cuda-z-svn

maintainer orphaned · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from a source code repository on a non-whitelisted host (SourceForge SVN), which is the project's own official source, and installs only compiled binaries and documentation; the SKIP'd checksum is a concern but does not elevate to medium risk as the source is not a prebuilt executable from a swappable host.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a source code repository on a non-whitelisted host (SourceForge SVN), which is the project's own official source, and installs only compiled binaries and documentation; the SKIP'd checksum is a concern but does not elevate to medium risk as the source is not a prebuilt executable from a swappable host.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:28 "${_pkgname}::svn://svn.code.sf.net/p/cuda-z/code/trunk"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer:  dreieck
    
      2# Contributor: Artem Vorotnikov <artem@vorotnikov.me>
    
      3
    
      4_pkgname=cuda-z
    
      5pkgname=cuda-z-svn
    
      6epoch=1
    
      7pkgver=0.11.r291.20180317
    
      8pkgrel=1
    
      9pkgdesc="CUDA Information Utility."
    
      10url="http://cuda-z.sourceforge.net/"
    
      11license=("GPL3")
    
      12arch=("x86_64")
    
      13depends=(
    
      14  "cuda"
    
      15  "qt5-base"
    
      16)
    
      17makedepends=(
    
      18  "svn"
    
      19)
    
      20optdepends=()
    
      21provides=(
    
      22  "${_pkgname}=${pkgver}"
    
      23)
    
      24conflicts=(
    
      25  "${_pkgname}"
    
      26)
    
      27source=(
    
      28  "${_pkgname}::svn://svn.code.sf.net/p/cuda-z/code/trunk"
    
      29)
    
      30sha256sums=(
    
      31  'SKIP'
    
      32)
    
      33
    
      34#_svntrunk="http://${_pkgname}.svn.sourceforge.net/svnroot/${_pkgname}/trunk"
    
      35#_svnmod="${_pkgname}"
    
      36
    
      37prepare() {
    
      38  cd "${srcdir}/${_pkgname}/"
    
      39
    
      40  sed -i 's/+= sm_10/+=/g' cuda-z.pro
    
      41  sed -i 's/+= sm_11/+=/g' cuda-z.pro
    
      42  sed -i 's/+= sm_13/+=/g' cuda-z.pro
    
      43
    
      44  sed -i 's/\/usr\/local\/cuda/\/opt\/cuda/g' cuda-z.pro
    
      45  sed -i 's/\/usr\/local\/cuda/\/opt\/cuda/g' cuda.pri
    
      46  sed -i 's/\/usr\/local\/cuda/\/opt\/cuda/g' ./bld/bin/pkg-linux.sh
    
      47  sed -i 's/\/opt\/cuda-toolkit\/lib/\/opt\/cuda\/lib\
    
      48    unix:LIBPATH += \/opt\/cuda\/lib64/' cuda-z.pro
    
      49
    
      50  svn log > svn.log
    
      51}
    
      52
    
      53pkgver() {
    
      54  cd "${srcdir}/${_pkgname}/"
    
      55
    
      56  _ver_major="$(grep -E '^[[:space:]]*#define[[:space:]]+CZ_VER_MAJOR[[:space:]]+' src/version.h | awk '{print $3}' | tr -d \'\")"
    
      57  _ver_minor="$(grep -E '^[[:space:]]*#define[[:space:]]+CZ_VER_MINOR[[:space:]]+' src/version.h | awk '{print $3}' | tr -d \'\")"
    
      58  _ver_string="$(grep -E '^[[:space:]]*#define[[:space:]]+CZ_VER_STRING[[:space:]]+' src/version.h | awk '{print $3}' | tr -d \'\")"
    
      59  _ver="${_ver_string}"
    
      60  _rev="$(svn info | grep '^Revision' | cut -d' ' -f2)"
    
      61  _date="$(svn info | grep -E '^Last Changed Date:' | cut -d' ' -f4 | tr -d '-')"
    
      62
    
      63  printf '%s\n' "${_ver}.r${_rev}.${_date}"
    
      64}
    
      65
    
      66build() {
    
      67  cd "${srcdir}/${_pkgname}/"
    
      68
    
      69  PATH+=":/opt/cuda/bin"
    
      70  export PATH
    
      71
    
      72  qmake && make || return 1
    
      73}
    
      74
    
      75package() {
    
      76  cd "${srcdir}/${_pkgname}/"
    
      77
    
      78  install -Dvm755 "bin/cuda-z" "${pkgdir}/usr/bin/cuda-z"
    
      79
    
      80  for _docfile in svn.log doc/*; do
    
      81    install -Dvm644 "${_docfile}" "${pkgdir}/usr/share/doc/${_pkgname}/${_docfile}"
    
      82  done
    
      83  for _licensefile in LICENSE.GPL3; do
    
      84    install -Dvm644 "${_licensefile}" "${pkgdir}/usr/share/licenses/${pkgname}/${_licensefile}"
    
      85    ln -svr "${pkgdir}/usr/share/licenses/${pkgname}/${_licensefile}" "${pkgdir}/usr/share/doc/${_pkgname}/${_licensefile}"
    
      86  done
    
      87}
    
      88

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2