geant4-full-debug

maintainer effeffe · 1 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The source is a tarball from a CERN subdomain (geant4-data.web.cern.ch) hosting official Geant4 release data;虽非标准主站 but plausibly project-owned, and the package builds from source, posing no remote code execution or supply-chain risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from a CERN subdomain (geant4-data.web.cern.ch) hosting official Geant4 release data;虽非标准主站 but plausibly project-owned, and the package builds from source, posing no remote code execution or supply-chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:54 "http://geant4-data.web.cern.ch/releases/geant4-v${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Filippo Falezza <filippo dot falezza at outlook dot it>
    
      2
    
      3pkgname='geant4-full-debug'
    
      4pkgver=11.4.2
    
      5pkgrel=2
    
      6pkgdesc="A simulation toolkit for particle physics interactions - includes all the optional libraries"
    
      7depends=(
    
      8  'cmake>=3.16'
    
      9  'xerces-c>=3'
    
      10  'qt6-base'
    
      11  'glu'
    
      12  'openmotif'
    
      13  'soqt'
    
      14  'zlib'
    
      15  'python>=3'
    
      16  'boost'
    
      17  'tbb'
    
      18  'root'
    
      19)
    
      20provides=('geant4')
    
      21conflicts=(
    
      22  'geant4_devel'
    
      23  'geant4'
    
      24  'geant4-debug'
    
      25  'geant4-abladata' 
    
      26  'geant4-channelingdata'
    
      27  'geant4-ensdfstatedata'
    
      28  'geant4-incldata'
    
      29  'geant4-ledata'   
    
      30  'geant4-levelgammadata'
    
      31  'geant4-neutronhpdata'
    
      32  'geant4-neutronxsdata'
    
      33  'geant4-nudexlibdata'
    
      34  'geant4-particlehpdata'
    
      35  'geant4-particlexsdata'
    
      36  'geant4-piidata'  
    
      37  'geant4-radioactivedata'
    
      38  'geant4-realsurfacedata'
    
      39  'geant4-saiddata'
    
      40  'geant4-uurptdata'
    
      41)
    
      42optdepends=(
    
      43  'java-environment'
    
      44  'tcsh'
    
      45  'geant4-lend'
    
      46  'dawn'
    
      47  'hdf5-geant4'
    
      48)
    
      49url="http://geant4.cern.ch/"
    
      50arch=('x86_64')
    
      51license=('custom: http://geant4.cern.ch/license/')
    
      52options=('!emptydirs')
    
      53source=(
    
      54  "http://geant4-data.web.cern.ch/releases/geant4-v${pkgver}.tar.gz"
    
      55  'geant4-full-debug.install'
    
      56  'hdf5_2_2.patch'
    
      57)
    
      58sha256sums=(
    
      59  '5720f2bba6921027e206ad4f0a06f9bcc348adab36240e8b27710f20ce3e971a'
    
      60  '5fde7b80dcfa960407b1ecb2b2a2aa817250948cc32490d8ece48a5e5b4035c1'
    
      61  '2486b50adcf4a6ce08b1a5b38b72469926f5835a2b0322b2d962902918eff8a2'
    
      62)
    
      63install="geant4-full-debug.install"
    
      64
    
      65build() {
    
      66
    
      67  cd "${srcdir}"
    
      68  echo "
    
      69export PATH=\$PATH:/opt/Geant4/Geant4-v${pkgver}/bin
    
      70export G4NEUTRONHPDATA=/opt/Geant4/Libraries/G4NDL4.7.1
    
      71export G4LEDATA=/opt/Geant4/Libraries/G4EMLOW8.8
    
      72export G4LEVELGAMMADATA=/opt/Geant4/Libraries/PhotonEvaporation6.1.2
    
      73export G4RADIOACTIVEDATA=/opt/Geant4/Libraries/RadioactiveDecay6.1.2
    
      74export G4PARTICLEXSDATA=/opt/Geant4/Libraries/G4PARTICLEXS4.2
    
      75export G4PIIDATA=/opt/Geant4/Libraries/G4PII1.3
    
      76export G4REALSURFACEDATA=/opt/Geant4/Libraries/RealSurface2.2
    
      77export G4SAIDXSDATA=/opt/Geant4/Libraries/G4SAIDDATA2.0
    
      78export G4ABLADATA=/opt/Geant4/Libraries/G4ABLA3.3
    
      79export G4INCLDATA=/opt/Geant4/Libraries/G4INCL1.3
    
      80export G4ENSDFSTATEDATA=/opt/Geant4/Libraries/G4ENSDFSTATE3.0
    
      81export G4CHANNELINGDATA=/opt/Geant4/Libraries/G4CHANNELING2.0
    
      82export G4PARTICLEHPDATA=/opt/Geant4/Libraries/G4TENDL1.4
    
      83export G4NUDEXLIBDATA=/opt/Geant4/Libraries/G4NUDEXLIB1.0
    
      84export G4URRPTDATA=/opt/Geant4/Libraries/G4URRPT1.1" > Geant4.sh
    
      85
    
      86  echo "
    
      87setenv PATH \$PATH:/opt/Geant4/Geant4-v${pkgver}/bin
    
      88setenv G4NEUTRONHPDATA /opt/Geant4/Libraries/G4NDL4.7.1
    
      89setenv G4LEDATA /opt/Geant4/Libraries/G4EMLOW8.8
    
      90setenv G4LEVELGAMMADATA /opt/Geant4/Libraries/PhotonEvaporation6.1.2
    
      91setenv G4RADIOACTIVEDATA /opt/Geant4/Libraries/RadioactiveDecay6.1.2
    
      92setenv G4PARTICLEXSDATA /opt/Geant4/Libraries/G4PARTICLEXS4.2
    
      93setenv G4PIIDATA /opt/Geant4/Libraries/G4PII1.3
    
      94setenv G4REALSURFACEDATA /opt/Geant4/Libraries/RealSurface2.2
    
      95setenv G4SAIDXSDATA /opt/Geant4/Libraries/G4SAIDDATA2.0
    
      96setenv G4ABLADATA /opt/Geant4/Libraries/G4ABLA3.3
    
      97setenv G4INCLDATA /opt/Geant4/Libraries/G4INCL1.3
    
      98setenv G4ENSDFSTATEDATA /opt/Geant4/Libraries/G4ENSDFSTATE3.0
    
      99setenv G4CHANNELINGDATA /opt/Geant4/Libraries/G4CHANNELING2.0
    
      100setenv G4PARTICLEHPDATA /opt/Geant4/Libraries/G4TENDL1.4
    
      101setenv G4NUDEXLIBDATA /opt/Geant4/Libraries/G4NUDEXLIB1.0
    
      102setenv G4URRPTDATA /opt/Geant4/Libraries/G4URRPT1.1" > Geant4.csh
    
      103
    
      104  [ -d "${srcdir}"/build ] || mkdir "${srcdir}"/build
    
      105  cd "${srcdir}"/build
    
      106
    
      107  #check if hdf5-geant4 is installed, if so enable support, otherwise disable
    
      108  _HDF5=OFF
    
      109  if pacman -Q hdf5-geant4 &> /dev/null
    
      110  then
    
      111    _HDF5=ON
    
      112  else
    
      113    _HDF5=OFF
    
      114  fi
    
      115
    
      116  cmake \
    
      117    -DCMAKE_POLICY_VERSION_MINIMUM=4.0 \
    
      118    -DCMAKE_INSTALL_PREFIX=/opt/Geant4/Geant4-v${pkgver} \
    
      119    -DCMAKE_BUILD_TYPE=RelWithDebInfo \
    
      120    -DGEANT4_BUILD_MULTITHREADED=ON \
    
      121    -DGEANT4_INSTALL_DATA=ON \
    
      122    -DGEANT4_INSTALL_DATASETS_TENDL=ON \
    
      123    -DGEANT4_INSTALL_DATASETS_URRPT=ON \
    
      124    -DGEANT4_INSTALL_DATASETS_NUDEXLIB=ON \
    
      125    -DGEANT4_USE_G3TOG4=ON \
    
      126    -DGEANT4_USE_GDML=ON \
    
      127    -DGEANT4_USE_FREETYPE=ON \
    
      128    -DGEANT4_USE_QT_QT6=ON \
    
      129    -DGEANT4_USE_INVENTOR_QT=ON \
    
      130    -DGEANT4_USE_OPENGL_X11=ON \
    
      131    -DGEANT4_USE_QT=ON \
    
      132    -DGEANT4_USE_RAYTRACER_X11=ON \
    
      133    -DGEANT4_USE_SYSTEM_ZLIB=ON \
    
      134    -DGEANT4_USE_XM=ON \
    
      135    -DGEANT4_INSTALL_PACKAGE_CACHE=OFF \
    
      136    -DGEANT4_USE_PYTHON=ON \
    
      137    -DGEANT4_USE_TBB=ON \
    
      138    -DGEANT4_USE_HDF5=${_HDF5} \
    
      139    -DGEANT4_BUILD_TLS_MODEL=global-dynamic \
    
      140    -DGEANT4_INSTALL_DATADIR=/opt/Geant4/Libraries \
    
      141    ../geant4-v${pkgver}
    
      142
    
      143
    
      144  #set GEANT4_BUILD_TLS_MODEL=global-dynamic and GEANT4_USE_PYTHON=ON for compatibility with g4python
    
      145  make #VERBOSE=1
    
      146}
    
      147
    
      148package() {
    
      149  cd "${srcdir}"
    
      150  install -D -m 755 Geant4.sh "${pkgdir}"/etc/profile.d/Geant4.sh
    
      151  install -D -m 755 Geant4.csh "${pkgdir}"/etc/profile.d/Geant4.csh
    
      152
    
      153  cd "${srcdir}"/build
    
      154  make DESTDIR="${pkgdir}" install
    
      155
    
      156  mkdir -p "${pkgdir}"/usr/include
    
      157  ln -s /opt/Geant4/Geant4-v${pkgver}/lib ${pkgdir}/opt/Geant4/Geant4-v${pkgver}/lib64
    
      158  ln -s /opt/Geant4/Geant4-v${pkgver}/include/Geant4 "${pkgdir}"/usr/include/Geant4
    
      159  ln -s /opt/Geant4/Geant4-v${pkgver}/include/Geant4/CLHEP "${pkgdir}"/usr/include/CLHEP
    
      160  ln -s /opt/Geant4/Geant4-v${pkgver}/include/Geant4/PTL "${pkgdir}"/usr/include/PTL
    
      161}
    
      162

Changes since previous scan

--- PKGBUILD @ 2026-08-14 00:03
+++ PKGBUILD @ 2026-08-18 00:03
@@ -2,7 +2,7 @@
 
 pkgname='geant4-full-debug'
 pkgver=11.4.2
-pkgrel=1
+pkgrel=2
 pkgdesc="A simulation toolkit for particle physics interactions - includes all the optional libraries"
 depends=(
   'cmake>=3.16'
@@ -22,24 +22,29 @@
   'geant4_devel'
   'geant4'
   'geant4-debug'
-  'geant4-abladata'
+  'geant4-abladata' 
+  'geant4-channelingdata'
   'geant4-ensdfstatedata'
   'geant4-incldata'
-  'geant4-ledata'
+  'geant4-ledata'   
   'geant4-levelgammadata'
   'geant4-neutronhpdata'
   'geant4-neutronxsdata'
+  'geant4-nudexlibdata'
+  'geant4-particlehpdata'
   'geant4-particlexsdata'
-  'geant4-piidata'
+  'geant4-piidata'  
   'geant4-radioactivedata'
   'geant4-realsurfacedata'
   'geant4-saiddata'
+  'geant4-uurptdata'
 )
 optdepends=(
   'java-environment'
   'tcsh'
   'geant4-lend'
   'dawn'
+  'hdf5-geant4'
 )
 url="http://geant4.cern.ch/"
 arch=('x86_64')
@@ -48,10 +53,12 @@
 source=(
   "http://geant4-data.web.cern.ch/releases/geant4-v${pkgver}.tar.gz"
   'geant4-full-debug.install'
+  'hdf5_2_2.patch'
 )
 sha256sums=(
   '5720f2bba6921027e206ad4f0a06f9bcc348adab36240e8b27710f20ce3e971a'
   '5fde7b80dcfa960407b1ecb2b2a2aa817250948cc32490d8ece48a5e5b4035c1'
+  '2486b50adcf4a6ce08b1a5b38b72469926f5835a2b0322b2d962902918eff8a2'
 )
 install="geant4-full-debug.install"
 
@@ -97,10 +104,19 @@
   [ -d "${srcdir}"/build ] || mkdir "${srcdir}"/build
   cd "${srcdir}"/build
 
+  #check if hdf5-geant4 is installed, if so enable support, otherwise disable
+  _HDF5=OFF
+  if pacman -Q hdf5-geant4 &> /dev/null
+  then
+    _HDF5=ON
+  else
+    _HDF5=OFF
+  fi
+
   cmake \
     -DCMAKE_POLICY_VERSION_MINIMUM=4.0 \
     -DCMAKE_INSTALL_PREFIX=/opt/Geant4/Geant4-v${pkgver} \
-    -DCMAKE_BUILD_TYPE=Release \
+    -DCMAKE_BUILD_TYPE=RelWithDebInfo \
     -DGEANT4_BUILD_MULTITHREADED=ON \
     -DGEANT4_INSTALL_DATA=ON \
     -DGEANT4_INSTALL_DATASETS_TENDL=ON \
@@ -119,6 +135,7 @@
     -DGEANT4_INSTALL_PACKAGE_CACHE=OFF \
     -DGEANT4_USE_PYTHON=ON \
     -DGEANT4_USE_TBB=ON \
+    -DGEANT4_USE_HDF5=${_HDF5} \
     -DGEANT4_BUILD_TLS_MODEL=global-dynamic \
     -DGEANT4_INSTALL_DATADIR=/opt/Geant4/Libraries \
     ../geant4-v${pkgver}

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 15:29:17	MEDIUM	1
2026-08-14 13:29:16	MEDIUM	1
2026-08-14 00:03:41	LOW	2
2026-08-13 15:26:23	MEDIUM	1
2026-06-20 00:18:46	MEDIUM	1
2026-06-19 23:51:18	CLEAN	2
2026-06-19 19:07:35	LOW	2
2026-06-18 18:04:49	CLEAN	2
2026-06-18 16:11:54	MEDIUM	1