◎ AURWatch - AUR Security Monitor
scan coverage …
Last scan …
Next scan -

geant4-full

maintainer effeffe · 2 votes · scanned 2026-08-18 00:03:42.021799
LOW
View on AUR ↗
Why flagged The source URL is hosted on a CERN subdomain, which is plausibly part of Geant4's official infrastructure, and the package builds from source; the non-whitelisted host is a false positive given the project's legitimate origin.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URL is hosted on a CERN subdomain, which is plausibly part of Geant4's official infrastructure, and the package builds from source; the non-whitelisted host is a false positive given the project's legitimate origin.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:54 "http://geant4-data.web.cern.ch/releases/geant4-v${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Filippo Falezza <filippo dot falezza at outlook dot it>
2
3pkgname='geant4-full'
4pkgver=11.4.2
5pkgrel=2
6pkgdesc="A simulation toolkit for particle physics interactions - includes all the optional libraries"
7depends=(
8 'cmake>=3.16'
9 'xerces-c>=3'
10 'qt6-base'
11 'glu'
12 'openmotif'
13 'soqt'
14 'zlib'
15 'python>=3'
16 'boost'
17 'tbb'
18 'root'
19)
20provides=('geant4')
21conflicts=(
22 'geant4_devel'
23 'geant4'
24 'geant4-debug'
25 'geant4-abladata'
26 'geant4-channelingdata'
27 'geant4-ensdfstatedata'
28 'geant4-incldata'
29 'geant4-ledata'
30 'geant4-levelgammadata'
31 'geant4-neutronhpdata'
32 'geant4-neutronxsdata'
33 'geant4-nudexlibdata'
34 'geant4-particlehpdata'
35 'geant4-particlexsdata'
36 'geant4-piidata'
37 'geant4-radioactivedata'
38 'geant4-realsurfacedata'
39 'geant4-saiddata'
40 'geant4-uurptdata'
41)
42optdepends=(
43 'java-environment'
44 'tcsh'
45 'geant4-lend'
46 'dawn'
47 'hdf5-geant4'
48)
49url="http://geant4.cern.ch/"
50arch=('x86_64')
51license=('custom: http://geant4.cern.ch/license/')
52options=('!emptydirs')
53source=(
54 "http://geant4-data.web.cern.ch/releases/geant4-v${pkgver}.tar.gz"
55 'geant4-full.install'
56 'hdf5_2_2.patch'
57)
58sha256sums=(
59 '5720f2bba6921027e206ad4f0a06f9bcc348adab36240e8b27710f20ce3e971a'
60 '5fde7b80dcfa960407b1ecb2b2a2aa817250948cc32490d8ece48a5e5b4035c1'
61 '2486b50adcf4a6ce08b1a5b38b72469926f5835a2b0322b2d962902918eff8a2'
62)
63install="geant4-full.install"
64
65prepare() {
66 cd "${srcdir}"
67 patch -Np0 < hdf5_2_2.patch
68}
69
70build() {
71
72 cd "${srcdir}"
73 echo "
74export PATH=\$PATH:/opt/Geant4/Geant4-v${pkgver}/bin
75export G4NEUTRONHPDATA=/opt/Geant4/Libraries/G4NDL4.7.1
76export G4LEDATA=/opt/Geant4/Libraries/G4EMLOW8.8
77export G4LEVELGAMMADATA=/opt/Geant4/Libraries/PhotonEvaporation6.1.2
78export G4RADIOACTIVEDATA=/opt/Geant4/Libraries/RadioactiveDecay6.1.2
79export G4PARTICLEXSDATA=/opt/Geant4/Libraries/G4PARTICLEXS4.2
80export G4PIIDATA=/opt/Geant4/Libraries/G4PII1.3
81export G4REALSURFACEDATA=/opt/Geant4/Libraries/RealSurface2.2
82export G4SAIDXSDATA=/opt/Geant4/Libraries/G4SAIDDATA2.0
83export G4ABLADATA=/opt/Geant4/Libraries/G4ABLA3.3
84export G4INCLDATA=/opt/Geant4/Libraries/G4INCL1.3
85export G4ENSDFSTATEDATA=/opt/Geant4/Libraries/G4ENSDFSTATE3.0
86export G4CHANNELINGDATA=/opt/Geant4/Libraries/G4CHANNELING2.0
87export G4PARTICLEHPDATA=/opt/Geant4/Libraries/G4TENDL1.4
88export G4NUDEXLIBDATA=/opt/Geant4/Libraries/G4NUDEXLIB1.0
89export G4URRPTDATA=/opt/Geant4/Libraries/G4URRPT1.1" > Geant4.sh
90
91 echo "
92setenv PATH \$PATH:/opt/Geant4/Geant4-v${pkgver}/bin
93setenv G4NEUTRONHPDATA /opt/Geant4/Libraries/G4NDL4.7.1
94setenv G4LEDATA /opt/Geant4/Libraries/G4EMLOW8.8
95setenv G4LEVELGAMMADATA /opt/Geant4/Libraries/PhotonEvaporation6.1.2
96setenv G4RADIOACTIVEDATA /opt/Geant4/Libraries/RadioactiveDecay6.1.2
97setenv G4PARTICLEXSDATA /opt/Geant4/Libraries/G4PARTICLEXS4.2
98setenv G4PIIDATA /opt/Geant4/Libraries/G4PII1.3
99setenv G4REALSURFACEDATA /opt/Geant4/Libraries/RealSurface2.2
100setenv G4SAIDXSDATA /opt/Geant4/Libraries/G4SAIDDATA2.0
101setenv G4ABLADATA /opt/Geant4/Libraries/G4ABLA3.3
102setenv G4INCLDATA /opt/Geant4/Libraries/G4INCL1.3
103setenv G4ENSDFSTATEDATA /opt/Geant4/Libraries/G4ENSDFSTATE3.0
104setenv G4CHANNELINGDATA /opt/Geant4/Libraries/G4CHANNELING2.0
105setenv G4PARTICLEHPDATA /opt/Geant4/Libraries/G4TENDL1.4
106setenv G4NUDEXLIBDATA /opt/Geant4/Libraries/G4NUDEXLIB1.0
107setenv G4URRPTDATA /opt/Geant4/Libraries/G4URRPT1.1" > Geant4.csh
108
109 [ -d "${srcdir}"/build ] || mkdir "${srcdir}"/build
110 cd "${srcdir}"/build
111
112 #check if hdf5-geant4 is installed, if so enable support, otherwise disable
113 _HDF5=OFF
114 if pacman -Q hdf5-geant4 &> /dev/null
115 then
116 _HDF5=ON
117 else
118 _HDF5=OFF
119 fi
120
121 cmake \
122 -DCMAKE_POLICY_VERSION_MINIMUM=4.0 \
123 -DCMAKE_INSTALL_PREFIX=/opt/Geant4/Geant4-v${pkgver} \
124 -DCMAKE_BUILD_TYPE=Release \
125 -DGEANT4_BUILD_MULTITHREADED=ON \
126 -DGEANT4_INSTALL_DATA=ON \
127 -DGEANT4_INSTALL_DATASETS_TENDL=ON \
128 -DGEANT4_INSTALL_DATASETS_URRPT=ON \
129 -DGEANT4_INSTALL_DATASETS_NUDEXLIB=ON \
130 -DGEANT4_USE_G3TOG4=ON \
131 -DGEANT4_USE_GDML=ON \
132 -DGEANT4_USE_FREETYPE=ON \
133 -DGEANT4_USE_QT_QT6=ON \
134 -DGEANT4_USE_INVENTOR_QT=ON \
135 -DGEANT4_USE_OPENGL_X11=ON \
136 -DGEANT4_USE_QT=ON \
137 -DGEANT4_USE_RAYTRACER_X11=ON \
138 -DGEANT4_USE_SYSTEM_ZLIB=ON \
139 -DGEANT4_USE_XM=ON \
140 -DGEANT4_INSTALL_PACKAGE_CACHE=OFF \
141 -DGEANT4_USE_PYTHON=ON \
142 -DGEANT4_USE_TBB=ON \
143 -DGEANT4_USE_HDF5=${_HDF5} \
144 -DGEANT4_BUILD_TLS_MODEL=global-dynamic \
145 -DGEANT4_INSTALL_DATADIR=/opt/Geant4/Libraries \
146 ../geant4-v${pkgver}
147
148
149 #set GEANT4_BUILD_TLS_MODEL=global-dynamic and GEANT4_USE_PYTHON=ON for compatibility with g4python
150 make #VERBOSE=1
151}
152
153package() {
154 cd "${srcdir}"
155 install -D -m 755 Geant4.sh "${pkgdir}"/etc/profile.d/Geant4.sh
156 install -D -m 755 Geant4.csh "${pkgdir}"/etc/profile.d/Geant4.csh
157
158 cd "${srcdir}"/build
159 make DESTDIR="${pkgdir}" install
160
161 mkdir -p "${pkgdir}"/usr/include
162 ln -s /opt/Geant4/Geant4-v${pkgver}/lib ${pkgdir}/opt/Geant4/Geant4-v${pkgver}/lib64
163 ln -s /opt/Geant4/Geant4-v${pkgver}/include/Geant4 "${pkgdir}"/usr/include/Geant4
164 ln -s /opt/Geant4/Geant4-v${pkgver}/include/Geant4/CLHEP "${pkgdir}"/usr/include/CLHEP
165 ln -s /opt/Geant4/Geant4-v${pkgver}/include/Geant4/PTL "${pkgdir}"/usr/include/PTL
166}
167

