geant4-debug

LOW
maintainer gipert 0 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The source is a tarball from a CERN subdomain, which is plausibly the project's official infrastructure; building from official project sources is normal AUR practice, even if the host is not on a standard whitelist.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from a CERN subdomain, which is plausibly the project's official infrastructure; building from official project sources is normal AUR practice, even if the host is not on a standard whitelist.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:40 source=("http://geant4-data.web.cern.ch/releases/${_pkgname}-${_pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Luigi Pertoldi <gipert@pm.me>
2pkgname='geant4-debug'
3_pkgname='geant4'
4pkgver=11.0.3
5_pkgver=v11.0.3
6pkgrel=2
7pkgdesc="A simulation toolkit for particle physics interactions (compiled with debugging info)."
8depends=('cmake>=3.16'
9 'xerces-c>=3'
10 'qt5-base'
11 'glu'
12 'openmotif'
13 'soqt'
14 'zlib'
15 'python>=3'
16 'boost'
17 )
18conflicts=('geant4')
19optdepends=('java-environment: for histogram visualizations and
20analysis'
21 'tcsh: for C Shell support'
22 'python: for G4Python support'
23 'geant4-abladata: Data files for nuclear shell effects in INCL/ABLA hadronic mode'
24 'geant4-ensdfstatedata: Nuclei properties from the Evaluated Nuclear Structure Data Files'
25 'geant4-incldata: Data files for proton and neutron density profiles'
26 'geant4-ledata: Data files for low energy electromagnetic processes'
27 'geant4-levelgammadata: Data files for photon evaporation'
28 'geant4-neutronhpdata: Neutron data files with thermal cross sections'
29 'geant4-particlexsdata: Data files for evaluated p, d, t, He3, He4 and gamma cross sections, replaces geant4-neutronxsdata'
30 'geant4-piidata: Data files for shell ionisation cross sections'
31 'geant4-radioactivedata: Data files for radioactive decay hadronic processes'
32 'geant4-realsurfacedata: Data files for measured optical surface reflectance'
33 'geant4-saiddata: Data files from evaluated cross-sections in SAID data-base'
34)
35url="http://geant4.cern.ch/"
36arch=('x86_64')
37license=('custom: http://geant4.cern.ch/license/')
38options=('!emptydirs' '!strip')
39install="${_pkgname}.install"
40source=("http://geant4-data.web.cern.ch/releases/${_pkgname}-${_pkgver}.tar.gz"
41 "${_pkgname}.install")
42
43
44md5sums=('caf371e8b07a7ea3ef3b4719bf0fc5f0'
45 'a6abacd078760aebda58316454d7e0c9')
46
47## Remove this if you want to keep an even smaller package
48## No need to wait for compression when just installing it.
49PKGEXT='.pkg.tar'
50
51build() {
52
53 [ -d ${srcdir}/build ] || mkdir ${srcdir}/build
54 cd ${srcdir}/build
55
56 env -i \
57 QT_SELECT=5 \
58 PATH=/usr/bin \
59 cmake \
60 -DCMAKE_BUILD_TYPE="RelWithDebInfo" \
61 -DCMAKE_INSTALL_PREFIX=/usr \
62 -DGEANT4_BUILD_MULTITHREADED=ON \
63 -DGEANT4_USE_PYTHON=ON \
64 -DGEANT4_USE_G3TOG4=ON \
65 -DGEANT4_USE_GDML=ON \
66 -DGEANT4_USE_INVENTOR_QT=ON \
67 -DGEANT4_USE_QT=ON \
68 -DGEANT4_USE_OPENGL_X11=ON \
69 -DGEANT4_USE_RAYTRACER_X11=ON \
70 -DGEANT4_USE_XM=ON \
71 -DGEANT4_USE_TOOLSSG=QT \
72 -DGEANT4_USE_SYSTEM_ZLIB=ON \
73 -DGEANT4_BUILD_TLS_MODEL=global-dynamic \
74 -DGEANT4_INSTALL_PACKAGE_CACHE=OFF \
75 ../${_pkgname}-${_pkgver}
76
77 G4VERBOSE=1 make
78
79}
80
81package() {
82 # normally the geant4.[c]sh is meant to configure the
83 # LD_LIBRARY_PATH, PATH and the "G4DATASETS". Let's not source that
84 # script since
85 #
86 # - LD_LIBRARY_PATH can be set using ldconf
87 # - PATH is not really needed
88 # - the "G4DATASETS" are not installed by default in this package
89
90 cd ${srcdir}/build
91 make DESTDIR="${pkgdir}" install
92
93 ##
94 ## This is not needed as ldconfig automatically includes /usr/lib
95 ##
96 # use a file that pacman can track instead of adding directly to ld.so.conf
97 # install -d "${pkgdir}/etc/ld.so.conf.d"
98 # echo '/usr/lib' > "${pkgdir}/etc/ld.so.conf.d/${pkgname}.conf"
99}
100
101# All this is just a comment
102echo ""
103: <<'EOF'
104
105 From: https://geant4-userdoc.web.cern.ch/UsersGuides/InstallationGuide/html/installguide.html#geant4-build-options
106 Last revisited: Dec 15, 2021. (11.0)
107
108 |----------------------------------+------------------------------------------------------+----------------|
109 | option | default | set to |
110 |----------------------------------+------------------------------------------------------+----------------|
111 | CMAKE_INSTALL_PREFIX | /usr/local | /usr |
112 | CMAKE_BUILD_TYPE | Release | |
113 | GEANT4_BUILD_MULTITHREADED | ON | |
114 | GEANT4_INSTALL_DATA | OFF | |
115 | GEANT4_INSTALL_DATADIR | CMAKE_INSTALL_DATAROOTDIR | |
116 | GEANT4_USE_G3TOG4 | OFF | ON |
117 | GEANT4_USE_GDML | OFF | ON |
118 | GEANT4_USE_INVENTOR | OFF | |
119 | GEANT4_USE_INVENTOR_QT | OFF | ON |
120 | GEANT4_USE_OPENGL_WIN32 | OFF, Windows Only | |
121 | GEANT4_USE_OPENGL_X11 | OFF, Unix Only | ON |
122 | GEANT4_USE_PYTHON | OFF | ON |
123 | GEANT4_USE_QT | OFF | ON |
124 | GEANT4_USE_RAYTRACER_X11 | OFF, Unix only | ON |
125 | GEANT4_USE_SYSTEM_CLHEP | OFF | |
126 | GEANT4_USE_SYSTEM_EXPAT | ON | |
127 | GEANT4_USE_SYSTEM_ZLIB | OFF | ON |
128 | GEANT4_USE_TOOLSSG | OFF | QT |
129 | GEANT4_USE_XM | OFF, Unix Only | ON |
130 |----------------------------------+------------------------------------------------------+----------------|
131 | BUILD_SHARED_LIBS | ON | |
132 | BUILD_STATIC_LIBS | OFF | |
133 | CMAKE_CXX_STANDARD | 17 | |
134 | CMAKE_INSTALL_BINDIR | bin | |
135 | CMAKE_INSTALL_INCLUDEDIR | include | |
136 | CMAKE_INSTALL_LIBDIR | lib(+?SUFFIX) | |
137 | CMAKE_INSTALL_PYTHONDIR | CMAKE_INSTALL_LIBDIR/python3.<PYMINOR>/site-packages | |
138 | CMAKE_INSTALL_DATAROOTDIR | share | |
139 | GEANT4_INSTALL_DATA_TIMEOUT | 1500 | |
140 | GEANT4_INSTALL_EXAMPLES | ON | |
141 | GEANT4_INSTALL_PACKAGE_CACHE | ON | OFF |
142 | GEANT4_INSTALL_DATASETS_TENDL | OFF | |
143 | GEANT4_BUILD_MSVC_MP | OFF, Windows Only | |
144 | GEANT4_BUILD_TLS_MODEL | initial-exec | global-dynamic |
145 | GEANT4_BUILD_STORE_TRAJECTORY | ON | |
146 | GEANT4_BUILD_VERBOSE_CODE | ON | |
147 | GEANT4_BUILD_BUILTIN_BACKTRACE | OFF | |
148 | GEANT4_BUILD_PHP_AS_HP | OFF | what's this? |
149 | GEANT4_USE_SMARTSTACK | OFF | what's this? |
150 | GEANT4_USE_SYSTEM_PTL | OFF | |
151 | GEANT4_USE_TBB | OFF | |
152 | GEANT4_ENABLE_TESTING | OFF | |
153 | GEANT4_USE_FREETYPE | OFF | |
154 | GEANT4_USE_HDF5 | OFF | |
155 | GEANT4_USE_USOLIDS | OFF | |
156 | GEANT4_USE_TIMEMORY | OFF | |
157 | GEANT4_USE_VTK | OFF | |
158 | CMAKE_PREFIX_PATH | OFF | |
159 |----------------------------------+------------------------------------------------------+----------------|
160
161 |--------------------------------+-----------------------------------------------------------------------------------------|
162 | CMAKE_CXX_FLAGS | -W -Wall -pedantic -Wno-non-virtual-dtor -Wno-long-long -Wwrite-strings -Wpointer-arith |
163 | | -Woverloaded-virtual -Wno-variadic-macros -Wshadow -pipe |
164 | CMAKE_CXX_FLAGS_RELEASE | -O3 -DNDEBUG -fno-trapping-math -ftree-vectorize -fno-math-errno |
165 | CMAKE_CXX_FLAGS_DEBUG | -g |
166 | CMAKE_CXX_FLAGS_RELWITHDEBINFO | -O2 -g |
167 |--------------------------------+-----------------------------------------------------------------------------------------|
168EOF
169echo ""
170

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion