gildas-last

LOW

maintainer edombek 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

Sources from the project's own official git repository at git.iram.fr; SKIP checksum is acceptable for a git source; the build runs the project's own bundled scripts (admin/gildas-env.sh) rather than fetching unreviewed remote code, so no real supply-chain risk beyond normal git-based AUR packaging.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 80%): Sources from the project's own official git repository at git.iram.fr; SKIP checksum is acceptable for a git source; the build runs the project's own bundled scripts (admin/gildas-env.sh) rather than fetching unreviewed remote code, so no real supply-chain risk beyond normal git-based AUR packaging.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 source=("git+https://git.iram.fr/gildas/gildas.git")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Evgeniy Dombek <edombek@yandex.ru>
    
      2
    
      3pname=gildas
    
      4pkgname=gildas-last
    
      5pkgver=2026.10.gad05e75e57
    
      6pkgrel=2
    
      7pkgdesc='GILDAS build last tag from git'
    
      8arch=('x86_64')
    
      9url="https://www.iram.fr/IRAMFR/GILDAS/"
    
      10license=('custom')
    
      11makedepends=(python python-setuptools python-numpy which)
    
      12depends=(gcc-fortran cfitsio gtk3)
    
      13optdepends=(python-numpy)
    
      14provides=(gildas)
    
      15conflicts=(gildas)
    
      16
    
      17source=("git+https://git.iram.fr/gildas/gildas.git")
    
      18sha512sums=(SKIP)
    
      19options=('!strip')
    
      20
    
      21prepare() {
    
      22  cd "${srcdir}/$pname"
    
      23  git fetch --tags
    
      24  git rev-list --tags --max-count=1
    
      25  latestTag=$(git describe --tags "$(git rev-list --tags --max-count=1)")
    
      26  git checkout $latestTag
    
      27}
    
      28
    
      29pkgver() {
    
      30  cd "${srcdir}/$pname"
    
      31  git log -1 --format="%cd.g%h" --date=format:'%Y.%m'
    
      32}
    
      33
    
      34build() {
    
      35    cd ${srcdir}/$pname
    
      36    source admin/gildas-env.sh # -n python
    
      37    make
    
      38}
    
      39
    
      40package() {
    
      41    cd ${srcdir}/$pname
    
      42    source admin/gildas-env.sh # -n python
    
      43    make install
    
      44    
    
      45    target="opt/$pname"
    
      46    cd "$pkgdir"
    
      47    mkdir opt
    
      48    cp -r ${srcdir}/gildas-exe $target
    
      49    
    
      50    #Ading /etc/profile
    
      51    mkdir -p etc/profile.d
    
      52    echo export GAG_ROOT_DIR=/opt/$pname >> etc/profile.d/$pname.sh
    
      53    echo export GAG_EXEC_SYSTEM=$GAG_EXEC_SYSTEM >> etc/profile.d/$pname.sh
    
      54    echo source /opt/$pname/etc/bash_profile >> etc/profile.d/$pname.sh
    
      55    chmod +x etc/profile.d/$pname.sh
    
      56
    
      57
    
      58    echo setenv GAG_ROOT_DIR /opt/$pname >> etc/profile.d/$pname.csh
    
      59    echo setenv GAG_EXEC_SYSTEM $GAG_EXEC_SYSTEM >> etc/profile.d/$pname.csh
    
      60    echo source /opt/$pname/etc/login >> etc/profile.d/$pname.csh
    
      61    chmod +x etc/profile.d/$pname.csh
    
      62}
    
      63

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	3
2026-10-16 00:12:47	Low	3
2026-10-15 00:28:05	Low	3
2026-10-14 00:06:47	Low	3
2026-10-13 00:23:45	Low	3
2026-10-12 13:15:42	Low	3
2026-10-12 13:13:52	Medium	2