Changes since previous scan

--- PKGBUILD @ 2026-08-14 00:03
+++ PKGBUILD @ 2026-08-18 00:03
@@ -2,7 +2,7 @@
pkgname='geant4-full'
pkgver=11.4.2
-pkgrel=1
+pkgrel=2
pkgdesc="A simulation toolkit for particle physics interactions - includes all the optional libraries"
depends=(
'cmake>=3.16'
@@ -23,23 +23,28 @@
'geant4'
'geant4-debug'
'geant4-abladata'
+ 'geant4-channelingdata'
'geant4-ensdfstatedata'
'geant4-incldata'
'geant4-ledata'
'geant4-levelgammadata'
'geant4-neutronhpdata'
'geant4-neutronxsdata'
+ 'geant4-nudexlibdata'
+ 'geant4-particlehpdata'
'geant4-particlexsdata'
'geant4-piidata'
'geant4-radioactivedata'
'geant4-realsurfacedata'
'geant4-saiddata'
+ 'geant4-uurptdata'
)
optdepends=(
'java-environment'
'tcsh'
'geant4-lend'
'dawn'
+ 'hdf5-geant4'
)
url="http://geant4.cern.ch/"
arch=('x86_64')
@@ -48,12 +53,19 @@
source=(
"http://geant4-data.web.cern.ch/releases/geant4-v${pkgver}.tar.gz"
'geant4-full.install'
+ 'hdf5_2_2.patch'
)
sha256sums=(
'5720f2bba6921027e206ad4f0a06f9bcc348adab36240e8b27710f20ce3e971a'
'5fde7b80dcfa960407b1ecb2b2a2aa817250948cc32490d8ece48a5e5b4035c1'
+ '2486b50adcf4a6ce08b1a5b38b72469926f5835a2b0322b2d962902918eff8a2'
)
install="geant4-full.install"
+
+prepare() {
+ cd "${srcdir}"
+ patch -Np0 < hdf5_2_2.patch
+}
build() {
@@ -97,6 +109,15 @@
[ -d "${srcdir}"/build ] || mkdir "${srcdir}"/build
cd "${srcdir}"/build
+ #check if hdf5-geant4 is installed, if so enable support, otherwise disable
+ _HDF5=OFF
+ if pacman -Q hdf5-geant4 &> /dev/null
+ then
+ _HDF5=ON
+ else
+ _HDF5=OFF
+ fi
+
cmake \
-DCMAKE_POLICY_VERSION_MINIMUM=4.0 \
-DCMAKE_INSTALL_PREFIX=/opt/Geant4/Geant4-v${pkgver} \
@@ -119,6 +140,7 @@
-DGEANT4_INSTALL_PACKAGE_CACHE=OFF \
-DGEANT4_USE_PYTHON=ON \
-DGEANT4_USE_TBB=ON \
+ -DGEANT4_USE_HDF5=${_HDF5} \
-DGEANT4_BUILD_TLS_MODEL=global-dynamic \
-DGEANT4_INSTALL_DATADIR=/opt/Geant4/Libraries \
../geant4-v${pkgver}

Scan history

Scanned at (UTC)SeverityRules
2026-08-18 00:03:42 LOW 2
2026-08-17 00:18:29 LOW 2
2026-08-16 00:03:42 LOW 2
2026-08-15 00:26:13 LOW 2
2026-08-14 15:29:17 MEDIUM 1
2026-08-14 13:29:16 MEDIUM 1
2026-08-14 00:03:41 LOW 2
2026-08-13 17:26:33 MEDIUM 1
2026-08-13 15:26:23 MEDIUM 1
2026-06-20 00:18:46 MEDIUM 1
2026-06-19 23:51:18 CLEAN 2
2026-06-19 19:07:35 LOW 2
2026-06-18 18:55:24 LOW 2
2026-06-18 18:04:49 LOW 2
2026-06-18 16:11:54 MEDIUM 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion