lib32-gpm

LOW

maintainer severach 2 votes scanned 2026-10-07 00:21:34.957174

View on AUR

Why flagged

The package builds a 32-bit library from a legitimate Git repository and applies a publicly documented patch; the non-whitelisted host is GitHub, which is plausibly the project's official source, and no unverifiable or executable payloads are involved.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds a 32-bit library from a legitimate Git repository and applies a publicly documented patch; the non-whitelisted host is GitHub, which is plausibly the project's official source, and no unverifiable or executable payloads are involved.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:20 'https://www.linuxfromscratch.org/patches/blfs/13.0/gpm-1.20.7-gcc15_fixes-1.patch'

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer:  Chris Severance aur.severach aATt spamgourmet dott com
    
      2# Contributor: Felix Yan <felixonmars@archlinux.org>
    
      3# Contributor: Eric Bélanger <eric@archlinux.org>
    
      4
    
      5_pkgname='gpm'
    
      6pkgname="lib32-${_pkgname}"
    
      7pkgver='1.20.7.r38.ge82d1a6'
    
      8pkgrel='2'
    
      9_commit='e82d1a653ca94aa4ed12441424da6ce780b1e530'
    
      10pkgdesc='A mouse server for the console and xterm (32 bit)'
    
      11arch=('x86_64')
    
      12url='https://www.nico.schottelius.org/software/gpm/'
    
      13license=('GPL')
    
      14depends=('lib32-ncurses' "${_pkgname}")
    
      15makedepends=('git')
    
      16options=('!makeflags')
    
      17_srcdir="${_pkgname}"
    
      18source=(
    
      19  "git+https://github.com/telmich/gpm.git#commit=${_commit}"
    
      20  'https://www.linuxfromscratch.org/patches/blfs/13.0/gpm-1.20.7-gcc15_fixes-1.patch'
    
      21)
    
      22md5sums=('92b67ec28ce0c2f0a42bc45a1511becc'
    
      23         'd9978705320563da2a8353cfbe6825c3')
    
      24sha256sums=('7db4089030c128d9ee5fb1afb08251d328f8f8835e4716ff41c6c08c1a90bed2'
    
      25            'ce5421d566d16105d042a9715aecfb70e6d5df669ec605ff4a6399cb31fc8d27')
    
      26
    
      27pkgver() {
    
      28  cd "${_srcdir}"
    
      29
    
      30  GITTAG="$(git describe --abbrev=0 --tags 2>/dev/null)"
    
      31  printf '%s.r%s.g%s' \
    
      32    "${GITTAG}" \
    
      33    "$(git rev-list --count ${GITTAG}..)" \
    
      34    "$(git rev-parse --short HEAD)"
    
      35}
    
      36
    
      37prepare() {
    
      38  cd "${_srcdir}"
    
      39
    
      40  patch -Np1 -i "${srcdir}/gpm-1.20.7-gcc15_fixes-1.patch"
    
      41}
    
      42
    
      43build() {
    
      44  export CC='gcc -m32'
    
      45  export CXX='g++ -m32'
    
      46  export PKG_CONFIG_PATH='/usr/lib32/pkgconfig'
    
      47
    
      48  cd "${_srcdir}"
    
      49  ./autogen.sh
    
      50  ./configure --prefix='/usr' --sysconfdir='/etc' --sbindir='/usr/bin' --libdir='/usr/lib32'
    
      51  make
    
      52}
    
      53
    
      54package() {
    
      55  cd "${_srcdir}"
    
      56  make DESTDIR="${pkgdir}" install
    
      57
    
      58# library fixes
    
      59  cd "${pkgdir}/usr/lib32/"
    
      60  ln -s libgpm.so.2.* 'libgpm.so'
    
      61  chmod 755 "${pkgdir}"/usr/lib32/libgpm.so.*
    
      62
    
      63  rm -rf "${pkgdir}"/usr/{bin,include,share} "${pkgdir}/etc"
    
      64}
    
      65

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-07 00:21:34	Low	2
2026-10-06 00:13:36	Low	3
2026-10-05 00:08:03	Low	3
2026-10-04 00:18:08	Low	3
2026-10-03 00:23:04	Low	3
2026-10-02 00:00:32	Low	3
2026-10-01 00:02:06	Low	3
2026-09-30 00:20:07	Low	3
2026-09-29 00:07:46	Low	3
2026-09-28 00:28:32	Low	3
2026-09-27 00:07:07	Low	3
2026-09-26 00:12:15	Low	3
2026-09-25 00:03:36	Low	3
2026-09-24 00:24:14	Low	3
2026-09-23 00:28:13	Low	3
2026-09-22 00:15:14	Low	3
2026-09-21 00:26:32	Low	3
2026-09-20 00:25:31	Low	3
2026-09-19 00:25:36	Low	3
2026-09-18 00:17:11	Low	3