geant4-debug

maintainer gipert · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from a CERN subdomain, which is plausibly the project's official infrastructure; building from official project sources is normal AUR practice, even if the host is not on a standard whitelist.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from a CERN subdomain, which is plausibly the project's official infrastructure; building from official project sources is normal AUR practice, even if the host is not on a standard whitelist.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:40 source=("http://geant4-data.web.cern.ch/releases/${_pkgname}-${_pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Luigi Pertoldi <gipert@pm.me>
    
      2pkgname='geant4-debug'
    
      3_pkgname='geant4'
    
      4pkgver=11.0.3
    
      5_pkgver=v11.0.3
    
      6pkgrel=2
    
      7pkgdesc="A simulation toolkit for particle physics interactions (compiled with debugging info)."
    
      8depends=('cmake>=3.16'
    
       'xerces-c>=3'
    
       'qt5-base'
    
       'glu'
    
       'openmotif'
    
       'soqt'
    
       'zlib'
    
       'python>=3'
    
       'boost'
    
      )
    
      18conflicts=('geant4')
    
      19optdepends=('java-environment: for histogram visualizations and
    
      20analysis'
    
'tcsh: for C Shell support'
    
'python: for G4Python support'
    
'geant4-abladata: Data files for nuclear shell effects in INCL/ABLA hadronic mode'
    
'geant4-ensdfstatedata: Nuclei properties from the Evaluated Nuclear Structure Data Files'
    
'geant4-incldata: Data files for proton and neutron density profiles'
    
'geant4-ledata: Data files for low energy electromagnetic processes'
    
'geant4-levelgammadata: Data files for photon evaporation'
    
'geant4-neutronhpdata: Neutron data files with thermal cross sections'
    
'geant4-particlexsdata: Data files for evaluated p, d, t, He3, He4 and gamma cross sections, replaces geant4-neutronxsdata'
    
'geant4-piidata: Data files for shell ionisation cross sections'
    
'geant4-radioactivedata: Data files for radioactive decay hadronic processes'
    
'geant4-realsurfacedata: Data files for measured optical surface reflectance'
    
'geant4-saiddata: Data files from evaluated cross-sections in SAID data-base'
    
      34)
    
      35url="http://geant4.cern.ch/"
    
      36arch=('x86_64')
    
      37license=('custom: http://geant4.cern.ch/license/')
    
      38options=('!emptydirs' '!strip')
    
      39install="${_pkgname}.install"
    
      40source=("http://geant4-data.web.cern.ch/releases/${_pkgname}-${_pkgver}.tar.gz"
    
      "${_pkgname}.install")
    
      42
    
      43
    
      44md5sums=('caf371e8b07a7ea3ef3b4719bf0fc5f0'
    
       'a6abacd078760aebda58316454d7e0c9')
    
      46
    
      47## Remove this if you want to keep an even smaller package
    
      48## No need to wait for compression when just installing it.
    
      49PKGEXT='.pkg.tar'
    
      50
    
      51build() {
    
      52
    
[ -d ${srcdir}/build ] || mkdir ${srcdir}/build
    
cd ${srcdir}/build
    
      55
    
env -i \
    
    QT_SELECT=5 \
    
    PATH=/usr/bin \
    
    cmake \
    
    -DCMAKE_BUILD_TYPE="RelWithDebInfo" \
    
    -DCMAKE_INSTALL_PREFIX=/usr \
    
    -DGEANT4_BUILD_MULTITHREADED=ON \
    
    -DGEANT4_USE_PYTHON=ON \
    
    -DGEANT4_USE_G3TOG4=ON \
    
    -DGEANT4_USE_GDML=ON \
    
    -DGEANT4_USE_INVENTOR_QT=ON \
    
    -DGEANT4_USE_QT=ON \
    
    -DGEANT4_USE_OPENGL_X11=ON \
    
    -DGEANT4_USE_RAYTRACER_X11=ON \
    
    -DGEANT4_USE_XM=ON \
    
    -DGEANT4_USE_TOOLSSG=QT \
    
    -DGEANT4_USE_SYSTEM_ZLIB=ON \
    
    -DGEANT4_BUILD_TLS_MODEL=global-dynamic \
    
    -DGEANT4_INSTALL_PACKAGE_CACHE=OFF \
    
    ../${_pkgname}-${_pkgver}
    
      76
    
G4VERBOSE=1 make
    
      78
    
      79}
    
      80
    
      81package() {
    
# normally the geant4.[c]sh is meant to configure the
    
# LD_LIBRARY_PATH, PATH and the "G4DATASETS". Let's not source that
    
# script since
    
#
    
# - LD_LIBRARY_PATH can be set using ldconf
    
# - PATH is not really needed
    
# - the "G4DATASETS" are not installed by default in this package
    
      89
    
cd ${srcdir}/build
    
make DESTDIR="${pkgdir}" install
    
      92
    
##
    
## This is not needed as ldconfig automatically includes /usr/lib
    
##
    
# use a file that pacman can track instead of adding directly to ld.so.conf
    
# install -d "${pkgdir}/etc/ld.so.conf.d"
    
# echo '/usr/lib' > "${pkgdir}/etc/ld.so.conf.d/${pkgname}.conf"
    
      99}
    
      100
    
      101# All this is just a comment
    
      102echo ""
    
<<'EOF'
    
      104
    
From: https://geant4-userdoc.web.cern.ch/UsersGuides/InstallationGuide/html/installguide.html#geant4-build-options
    
Last revisited: Dec 15, 2021. (11.0)
    
      107
    
|----------------------------------+------------------------------------------------------+----------------|
    
| option                           | default                                              | set to         |
    
|----------------------------------+------------------------------------------------------+----------------|
    
| CMAKE_INSTALL_PREFIX             | /usr/local                                           | /usr           |
    
| CMAKE_BUILD_TYPE                 | Release                                              |                |
    
| GEANT4_BUILD_MULTITHREADED       | ON                                                   |                |
    
| GEANT4_INSTALL_DATA              | OFF                                                  |                |
    
| GEANT4_INSTALL_DATADIR           | CMAKE_INSTALL_DATAROOTDIR                            |                |
    
| GEANT4_USE_G3TOG4                | OFF                                                  | ON             |
    
| GEANT4_USE_GDML                  | OFF                                                  | ON             |
    
| GEANT4_USE_INVENTOR              | OFF                                                  |                |
    
| GEANT4_USE_INVENTOR_QT           | OFF                                                  | ON             |
    
| GEANT4_USE_OPENGL_WIN32          | OFF, Windows Only                                    |                |
    
| GEANT4_USE_OPENGL_X11            | OFF, Unix Only                                       | ON             |
    
| GEANT4_USE_PYTHON                | OFF                                                  | ON             |
    
| GEANT4_USE_QT                    | OFF                                                  | ON             |
    
| GEANT4_USE_RAYTRACER_X11         | OFF, Unix only                                       | ON             |
    
| GEANT4_USE_SYSTEM_CLHEP          | OFF                                                  |                |
    
| GEANT4_USE_SYSTEM_EXPAT          | ON                                                   |                |
    
| GEANT4_USE_SYSTEM_ZLIB           | OFF                                                  | ON             |
    
| GEANT4_USE_TOOLSSG               | OFF                                                  | QT             |
    
| GEANT4_USE_XM                    | OFF, Unix Only                                       | ON             |
    
|----------------------------------+------------------------------------------------------+----------------|
    
| BUILD_SHARED_LIBS                | ON                                                   |                |
    
| BUILD_STATIC_LIBS                | OFF                                                  |                |
    
| CMAKE_CXX_STANDARD               | 17                                                   |                |
    
| CMAKE_INSTALL_BINDIR             | bin                                                  |                |
    
| CMAKE_INSTALL_INCLUDEDIR         | include                                              |                |
    
| CMAKE_INSTALL_LIBDIR             | lib(+?SUFFIX)                                        |                |
    
| CMAKE_INSTALL_PYTHONDIR          | CMAKE_INSTALL_LIBDIR/python3.<PYMINOR>/site-packages |                |
    
| CMAKE_INSTALL_DATAROOTDIR        | share                                                |                |
    
| GEANT4_INSTALL_DATA_TIMEOUT      | 1500                                                 |                |
    
| GEANT4_INSTALL_EXAMPLES          | ON                                                   |                |
    
| GEANT4_INSTALL_PACKAGE_CACHE     | ON                                                   | OFF            |
    
| GEANT4_INSTALL_DATASETS_TENDL    | OFF                                                  |                |
    
| GEANT4_BUILD_MSVC_MP             | OFF, Windows Only                                    |                |
    
| GEANT4_BUILD_TLS_MODEL           | initial-exec                                         | global-dynamic |
    
| GEANT4_BUILD_STORE_TRAJECTORY    | ON                                                   |                |
    
| GEANT4_BUILD_VERBOSE_CODE        | ON                                                   |                |
    
| GEANT4_BUILD_BUILTIN_BACKTRACE   | OFF                                                  |                |
    
| GEANT4_BUILD_PHP_AS_HP           | OFF                                                  | what's this?   |
    
| GEANT4_USE_SMARTSTACK            | OFF                                                  | what's this?   |
    
| GEANT4_USE_SYSTEM_PTL            | OFF                                                  |                |
    
| GEANT4_USE_TBB                   | OFF                                                  |                |
    
| GEANT4_ENABLE_TESTING            | OFF                                                  |                |
    
| GEANT4_USE_FREETYPE              | OFF                                                  |                |
    
| GEANT4_USE_HDF5                  | OFF                                                  |                |
    
| GEANT4_USE_USOLIDS               | OFF                                                  |                |
    
| GEANT4_USE_TIMEMORY              | OFF                                                  |                |
    
| GEANT4_USE_VTK                   | OFF                                                  |                |
    
| CMAKE_PREFIX_PATH                | OFF                                                  |                |
    
|----------------------------------+------------------------------------------------------+----------------|
    
      160
    
|--------------------------------+-----------------------------------------------------------------------------------------|
    
| CMAKE_CXX_FLAGS                | -W -Wall -pedantic -Wno-non-virtual-dtor -Wno-long-long -Wwrite-strings -Wpointer-arith |
    
|                                | -Woverloaded-virtual -Wno-variadic-macros -Wshadow -pipe                                |
    
| CMAKE_CXX_FLAGS_RELEASE        | -O3 -DNDEBUG -fno-trapping-math -ftree-vectorize -fno-math-errno                        |
    
| CMAKE_CXX_FLAGS_DEBUG          | -g                                                                                      |
    
| CMAKE_CXX_FLAGS_RELWITHDEBINFO | -O2 -g                                                                                  |
    
|--------------------------------+-----------------------------------------------------------------------------------------|
    
      168EOF
    
      169echo ""
    
      170

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2