l1_logreg

maintainer ido · 2 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from the project's official academic website, which is plausibly the project's own; building from such a source is normal for AUR packages, even if the host is not on a standard whitelist.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official academic website, which is plausibly the project's own; building from such a source is normal for AUR packages, even if the host is not on a standard whitelist.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:27 source=(http://www.stanford.edu/~boyd/l1_logreg/download/l1_logreg-0.8.2.tar.gz)

PKGBUILD

1 offending line(s) highlighted

      1# $Id$
    
      2# Maintainer: Ido Rosen <ido@kernel.org>
    
      3#
    
      4# NOTE: To request changes to this package, please submit a pull request
    
      5#       to the GitHub repository at https://github.com/ido/packages-archlinux
    
      6#       Otherwise, open a GitHub issue.  Thank you! -Ido
    
      7# 
    
      8# From the l1_logreg website, http://www.stanford.edu/~boyd/l1_logreg/ :
    
      9#   ``l1_logreg is an implementation of the interior-point method for
    
      10#   l1-regularized logistic regression described in the paper, An Interior-Point
    
      11#   Method for Large-Scale l1-Regularized Logistic Regression.'' 
    
      12#     (Koh, Kim, Boyd. JMLR 8:1519-1555. July 2007.) (9/24/2013)
    
      13
    
      14
    
      15pkgbase='l1_logreg'
    
      16pkgname='l1_logreg'
    
      17true && pkgname=('l1_logreg' 'l1_logreg-docs')
    
      18pkgdesc="An implementation of the interprior-point method for L1-regularized logistic regression."
    
      19pkgver=0.8.2
    
      20pkgrel=1
    
      21arch=('i686' 'x86_64')
    
      22url='http://www.stanford.edu/~boyd/l1_logreg/'
    
      23license=('GPL2')
    
      24depends=('blas' 'lapack')
    
      25makedepends=('blas' 'lapack' 'doxygen' 'texlive-core' 'texlive-bin')
    
      26options=('!libtool')
    
      27source=(http://www.stanford.edu/~boyd/l1_logreg/download/l1_logreg-0.8.2.tar.gz)
    
      28sha512sums=('3a4097035e6acad2ac6cc895fe18821ab7ca96ddf8cf5fc244eb09c48cad848db492ac3189678c9b6c9379fae46e72c2b91ced2a4c803b8a51fa9aa25365d41d')
    
      29
    
      30build() {
    
      31  cd "${srcdir}/${pkgbase}-${pkgver}"
    
      32
    
      33  ./configure  
    
      34  make
    
      35  make doc
    
      36}
    
      37
    
      38check() {
    
      39  cd "${srcdir}/${pkgbase}-${pkgver}"
    
      40
    
      41  make check
    
      42}
    
      43
    
      44package_l1_logreg() {
    
      45  cd "${srcdir}/${pkgbase}-${pkgver}"
    
      46
    
      47  # l1_logreg install target as of 0.8.2 doesn't install docs, etc.
    
      48  # So we'll just do its work for it! 
    
      49 
    
      50  # Install binaries:
    
      51  install -dm755                            "${pkgdir}/usr/bin"
    
      52  install -m755 src_c/l1_logreg_train       "${pkgdir}/usr/bin"
    
      53  install -m755 src_c/l1_logreg_classify    "${pkgdir}/usr/bin"
    
      54  install -m755 src_c/l1_logreg_regpath     "${pkgdir}/usr/bin"
    
      55
    
      56  # Install documentation:
    
      57  install -dm755                  "${pkgdir}/usr/share/doc/l1_logreg"
    
      58  install -m644 COPYING           "${pkgdir}/usr/share/doc/l1_logreg"
    
      59  install -m644 AUTHORS           "${pkgdir}/usr/share/doc/l1_logreg"
    
      60  install -m644 README            "${pkgdir}/usr/share/doc/l1_logreg"
    
      61  install -m644 NEWS              "${pkgdir}/usr/share/doc/l1_logreg"
    
      62
    
      63  # Install Matlab files:
    
      64  install -dm755                  "${pkgdir}/usr/share/doc/l1_logreg/matlab"
    
      65  install -m644 util_m/*.m        "${pkgdir}/usr/share/doc/l1_logreg/matlab"
    
      66
    
      67  # Install LICENSE file:
    
      68  install -dm755                  "${pkgdir}/usr/share/licenses/l1_logreg"
    
      69  ln -s "/usr/share/doc/l1_logreg/COPYING" \
    
      70                                  "${pkgdir}/usr/share/licenses/l1_logreg/LICENSE"
    
      71}
    
      72
    
      73package_l1_logreg-docs() {
    
      74  depends=('l1_logreg')
    
      75
    
      76  cd "${srcdir}/${pkgbase}-${pkgver}"
    
      77
    
      78  # Install documentation:
    
      79  install -dm755                  "${pkgdir}/usr/share/doc/l1_logreg/html"
    
      80  cp -r doc/html/.                "${pkgdir}/usr/share/doc/l1_logreg/html/." 
    
      81
    
      82}
    
      83

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2