lib32-imlib2

MEDIUM
maintainer Damgaldor 7 votes scanned 2026-09-09 17:19:54.604292
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:27 source=("${_pkgname}::git+https://git.enlightenment.org/old/legacy-imlib2.git#tag=v${pkgver}")
Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Felix Yan <felixonmars@archlinux.org>
2# Contributor: Ronald van Haren <ronald.archlinux.org>
3# Contributor: Arjan Timmerman <arjan.archlinux.org>
4# Contributor: Tom Newsom <Jeepster.gmx.co.uk>
5# Contributor: GordonGR <gordongr@freemail.gr>
6
7pkgname=lib32-imlib2
8_pkgname=imlib2
9pkgver=1.12.6
10pkgrel=1
11pkgdesc='Library that does image file loading and saving as well as rendering, manipulation, arbitrary polygon support, lib32'
12url='https://sourceforge.net/projects/enlightenment/'
13arch=('x86_64')
14license=('BSD')
15# this could link against these libs if exists...
16# * lib32-libheif
17# * lib32-libjxl
18# * lib32-libspectre
19# * lib32-openjpeg2
20makedepends=('git' 'lib32-libid3tag' 'lib32-librsvg' 'lib32-libwebp')
21depends=("${_pkgname}" 'lib32-bzip2' 'lib32-freetype2' 'lib32-giflib' 'lib32-libjpeg-turbo'
22 'lib32-libpng' 'lib32-libtiff' 'lib32-libxext' 'lib32-xz')
23optdepends=('lib32-libid3tag: ID3 loader'
24 'lib32-librsvg: SVG loader'
25 'lib32-libwebp: WEBP loader')
26provides=('libImlib2.so')
27source=("${_pkgname}::git+https://git.enlightenment.org/old/legacy-imlib2.git#tag=v${pkgver}")
28sha512sums=('084933f76c30038c2ec96be6bda7cd029ffd17b07dd6804832abe2803a3276eb30b8186dca74bf77f18068f6dc8b93393097b15fc1a00ba83dbce48a3dae2457')
29
30prepare() {
31 cd "${_pkgname}"
32 autoreconf -fiv
33}
34
35build() {
36 cd "$_pkgname"
37
38 export CC="gcc -m32"
39 export CXX="g++ -m32"
40 export PKG_CONFIG_PATH="/usr/lib32/pkgconfig"
41
42 # Configure and Build
43 ./configure \
44 --prefix=/usr \
45 --sysconfdir=/etc/imlib2 \
46 --x-libraries=/usr/lib32 \
47 --enable-mmx \
48 --disable-amd64 \
49 --libdir=/usr/lib32 \
50 --libexecdir=/usr/lib32 \
51 --without-heif \
52 --without-jxl
53
54 make
55}
56
57check() {
58 cd "$_pkgname"
59 make check
60}
61
62package() {
63 cd "${_pkgname}"
64 make DESTDIR="$pkgdir" install
65 cd "$pkgdir/usr"
66 rm -rf {bin,include,share/imlib2}/
67
68 install -Dm644 "$srcdir/${_pkgname}/COPYING" "$pkgdir/usr/share/licenses/$pkgname/COPYING"
69}
70

Scan history

Scanned at (UTC)SeverityRules
2026-09-09 17:19:54 Medium 2
2026-08-31 00:19:57 Clean 3
2026-08-30 23:44:22 Medium 2
2026-08-16 19:35:37 Clean 3
2026-08-16 19:33:38 Medium 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion