boost-python2-libs
maintainer orphaned
· 2 votes
· base
boost-python2
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The source is a legitimate Boost release tarball from boostorg.jfrog.io, which is an official Boost distribution host; building from this source is normal and safe for AUR packages.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a legitimate Boost release tarball from boostorg.jfrog.io, which is an official Boost distribution host; building from this source is normal and safe for AUR packages.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:23
source=("https://boostorg.jfrog.io/artifactory/main/release/${pkgver}/source/boost_${_boostver}.tar.bz2"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer:
2
# Contributor: Fabio 'Lolix' Loli <fabio.loli@disroot.org> -> https://github.com/FabioLolix
3
# Contributor: Levente Polyak <anthraxx[at]archlinux[dot]org>
4
# Contributor: Bartłomiej Piotrowski <bpiotrowski@archlinux.org>
5
# Contributor: Marius Knaust <marius.knaust@gmail.com>
6
# Contributor: Ionut Biru <ibiru@archlinux.org>
7
# Contributor: Stéphane Gaudreault <stephane@archlinux.org>
8
# Contributor: kevin <kevin@archlinux.org>
9
# Contributor: Giovanni Scafora <giovanni@archlinux.org>
10
# Contributor: Kritoke <kritoke@gamebox.net>
11
# Contributor: Luca Roccia <little_rock@users.sourceforge.net>
12
13
pkgbase=boost-python2
14
pkgname=('boost-python2-libs' 'boost-python2')
15
pkgver=1.83.0
16
_boostver=${pkgver//./_}
17
pkgrel=1
18
pkgdesc='Free peer-reviewed portable C++ source libraries'
19
url='https://www.boost.org/'
20
arch=('x86_64')
21
license=('custom')
22
makedepends=('icu' 'python2' 'python2-numpy' 'bzip2' 'zlib' 'openmpi' 'zstd' 'findutils')
23
source=("https://boostorg.jfrog.io/artifactory/main/release/${pkgver}/source/boost_${_boostver}.tar.bz2"
24
"${pkgbase%-python2}-ublas-c++20-iterator.patch::https://github.com/boostorg/ublas/commit/a31e5cffa85f.patch")
25
sha256sums=('6478edfe2f3305127cffe8caf73ea0176c53769f4bf1585be237eb30798c3b8e'
26
'aa38addb40d5f44b4a8472029b475e7e6aef1c460509eb7d8edf03491dc1b5ee')
27
b2sums=('c4af1713712da82f964fe08451141ea96905e30b475ee5090bf87ae6e43bcb1f258ab92e16e992fd22405e8cd85a435cef76a22b98788d9960396a4fec8c4c62'
28
'e5f6d4884eaa557d5547e7e079c2edb4ed9f2f4cd8579aa32a2150f824a5d04413f2a91e79b3139d5b915da6a46f7835f1438ad53f33096973f1a99f378ec1d3')
29
30
prepare() {
31
cd ${pkgbase%-python2}_${_boostver}
32
33
# https://github.com/boostorg/ublas/pull/97
34
patch -Np2 -i ../${pkgbase%-python2}-ublas-c++20-iterator.patch
35
}
36
37
build() {
38
export _stagedir="${srcdir}/stagedir"
39
40
cd ${pkgbase%-python2}_${_boostver}
41
42
./bootstrap.sh \
43
--with-toolset=gcc \
44
--with-icu \
45
--with-python=/usr/bin/python2 \
46
--with-libraries=python
47
48
install -Dm755 tools/build/src/engine/b2 "${_stagedir}"/bin/b2
49
50
# Support for OpenMPI
51
echo "using mpi ;" >> project-config.jam
52
53
# boostbook is needed by quickbook
54
install -dm755 "${_stagedir}"/share/boostbook
55
cp -a tools/boostbook/{xsl,dtd} "${_stagedir}"/share/boostbook/
56
57
"${_stagedir}"/bin/b2 \
58
variant=release \
59
debug-symbols=off \
60
threading=multi \
61
runtime-link=shared \
62
link=shared,static \
63
toolset=gcc \
64
python=2.7 \
65
cflags="${CPPFLAGS} ${CFLAGS} -fPIC -O3" \
66
cxxflags="${CPPFLAGS} ${CXXFLAGS} -std=c++14 -fPIC -O3" \
67
linkflags="${LDFLAGS}" \
68
--layout=system \
69
--prefix="${_stagedir}" \
70
--with-python \
71
install
72
}
73
74
package_boost-python2() {
75
pkgdesc+=' - development headers'
76
depends=(python2 "boost-python2-libs=${pkgver}")
77
options=('staticlibs')
78
79
install -dm755 "${pkgdir}"/usr/lib
80
cp -a "${_stagedir}"/lib/*.a "${pkgdir}"/usr/lib/
81
find "$_stagedir" -name "libboost_*py2.7.cmake"|while read -r file; do
82
install -Dm755 "$file" "${pkgdir}/usr/${file#$_stagedir}"
83
done
84
85
install -Dm644 "${srcdir}/"${pkgbase%-python2}_${_boostver}/LICENSE_1_0.txt \
86
"${pkgdir}"/usr/share/licenses/boost-python2/LICENSE_1_0.txt
87
}
88
89
package_boost-python2-libs() {
90
pkgdesc+=' - runtime libraries'
91
depends=(glibc gcc-libs)
92
optdepends=('openmpi: for mpi support')
93
provides=(libboost_python27.so)
94
95
install -dm755 "${pkgdir}"/usr
96
cp -a "${_stagedir}"/lib "${pkgdir}"/usr
97
rm "${pkgdir}"/usr/lib/*.a
98
rm -r "${pkgdir}"/usr/lib/cmake
99
100
# https://github.com/boostorg/python/issues/203#issuecomment-391477685
101
for _lib in python numpy; do
102
ln -srL "${pkgdir}"/usr/lib/libboost_${_lib}{27,}.so
103
done
104
105
install -Dm644 "${srcdir}/"${pkgbase%-python2}_${_boostver}/LICENSE_1_0.txt \
106
"${pkgdir}"/usr/share/licenses/boost-python2-libs/LICENSE_1_0.txt
107
}
108
109
# vim: ts=2 sw=2 et:
110
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |