geant4-full-debug

LOW
maintainer effeffe 1 votes scanned 2026-10-03 00:23:04.761738
View on AUR
Why flagged

The source is a tarball from a CERN subdomain (geant4-data.web.cern.ch) hosting official Geant4 release data;虽非标准主站 but plausibly project-owned, and the package builds from source, posing no remote code execution or supply-chain risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from a CERN subdomain (geant4-data.web.cern.ch) hosting official Geant4 release data;虽非标准主站 but plausibly project-owned, and the package builds from source, posing no remote code execution or supply-chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:54 "http://geant4-data.web.cern.ch/releases/geant4-v${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Filippo Falezza <filippo dot falezza at outlook dot it>
2
3pkgname='geant4-full-debug'
4pkgver=11.4.2
5pkgrel=2
6pkgdesc="A simulation toolkit for particle physics interactions - includes all the optional libraries"
7depends=(
8 'cmake>=3.16'
9 'xerces-c>=3'
10 'qt6-base'
11 'glu'
12 'openmotif'
13 'soqt'
14 'zlib'
15 'python>=3'
16 'boost'
17 'tbb'
18 'root'
19)
20provides=('geant4')
21conflicts=(
22 'geant4_devel'
23 'geant4'
24 'geant4-debug'
25 'geant4-abladata'
26 'geant4-channelingdata'
27 'geant4-ensdfstatedata'
28 'geant4-incldata'
29 'geant4-ledata'
30 'geant4-levelgammadata'
31 'geant4-neutronhpdata'
32 'geant4-neutronxsdata'
33 'geant4-nudexlibdata'
34 'geant4-particlehpdata'
35 'geant4-particlexsdata'
36 'geant4-piidata'
37 'geant4-radioactivedata'
38 'geant4-realsurfacedata'
39 'geant4-saiddata'
40 'geant4-uurptdata'
41)
42optdepends=(
43 'java-environment'
44 'tcsh'
45 'geant4-lend'
46 'dawn'
47 'hdf5-geant4'
48)
49url="http://geant4.cern.ch/"
50arch=('x86_64')
51license=('custom: http://geant4.cern.ch/license/')
52options=('!emptydirs')
53source=(
54 "http://geant4-data.web.cern.ch/releases/geant4-v${pkgver}.tar.gz"
55 'geant4-full-debug.install'
56 'hdf5_2_2.patch'
57)
58sha256sums=(
59 '5720f2bba6921027e206ad4f0a06f9bcc348adab36240e8b27710f20ce3e971a'
60 '5fde7b80dcfa960407b1ecb2b2a2aa817250948cc32490d8ece48a5e5b4035c1'
61 '2486b50adcf4a6ce08b1a5b38b72469926f5835a2b0322b2d962902918eff8a2'
62)
63install="geant4-full-debug.install"
64
65build() {
66
67 cd "${srcdir}"
68 echo "
69export PATH=\$PATH:/opt/Geant4/Geant4-v${pkgver}/bin
70export G4NEUTRONHPDATA=/opt/Geant4/Libraries/G4NDL4.7.1
71export G4LEDATA=/opt/Geant4/Libraries/G4EMLOW8.8
72export G4LEVELGAMMADATA=/opt/Geant4/Libraries/PhotonEvaporation6.1.2
73export G4RADIOACTIVEDATA=/opt/Geant4/Libraries/RadioactiveDecay6.1.2
74export G4PARTICLEXSDATA=/opt/Geant4/Libraries/G4PARTICLEXS4.2
75export G4PIIDATA=/opt/Geant4/Libraries/G4PII1.3
76export G4REALSURFACEDATA=/opt/Geant4/Libraries/RealSurface2.2
77export G4SAIDXSDATA=/opt/Geant4/Libraries/G4SAIDDATA2.0
78export G4ABLADATA=/opt/Geant4/Libraries/G4ABLA3.3
79export G4INCLDATA=/opt/Geant4/Libraries/G4INCL1.3
80export G4ENSDFSTATEDATA=/opt/Geant4/Libraries/G4ENSDFSTATE3.0
81export G4CHANNELINGDATA=/opt/Geant4/Libraries/G4CHANNELING2.0
82export G4PARTICLEHPDATA=/opt/Geant4/Libraries/G4TENDL1.4
83export G4NUDEXLIBDATA=/opt/Geant4/Libraries/G4NUDEXLIB1.0
84export G4URRPTDATA=/opt/Geant4/Libraries/G4URRPT1.1" > Geant4.sh
85
86 echo "
87setenv PATH \$PATH:/opt/Geant4/Geant4-v${pkgver}/bin
88setenv G4NEUTRONHPDATA /opt/Geant4/Libraries/G4NDL4.7.1
89setenv G4LEDATA /opt/Geant4/Libraries/G4EMLOW8.8
90setenv G4LEVELGAMMADATA /opt/Geant4/Libraries/PhotonEvaporation6.1.2
91setenv G4RADIOACTIVEDATA /opt/Geant4/Libraries/RadioactiveDecay6.1.2
92setenv G4PARTICLEXSDATA /opt/Geant4/Libraries/G4PARTICLEXS4.2
93setenv G4PIIDATA /opt/Geant4/Libraries/G4PII1.3
94setenv G4REALSURFACEDATA /opt/Geant4/Libraries/RealSurface2.2
95setenv G4SAIDXSDATA /opt/Geant4/Libraries/G4SAIDDATA2.0
96setenv G4ABLADATA /opt/Geant4/Libraries/G4ABLA3.3
97setenv G4INCLDATA /opt/Geant4/Libraries/G4INCL1.3
98setenv G4ENSDFSTATEDATA /opt/Geant4/Libraries/G4ENSDFSTATE3.0
99setenv G4CHANNELINGDATA /opt/Geant4/Libraries/G4CHANNELING2.0
100setenv G4PARTICLEHPDATA /opt/Geant4/Libraries/G4TENDL1.4
101setenv G4NUDEXLIBDATA /opt/Geant4/Libraries/G4NUDEXLIB1.0
102setenv G4URRPTDATA /opt/Geant4/Libraries/G4URRPT1.1" > Geant4.csh
103
104 [ -d "${srcdir}"/build ] || mkdir "${srcdir}"/build
105 cd "${srcdir}"/build
106
107 #check if hdf5-geant4 is installed, if so enable support, otherwise disable
108 _HDF5=OFF
109 if pacman -Q hdf5-geant4 &> /dev/null
110 then
111 _HDF5=ON
112 else
113 _HDF5=OFF
114 fi
115
116 cmake \
117 -DCMAKE_POLICY_VERSION_MINIMUM=4.0 \
118 -DCMAKE_INSTALL_PREFIX=/opt/Geant4/Geant4-v${pkgver} \
119 -DCMAKE_BUILD_TYPE=RelWithDebInfo \
120 -DGEANT4_BUILD_MULTITHREADED=ON \
121 -DGEANT4_INSTALL_DATA=ON \
122 -DGEANT4_INSTALL_DATASETS_TENDL=ON \
123 -DGEANT4_INSTALL_DATASETS_URRPT=ON \
124 -DGEANT4_INSTALL_DATASETS_NUDEXLIB=ON \
125 -DGEANT4_USE_G3TOG4=ON \
126 -DGEANT4_USE_GDML=ON \
127 -DGEANT4_USE_FREETYPE=ON \
128 -DGEANT4_USE_QT_QT6=ON \
129 -DGEANT4_USE_INVENTOR_QT=ON \
130 -DGEANT4_USE_OPENGL_X11=ON \
131 -DGEANT4_USE_QT=ON \
132 -DGEANT4_USE_RAYTRACER_X11=ON \
133 -DGEANT4_USE_SYSTEM_ZLIB=ON \
134 -DGEANT4_USE_XM=ON \
135 -DGEANT4_INSTALL_PACKAGE_CACHE=OFF \
136 -DGEANT4_USE_PYTHON=ON \
137 -DGEANT4_USE_TBB=ON \
138 -DGEANT4_USE_HDF5=${_HDF5} \
139 -DGEANT4_BUILD_TLS_MODEL=global-dynamic \
140 -DGEANT4_INSTALL_DATADIR=/opt/Geant4/Libraries \
141 ../geant4-v${pkgver}
142
143
144 #set GEANT4_BUILD_TLS_MODEL=global-dynamic and GEANT4_USE_PYTHON=ON for compatibility with g4python
145 make #VERBOSE=1
146}
147
148package() {
149 cd "${srcdir}"
150 install -D -m 755 Geant4.sh "${pkgdir}"/etc/profile.d/Geant4.sh
151 install -D -m 755 Geant4.csh "${pkgdir}"/etc/profile.d/Geant4.csh
152
153 cd "${srcdir}"/build
154 make DESTDIR="${pkgdir}" install
155
156 mkdir -p "${pkgdir}"/usr/include
157 ln -s /opt/Geant4/Geant4-v${pkgver}/lib ${pkgdir}/opt/Geant4/Geant4-v${pkgver}/lib64
158 ln -s /opt/Geant4/Geant4-v${pkgver}/include/Geant4 "${pkgdir}"/usr/include/Geant4
159 ln -s /opt/Geant4/Geant4-v${pkgver}/include/Geant4/CLHEP "${pkgdir}"/usr/include/CLHEP
160 ln -s /opt/Geant4/Geant4-v${pkgver}/include/Geant4/PTL "${pkgdir}"/usr/include/PTL
161}
162

Scan history

Scanned at (UTC)SeverityRules
2026-10-03 00:23:04 Low 2
2026-10-02 00:00:32 Low 2
2026-10-01 00:02:06 Low 2
2026-09-30 00:20:07 Low 2
2026-09-29 00:07:46 Low 2
2026-09-28 00:28:32 Low 2
2026-09-27 00:07:07 Low 2
2026-09-26 00:12:15 Low 2
2026-09-25 00:03:36 Low 2
2026-09-24 00:24:14 Low 2
2026-09-23 00:28:13 Low 2
2026-09-22 00:15:14 Low 2
2026-09-21 00:26:32 Low 2
2026-09-20 00:25:31 Low 2
2026-09-19 00:25:36 Low 2
2026-09-18 00:17:11 Low 2
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion