare() {
41 cd $srcdir/${_pkgname}_${_boostver}/tools/build
42 patch -p1 < "${srcdir}"/2f84a23f8d747f4ebe9d29ea7e8722a543f33f2b.patch
43 patch -p1 < "${srcdir}"/48e9017139dd94446633480661e5447c7e0d8b1b.patch
44 patch -p1 < "${srcdir}"/2b44ccf5dc5850c79f6bbe9811a91a1a7ad37f3d.patch
45 cd $srcdir/${_pkgname}_${_boostver}/libs/python
46 patch -p1 < "${srcdir}"/660487c43fde76f3e64f1cb2e644500da92fe582.patch
47 patch -p1 < "${srcdir}"/500194edb7833d0627ce7a2595fec49d0aae2484_python_tree.patch
48 patch -p1 < "${srcdir}"/0474de0f6cc9c6e7230aeb7164af2f7e4ccf74bf.patch
49 patch -p1 < "${srcdir}"/99a5352b5cf790c559a7b976c1ba99520431d9d1.patch
50 cd $srcdir/${_pkgname}_${_boostver}
51 patch -p1 < "${srcdir}"/boost-1.73-python3.10-Py_fopen.patch
52 patch -p2 < "${srcdir}"/500194edb7833d0627ce7a2595fec49d0aae2484_boost_tree.patch
53}
54
55build() {
56 export _stagedir="${srcdir}/stagedir"
57 local JOBS="$(sed -e 's/.*\(-j *[0-9]\+\).*/\1/' <<< ${MAKEFLAGS})"
58
59 cd ${_pkgname}_${_boostver}
60 ./bootstrap.sh --with-toolset=gcc --with-icu --with-python=/usr/bin/python3.12
61
62 _bindir="bin.linuxx86"
63 [[ "${CARCH}" = "x86_64" ]] && _bindir="bin.linuxx86_64"
64 install -Dm755 tools/build/src/engine/$_bindir/b2 "${_stagedir}"/bin/b2
65
66 # Support for OpenMPI
67 echo "using mpi ;" >> project-config.jam
68
69 # boostbook is needed by quickbook
70 install -dm755 "${_stagedir}"/share/boostbook
71 cp -a tools/boostbook/{xsl,dtd} "${_stagedir}"/share/boostbook/
72
73 # default "minimal" install: "release link=shared,static
74 # runtime-link=shared threading=single,multi"
75 # --layout=tagged will add the "-mt" suffix for multithreaded libraries
76 # and installs includes in /usr/include/boost.
77 # --layout=system no longer adds the -mt suffix for multi-threaded libs.
78 # install to ${_stagedir} in preparation for split packaging
79 "${_stagedir}"/bin/b2 \
80 variant=release \
81 debug-symbols=off \
82 threading=multi \
83 runtime-link=shared \
84 link=shared,static \
85 toolset=gcc \
86 python=3.12 \
87 cflags="${CPPFLAGS} ${CFLAGS} -fPIC -O3" \
88 cxxflags="${CPPFLAGS} ${CXXFLAGS} -std=c++14 -fPIC -O3" \
89 linkflags="${LDFLAGS}" \
90 --layout=system \
91 ${JOBS} \
92 \
93 --prefix="${_stagedir}" \
94 install
95}
96
97package_boost-65-compat() {
98 pkgdesc+=' - development headers'
99 depends=("boost-65-compat-libs=${pkgver}")
100 optdepends=('python: for python bindings')
101 options=('staticlibs')
102
103 install -dm755 "${pkgdir}"/opt/boost-${_mainpkgver}
104 cp -a "${_stagedir}"/{bin,include,share} "${pkgdir}"/opt/boost-${_mainpkgver}
105
106 install -d "${pkgdir}"/opt/boost-${_mainpkgver}/lib
107 cp -a "${_stagedir}"/lib/*.a "${pkgdir}"/opt/boost-${_mainpkgver}/lib
108 cp -a "${_stagedir}"/lib/libboost_*.so "${pkgdir}"/opt/boost-${_mainpkgver}/lib
109
110 install -Dm644 "${srcdir}/"${_pkgname}_${_boostver}/LICENSE_1_0.txt \
111 "${pkgdir}"/usr/share/licenses/boost-65-compat/LICENSE_1_0.txt
112
113 install -dm755 "${pkgdir}"/usr
114 install -dm755 "${pkgdir}"/usr/bin
115 ln -s /usr/bin/b2 "$pkgdir"/usr/bin/bjam-1.65
116}
117
118package_boost-65-compat-libs() {
119 pkgdesc+=' - runtime libraries'
120 depends=('bzip2' 'zlib' 'icu' 'zstd')
121 optdepends=('openmpi: for mpi support')
122 provides=(libboost_atomic.so.$pkgver libboost_chrono.so.$pkgver libboost_container.so.$pkgver
123 libboost_context.so.$pkgver libboost_coroutine.so.$pkgver
124 libboost_date_time.so.$pkgver libboost_fiber.so.$pkgver libboost_filesystem.so.$pkgver
125 libboost_graph.so.$pkgver libboost_graph_parallel.so.$pkgver libboost_iostreams.so.$pkgver
126 libboost_locale.so.$pkgver libboost_log.so.$pkgver libboost_log_setup.so.$pkgver
127 libboost_math_c99.so.$pkgver libboost_math_c99f.so.$pkgver libboost_math_c99l.so.$pkgver
128 libboost_math_tr1.so.$pkgver libboost_math_tr1f.so.$pkgver libboost_math_tr1l.so.$pkgver
129 libboost_mpi.so.$pkgver libboost_mpi_python.so.$pkgver libboost_numpy.so.$pkgver libboost_numpy3.so.$pkgver
130 libboost_prg_exec_monitor.so.$pkgver libboost_program_options.so.$pkgver
131 libboost_python3.so.$pkgver libboost_random.so.$pkgver
132 libboost_regex.so.$pkgver libboost_serialization.so.$pkgver libboost_signals.so.$pkgver
133 libboost_stacktrace_addr2line.so.$pkgver libboost_stacktrace_basic.so.$pkgver
134 libboost_stacktrace_noop.so.$pkgver libboost_system.so libboost_thread.so.$pkgver
135 libboost_timer.so.$pkgver libboost_type_erasure.so.$pkgver libboost_unit_test_framework.so.$pkgver
136 libboost_wave.so.$pkgver libboost_wserialization.so.$pkgver)
137
138 install -dm755 "${pkgdir}"/usr
139 cp -a "${_stagedir}"/lib "${pkgdir}"/usr
140 rm "${pkgdir}"/usr/lib/*.a
141 rm "${pkgdir}"/usr/lib/*.so
142
143 install -Dm644 "${srcdir}/"${_pkgname}_${_boostver}/LICENSE_1_0.txt \
144 "${pkgdir}"/usr/share/licenses/boost-65-compat-libs/LICENSE_1_0.txt
145}
146

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion