grace-openmotif
LOW
maintainer ConnorBehan
7 votes
scanned 2026-10-27 00:23:28.674093
Why flagged
The source is a tarball from the project's official domain (plasma-gate.weizmann.ac.il), which hosts the upstream Grace plotting tool; building from official project sources is normal AUR packaging, even if the host is not on a whitelist.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official domain (plasma-gate.weizmann.ac.il), which hosts the upstream Grace plotting tool; building from official project sources is normal AUR packaging, even if the host is not on a whitelist.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:25
source=(http://plasma-gate.weizmann.ac.il/pub/grace/src/grace5/grace-$pkgver.tar.gz \
PKGBUILD
1 offending line(s) highlighted
1
# Contributor: Bernhard Walle <bernhard.walle@gmx.de>
2
# Contributor: Sergej Pupykin <sergej@aur.archlinux.org>
3
# Contributor: damir <damir@archlinux.org>
4
# Contributor: Damir Perisa <damir.perisa@bluewin.ch>
5
# Contributor: Connor Behan <connor.behan@gmail.com>
6
# and patches from http://sources.gentoo.org/viewcvs.py/gentoo-x86/sci-visualization/grace/
7
# AUR Category: science
8
9
pkgname=grace-openmotif
10
pkgver=5.1.25
11
pkgrel=5
12
pkgdesc="2D plotting tool"
13
arch=(i686 x86_64)
14
url="http://plasma-gate.weizmann.ac.il/Grace/"
15
depends=('libjpeg-turbo' 'libpng' 'openmotif' 't1lib' 'zlib' 'netcdf' 'xbae' 'pdflib-lite' 'xdg-utils')
16
replaces=('grace')
17
conflicts=('grace')
18
provides=('grace')
19
license=('GPL')
20
# patches
21
# mkstemp.patch : move tmpnam to mkstemp (adapted from debian)
22
# netcdf_fftw2.patch : fix configure instead of aclocal.m4
23
# fortran.patch : fix for missing defines when fortran is disabled
24
# dlmodule.patch pdfdrv.patch : fix a leak and pdf driver (from freebsd)
25
source=(http://plasma-gate.weizmann.ac.il/pub/grace/src/grace5/grace-$pkgver.tar.gz \
26
mkstemp.patch \
27
netcdf_fftw2.patch \
28
fortran.patch \
29
dlmodule.patch \
30
pdfdrv.patch \
31
longer_formulas.patch \
32
default_comment.patch \
33
meaningful_timestamp.patch \
34
handle_nans.patch \
35
grace.png \
36
grace-mimetypes \
37
grace.desktop)
38
39
40
build() {
41
cd "$srcdir"/grace-$pkgver
42
grep -rl "'H', TRUE" src | xargs sed -i -e "s/'H', TRUE/'H', FALSE/g"
43
44
# patch -Np1 < ../netcdf_fftw2.patch
45
patch -Np1 < ../mkstemp.patch
46
patch -Np1 < ../fortran.patch
47
patch -Np1 < ../dlmodule.patch
48
patch -Np1 < ../pdfdrv.patch
49
patch -Np1 < ../longer_formulas.patch
50
patch -Np1 < ../default_comment.patch
51
patch -Np1 < ../meaningful_timestamp.patch
52
patch -Np1 < ../handle_nans.patch
53
54
CFLAGS="-Wno-format-security -Wno-implicit-int -Wno-old-style-definition -Wno-implicit-function-declaration -Wno-int-conversion -D_XOPEN_SOURCE -std=c17" ./configure --prefix=/usr --exec-prefix=/usr \
55
--enable-grace-home=/usr/share/grace \
56
--disable-xmhtml \
57
--without-bundled-xbae \
58
--without-bundled-t1lib \
59
--with-fftw \
60
--with-f77=/usr/bin/gfortran \
61
--with-helpviewer="xdg-open %s" \
62
--with-editor="xdg-open %s" \
63
--with-printcmd="lpr"
64
# --with-fftw-library=/usr/lib/libdfftw.a
65
66
make
67
}
68
69
package() {
70
cd "$srcdir"/grace-$pkgver
71
make DESTDIR="$pkgdir" install
72
73
cd "$pkgdir"/usr/share/grace && mv bin ../../
74
75
# Desktop integration
76
install -D -m644 "$srcdir/grace.png" \
77
"$pkgdir/usr/share/pixmaps/grace.png"
78
79
install -D -m644 "$srcdir/grace.desktop" \
80
"$pkgdir/usr/share/applications/grace.desktop"
81
82
install -D -m644 "$srcdir/grace-mimetypes" "$pkgdir/usr/share/mime/packages/grace.xml"
83
}
84
85
md5sums=('c0482b1f18b113192946a96f5ff35a4d' 'cc9183f093cfb4da3327e725ba574f4a' '28735e961bd0adf61810cda1932de034' '03702b4503676fb14dbb9afe003f0b8c' 'ca0dae0fde7ec34acbd73a2fae04e656' '7715ca2b98be6c9bc4e28ab30c9ee069' '35ed21fed6db617c053ca15deccaca8c' 'ecb013fe77b5aa4d6d8eeb009bff7213' '9ec0b3945719528bb7bcd948d5078080' 'abc9f5ebc490e7049c30208dc5fb9835' '0ccd7a766cb0c84934b60c264d1a1e41' '3beba5237f56a2ff28b6cd878865b25c' '3b84533b7d54b4705232f4dfa0923c58')
86
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |
| 2026-10-12 00:18:51 | Low | 2 |
| 2026-10-11 00:26:05 | Low | 2 |
| 2026-10-10 00:11:52 | Low | 2 |
| 2026-10-09 00:05:33 | Low | 2 |
| 2026-10-08 00:28:03 | Low | 2 |