heasoft

MEDIUM

maintainer petronny 3 votes scanned 2026-09-11 13:22:32.935812

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:19 source=("https://heasarc.gsfc.nasa.gov/FTP/software/lheasoft/lheasoft${pkgver}/heasoft-${pkgver}src${_mod}.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer:  Yigit Dallilar <yigit.dallilar@gmail.com>
    
      2
    
      3pkgname=heasoft
    
      4pkgver=6.37.1
    
      5pkgrel=1
    
      6# _mod should be '', '_no_xspec_modeldata' or '_plus_older_xspec_modeldata'
    
      7_mod=''
    
      8pkgdesc='NASA high energy astrophysics library'
    
      9depends=('inetutils' 'libxpm' 'libidn' 'ncurses' 'readline')
    
      10makedepends=('gcc14-fortran' 'glibc' 'perl' 'python-astropy' 'python-matplotlib' 'python-pip' 'python-scipy' 'python-setuptools')
    
      11optdepends=(
    
      12  "python-astropy: python binding"
    
      13  "python-numpy: python binding"
    
      14)
    
      15url="https://heasarc.gsfc.nasa.gov/docs/software/lheasoft/"
    
      16arch=('x86_64')
    
      17license=('NASA' 'GPL')
    
      18options=('!lto')
    
      19source=("https://heasarc.gsfc.nasa.gov/FTP/software/lheasoft/lheasoft${pkgver}/heasoft-${pkgver}src${_mod}.tar.gz")
    
      20
    
      21# You could use below to get offical md5
    
      22# curl -s ${source}.md5  | awk '{print "md5sums=(", $1, ")"}'
    
      23md5sums=('b012d7b5ee7604ed712eca8d5d146f47')
    
      24sha256sums=('e9877b4933743ad2f53328b4034e25694431bbcb6016f50b0328bbfa84a25662')
    
      25
    
      26install="$pkgname.install"
    
      27
    
      28build() {
    
      29  cd "heasoft-$pkgver/BUILD_DIR"
    
      30
    
      31  LDFLAGS='-lm' CC='gcc-14' CXX='g++-14' FC='gfortran-14' \
    
      32  CFLAGS="$CFLAGS -Wno-error=format-security" \
    
      33  ./configure --prefix="/opt/heasoft" --build="$CHOST"
    
      34
    
      35  # parallel builds may fail
    
      36  make -j1
    
      37}
    
      38
    
      39package(){
    
      40  local glibcver HEADAS hdhost components component
    
      41
    
      42  glibcver=$(ldd --version | sed -n 's/ldd (GNU libc) //p')
    
      43  hdhost="${CHOST}-libc${glibcver}"
    
      44  HEADAS="/opt/heasoft/${hdhost}"
    
      45  components=$(sed -n 's/^HD_SELECTED[[:space:]]*=[[:space:]]*//p' "heasoft-$pkgver/BUILD_DIR/Makefile")
    
      46
    
      47  set -a
    
      48  . "heasoft-$pkgver/heacore/BUILD_DIR/hmakerc"
    
      49
    
      50  cd "heasoft-$pkgver/BUILD_DIR"
    
      51
    
      52  for component in $components; do
    
      53    HD_PREFIX="/opt/heasoft/${component}"
    
      54    HD_EXEC_PFX="/opt/heasoft/${component}/${hdhost}"
    
      55    HD_TOP_PFX="/opt/heasoft"
    
      56    HD_TOP_EXEC_PFX="${HEADAS}"
    
      57  done
    
      58  set +a
    
      59
    
      60  make -j1 DESTDIR="$pkgdir" HD_EXEC_PFX="$pkgdir/opt/heasoft/heacore/${hdhost}" install
    
      61
    
      62  install -d "$pkgdir/etc/profile.d"
    
      63  cat > "$pkgdir/etc/profile.d/heasoft.sh" <<EOF
    
      64export HEADAS="${HEADAS}"
    
      65alias heainit='. "${HEADAS}/headas-init.sh"'
    
      66EOF
    
      67}
    
      68

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-09-11 13:22
@@ -1,8 +1,8 @@
 # Maintainer:  Yigit Dallilar <yigit.dallilar@gmail.com>
 
 pkgname=heasoft
-pkgver=6.36
-pkgrel=2
+pkgver=6.37.1
+pkgrel=1
 # _mod should be '', '_no_xspec_modeldata' or '_plus_older_xspec_modeldata'
 _mod=''
 pkgdesc='NASA high energy astrophysics library'
@@ -15,12 +15,13 @@
 url="https://heasarc.gsfc.nasa.gov/docs/software/lheasoft/"
 arch=('x86_64')
 license=('NASA' 'GPL')
+options=('!lto')
 source=("https://heasarc.gsfc.nasa.gov/FTP/software/lheasoft/lheasoft${pkgver}/heasoft-${pkgver}src${_mod}.tar.gz")
 
 # You could use below to get offical md5
 # curl -s ${source}.md5  | awk '{print "md5sums=(", $1, ")"}'
-md5sums=('e7a6c03cc6877f7f82cf06746d0356de')
-sha256sums=('f509231f1c8fa8dc9aaac3d90d146ce68806513d55fe0f0e1d16508e9954be8b')
+md5sums=('b012d7b5ee7604ed712eca8d5d146f47')
+sha256sums=('e9877b4933743ad2f53328b4034e25694431bbcb6016f50b0328bbfa84a25662')
 
 install="$pkgname.install"
 
@@ -36,14 +37,27 @@
 }
 
 package(){
-  local glibcver HEADAS
+  local glibcver HEADAS hdhost components component
+
+  glibcver=$(ldd --version | sed -n 's/ldd (GNU libc) //p')
+  hdhost="${CHOST}-libc${glibcver}"
+  HEADAS="/opt/heasoft/${hdhost}"
+  components=$(sed -n 's/^HD_SELECTED[[:space:]]*=[[:space:]]*//p' "heasoft-$pkgver/BUILD_DIR/Makefile")
+
+  set -a
+  . "heasoft-$pkgver/heacore/BUILD_DIR/hmakerc"
 
   cd "heasoft-$pkgver/BUILD_DIR"
 
-  make -j1 DESTDIR="$pkgdir" install
+  for component in $components; do
+    HD_PREFIX="/opt/heasoft/${component}"
+    HD_EXEC_PFX="/opt/heasoft/${component}/${hdhost}"
+    HD_TOP_PFX="/opt/heasoft"
+    HD_TOP_EXEC_PFX="${HEADAS}"
+  done
+  set +a
 
-  glibcver=$(ldd --version | sed -n 's/ldd (GNU libc) //p')
-  HEADAS="/opt/heasoft/${CHOST}-libc${glibcver}"
+  make -j1 DESTDIR="$pkgdir" HD_EXEC_PFX="$pkgdir/opt/heasoft/heacore/${hdhost}" install
 
   install -d "$pkgdir/etc/profile.d"
   cat > "$pkgdir/etc/profile.d/heasoft.sh" <<EOF

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-11 13:22:32	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1