instant-meshes-git
maintainer eclairevoyant
· 5 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The non-standard host hosts a data file (datasets) that is not executable; worst case is data tampering, not code execution.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The non-standard host hosts a data file (datasets) that is not executable; worst case is data tampering, not code execution.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:25
"datasets::https://instant-meshes.s3.eu-central-1.amazonaws.com/instant-meshes-datasets.zip"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Henry0w hwelles@protonmail.com
2
3
pkgname=instant-meshes-git
4
_pkgname=instant-meshes
5
pkgver=r46.7b31608
6
pkgrel=1
7
epoch=
8
pkgdesc="Interactive field-aligned mesh generator"
9
arch=('x86_64')
10
url="https://github.com/wjakob/instant-meshes"
11
license=('BSD')
12
groups=()
13
depends=('zenity' 'hicolor-icon-theme')
14
makedepends=('cmake')
15
checkdepends=()
16
optdepends=()
17
provides=()
18
conflicts=()
19
replaces=()
20
backup=()
21
options=()
22
install=
23
changelog=
24
source=("$_pkgname::git+https://github.com/wjakob/instant-meshes.git"
25
"datasets::https://instant-meshes.s3.eu-central-1.amazonaws.com/instant-meshes-datasets.zip"
26
"instant-meshes.desktop"
27
)
28
noextract=()
29
md5sums=('SKIP'
30
'a282b3d0849c213fc342fe6c181cb6d6'
31
'3f9bd04b74972df7b4105082bef7a5df')
32
validpgpkeys=()
33
34
prepare() {
35
cd "$_pkgname"
36
37
git submodule update --init --recursive
38
}
39
40
build() {
41
cd "$_pkgname"
42
export CFLAGS+=" ${CPPFLAGS}"
43
export CXXFLAGS+=" ${CPPFLAGS}"
44
cmake \
45
-DCMAKE_BUILD_TYPE="None" \
46
-DCMAKE_INSTALL_LIBDIR:PATH='lib' \
47
-DCMAKE_INSTALL_PREFIX:PATH='/usr' \
48
-Wno-dev \
49
-Wint-in-bool-context \
50
.
51
make
52
53
54
}
55
56
#check() {
57
58
#}
59
60
package(){
61
cd "$_pkgname"
62
install -Dm777 'Instant Meshes' "$pkgdir/usr/lib/$_pkgname/$_pkgname"
63
mkdir "$pkgdir/usr/bin"
64
ln -sfr "$pkgdir/usr/lib/$_pkgname/$_pkgname" "$pkgdir/usr/bin/instant-meshes"
65
chmod +rwx "$pkgdir/usr/bin/$_pkgname"
66
mkdir "$pkgdir/usr/lib/$_pkgname/datasets"
67
for i in "$srcdir/datasets/"*; do
68
install -Dm644 $i "$pkgdir/usr/lib/$_pkgname/datasets/"
69
done
70
71
install -Dm644 "resources/icon.png" "$pkgdir/usr/share/icons/hicolor/256x256/apps/$_pkgname.png"
72
install -Dm644 "$srcdir/$_pkgname.desktop" "$pkgdir/usr/share/applications/$_pkgname.desktop"
73
install -Dm644 "LICENSE.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
74
}
75
76
pkgver() {
77
cd "$_pkgname"
78
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
79
}
80
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |