instant-meshes-git
LOW
maintainer eclairevoyant
5 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The non-standard host hosts a data file (datasets) that is not executable; worst case is data tampering, not code execution.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The non-standard host hosts a data file (datasets) that is not executable; worst case is data tampering, not code execution.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:25
"datasets::https://instant-meshes.s3.eu-central-1.amazonaws.com/instant-meshes-datasets.zip"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Henry0w hwelles@protonmail.com
2
3
pkgname=instant-meshes-git
4
_pkgname=instant-meshes
5
pkgver=r46.7b31608
6
pkgrel=1
7
epoch=
8
pkgdesc="Interactive field-aligned mesh generator"
9
arch=('x86_64')
10
url="https://github.com/wjakob/instant-meshes"
11
license=('BSD')
12
groups=()
13
depends=('zenity' 'hicolor-icon-theme')
14
makedepends=('cmake')
15
checkdepends=()
16
optdepends=()
17
provides=()
18
conflicts=()
19
replaces=()
20
backup=()
21
options=()
22
install=
23
changelog=
24
source=("$_pkgname::git+https://github.com/wjakob/instant-meshes.git"
25
"datasets::https://instant-meshes.s3.eu-central-1.amazonaws.com/instant-meshes-datasets.zip"
26
"instant-meshes.desktop"
27
)
28
noextract=()
29
md5sums=('SKIP'
30
'a282b3d0849c213fc342fe6c181cb6d6'
31
'3f9bd04b74972df7b4105082bef7a5df')
32
validpgpkeys=()
33
34
prepare() {
35
cd "$_pkgname"
36
37
git submodule update --init --recursive
38
}
39
40
build() {
41
cd "$_pkgname"
42
export CFLAGS+=" ${CPPFLAGS}"
43
export CXXFLAGS+=" ${CPPFLAGS}"
44
cmake \
45
-DCMAKE_BUILD_TYPE="None" \
46
-DCMAKE_INSTALL_LIBDIR:PATH='lib' \
47
-DCMAKE_INSTALL_PREFIX:PATH='/usr' \
48
-Wno-dev \
49
-Wint-in-bool-context \
50
.
51
make
52
53
54
}
55
56
#check() {
57
58
#}
59
60
package(){
61
cd "$_pkgname"
62
install -Dm777 'Instant Meshes' "$pkgdir/usr/lib/$_pkgname/$_pkgname"
63
mkdir "$pkgdir/usr/bin"
64
ln -sfr "$pkgdir/usr/lib/$_pkgname/$_pkgname" "$pkgdir/usr/bin/instant-meshes"
65
chmod +rwx "$pkgdir/usr/bin/$_pkgname"
66
mkdir "$pkgdir/usr/lib/$_pkgname/datasets"
67
for i in "$srcdir/datasets/"*; do
68
install -Dm644 $i "$pkgdir/usr/lib/$_pkgname/datasets/"
69
done
70
71
install -Dm644 "resources/icon.png" "$pkgdir/usr/share/icons/hicolor/256x256/apps/$_pkgname.png"
72
install -Dm644 "$srcdir/$_pkgname.desktop" "$pkgdir/usr/share/applications/$_pkgname.desktop"
73
install -Dm644 "LICENSE.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
74
}
75
76
pkgver() {
77
cd "$_pkgname"
78
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
79
}
80
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |