instant-meshes-git
LOW
maintainer eclairevoyant
5 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The non-standard host hosts a data file (datasets) that is not executable; worst case is data tampering, not code execution.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The non-standard host hosts a data file (datasets) that is not executable; worst case is data tampering, not code execution.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:25
"datasets::https://instant-meshes.s3.eu-central-1.amazonaws.com/instant-meshes-datasets.zip"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Henry0w hwelles@protonmail.com
2
3
pkgname=instant-meshes-git
4
_pkgname=instant-meshes
5
pkgver=r46.7b31608
6
pkgrel=1
7
epoch=
8
pkgdesc="Interactive field-aligned mesh generator"
9
arch=('x86_64')
10
url="https://github.com/wjakob/instant-meshes"
11
license=('BSD')
12
groups=()
13
depends=('zenity' 'hicolor-icon-theme')
14
makedepends=('cmake')
15
checkdepends=()
16
optdepends=()
17
provides=()
18
conflicts=()
19
replaces=()
20
backup=()
21
options=()
22
install=
23
changelog=
24
source=("$_pkgname::git+https://github.com/wjakob/instant-meshes.git"
25
"datasets::https://instant-meshes.s3.eu-central-1.amazonaws.com/instant-meshes-datasets.zip"
26
"instant-meshes.desktop"
27
)
28
noextract=()
29
md5sums=('SKIP'
30
'a282b3d0849c213fc342fe6c181cb6d6'
31
'3f9bd04b74972df7b4105082bef7a5df')
32
validpgpkeys=()
33
34
prepare() {
35
cd "$_pkgname"
36
37
git submodule update --init --recursive
38
}
39
40
build() {
41
cd "$_pkgname"
42
export CFLAGS+=" ${CPPFLAGS}"
43
export CXXFLAGS+=" ${CPPFLAGS}"
44
cmake \
45
-DCMAKE_BUILD_TYPE="None" \
46
-DCMAKE_INSTALL_LIBDIR:PATH='lib' \
47
-DCMAKE_INSTALL_PREFIX:PATH='/usr' \
48
-Wno-dev \
49
-Wint-in-bool-context \
50
.
51
make
52
53
54
}
55
56
#check() {
57
58
#}
59
60
package(){
61
cd "$_pkgname"
62
install -Dm777 'Instant Meshes' "$pkgdir/usr/lib/$_pkgname/$_pkgname"
63
mkdir "$pkgdir/usr/bin"
64
ln -sfr "$pkgdir/usr/lib/$_pkgname/$_pkgname" "$pkgdir/usr/bin/instant-meshes"
65
chmod +rwx "$pkgdir/usr/bin/$_pkgname"
66
mkdir "$pkgdir/usr/lib/$_pkgname/datasets"
67
for i in "$srcdir/datasets/"*; do
68
install -Dm644 $i "$pkgdir/usr/lib/$_pkgname/datasets/"
69
done
70
71
install -Dm644 "resources/icon.png" "$pkgdir/usr/share/icons/hicolor/256x256/apps/$_pkgname.png"
72
install -Dm644 "$srcdir/$_pkgname.desktop" "$pkgdir/usr/share/applications/$_pkgname.desktop"
73
install -Dm644 "LICENSE.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
74
}
75
76
pkgver() {
77
cd "$_pkgname"
78
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
79
}
80
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |