latin-words

maintainer Vitrum-cnkj34kr8 · 20 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a static data archive from a reputable web archive (archive.org) of an official academic project's content; it is not executable code, and the worst case of a swapped source is data tampering, not code execution.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a static data archive from a reputable web archive (archive.org) of an official academic project's content; it is not executable code, and the worst case of a swapped source is data tampering, not code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source=("$pkgname-$pkgver.zip::http://web.archive.org/web/20230328161642/http://archives.nd.edu/whitaker/old/wordsall.zip")

PKGBUILD

1 offending line(s) highlighted

      1# Former maintainers:
    
      2# * Orivej Desh <smpuj@bk.ru>
    
      3# * Stefan Husmann <stefan-husmann@t-online.de>
    
      4
    
      5# Maintainer: Vitrum <wqdxosty1yhj@bk.ru>
    
      6
    
      7pkgname=latin-words
    
      8pkgver=1.97FC
    
      9pkgrel=7
    
      10pkgdesc="William Whitaker's Latin-English-Latin intelligent dictionary and Latin text analyser."
    
      11arch=("i686" "x86_64")
    
      12url="http://archives.nd.edu/whitaker/words.htm"
    
      13license=('custom')
    
      14depends=('bash')
    
      15makedepends=('gcc-ada')
    
      16source=("$pkgname-$pkgver.zip::http://web.archive.org/web/20230328161642/http://archives.nd.edu/whitaker/old/wordsall.zip")
    
      17sha256sums=('592134d7602879e0937b6f977a6f63aa1d14b813edaf6de04a1d8596a9a2c18e')
    
      18
    
      19# Alternative source:
    
      20#source=("$pkgname-$pkgver::git://github.com/dsanson/Words.git")
    
      21#sha256sums=('SKIP')
    
      22
    
      23prepare() {
    
      24	cd "$srcdir"
    
      25	sed -i 's/PAUSE_IN_SCREEN_OUTPUT      => TRUE/PAUSE_IN_SCREEN_OUTPUT      => FALSE/g' developer_parameters.adb
    
      26}
    
      27
    
      28build() {
    
      29	cd "$srcdir"
    
      30	gnatmake -O3 words
    
      31	gnatmake makedict && echo "g" | ./makedict
    
      32	gnatmake makestem && echo "g" | ./makestem
    
      33	gnatmake makeefil && ./makeefil
    
      34	gnatmake makeinfl && ./makeinfl
    
      35}
    
      36
    
      37package() {
    
      38	cd "$srcdir"
    
      39
    
      40	# main application
    
      41	install -D words "$pkgdir/usr/share/words-$pkgver/words"
    
      42	install -m644 ADDONS.LAT DICTFILE.GEN EWDSFILE.GEN INDXFILE.GEN \
    
      43	              INFLECTS.SEC STEMFILE.GEN UNIQUES.LAT \
    
      44	              "$pkgdir/usr/share/words-$pkgver/"
    
      45
    
      46	# documentation
    
      47	install -Dm644 wordsdoc.htm "$pkgdir/usr/share/doc/words-$pkgver/wordsdoc.htm"
    
      48
    
      49	# starting script
    
      50	cat > words.sh <<-EOF
    
      51		#!/bin/bash
    
      52		pushd /usr/share/words-$pkgver >/dev/null
    
      53		./words "\$@"
    
      54		popd >/dev/null
    
      55EOF
    
      56	install -Dm755 words.sh "$pkgdir/usr/bin/words"
    
      57
    
      58	# license
    
      59	cat > LICENSE <<-EOF
    
      60		Quoting from wordsdoc.htm:
    
      61
    
      62		This is a free program, which means it is proper to copy it and pass it on to
    
      63		your friends. Consider it a developmental item for which there is no charge.
    
      64		However, just for form, it is Copyrighted (c). Permission is hereby freely
    
      65		given for any and all use of program and data. You can sell it as your own,
    
      66		but at least tell me.
    
      67
    
      68		and later in the same document:
    
      69
    
      70		Licence
    
      71
    
      72		All parts of the WORDS system, source code and data files, are made freely
    
      73		available to anyone who wishes to use them, for whatever purpose.
    
      74EOF
    
      75	install -Dm644 LICENSE "$pkgdir/usr/share/licenses/latin-words/LICENSE"
    
      76}
    
      77

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2