lib32-libwebp
MEDIUM
maintainer severach
4 votes
scanned 2026-09-13 19:15:06.142757
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:28
https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-$pkgver.tar.gz{,.asc}
Medium
Recently orphaned & re-adopted
orphaned_readopted
This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Maxime Gauduin <alucryd@archlinux.org>
2
# Contributor: carstene1ns <arch.carsten@teibes.de>
3
# Contributor: Jan Alexander Steffens (heftig) <heftig@archlinux.org>
4
# Contributor: Alexander Rødseth <rodseth@gmail.com>
5
# Contributor: Jon Nordby <jononor@gmail.com>
6
7
pkgname=lib32-libwebp
8
pkgver=1.6.0
9
pkgrel=1
10
pkgdesc="WebP library (32-bit)"
11
url="https://developers.google.com/speed/webp/"
12
arch=(x86_64)
13
license=(BSD-3-Clause)
14
depends=(
15
lib32-gcc-libs
16
lib32-glibc
17
libwebp
18
)
19
makedepends=(
20
cmake
21
ninja
22
)
23
provides=(
24
libsharpyuv.so
25
libwebp{,decoder,demux,mux}.so
26
)
27
source=(
28
https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-$pkgver.tar.gz{,.asc}
29
)
30
sha256sums=('e4ab7009bf0629fd11982d4c2aa83964cf244cffba7347ecd39019a9e38c4564'
31
'SKIP')
32
b2sums=('cbdfa8616edce14bf3f8621d9d0d925884d0f40e8775c7d8810575c8bec88f10ed912029cc0a4bccf9bb9eb98824e4b1a89ec61ee53d7ef20a150450d8513168'
33
'SKIP')
34
validpgpkeys=(
35
6B0E6B70976DE303EDF2F601F9C3D6BDB8232B5D # WebP release signing key
36
)
37
38
prepare() {
39
cd libwebp-$pkgver
40
}
41
42
build() {
43
local cmake_options=(
44
-D BUILD_SHARED_LIBS=ON
45
-D CMAKE_BUILD_TYPE=None
46
-D CMAKE_INSTALL_LIBDIR=/usr/lib32
47
-D CMAKE_INSTALL_PREFIX=/usr
48
-D CMAKE_SKIP_INSTALL_RPATH=ON
49
-D WEBP_BUILD_CWEBP=OFF
50
-D WEBP_BUILD_DWEBP=OFF
51
-D WEBP_BUILD_EXTRAS=OFF
52
-D WEBP_BUILD_GIF2WEBP=OFF
53
-D WEBP_BUILD_IMG2WEBP=OFF
54
-D WEBP_BUILD_VWEBP=OFF
55
)
56
57
export CC="gcc -m32"
58
export CXX="g++ -m32"
59
export PKG_CONFIG=i686-pc-linux-gnu-pkg-config
60
61
# Mimic autotools build without --enable-asserts
62
CFLAGS+=" -DNDEBUG"
63
CXXFLAGS+=" -DNDEBUG"
64
65
cmake -S libwebp-$pkgver -B build -G Ninja "${cmake_options[@]}"
66
cmake --build build
67
}
68
69
check() {
70
ctest --test-dir build --output-on-failure --stop-on-failure -j$(nproc)
71
}
72
73
package() {
74
DESTDIR="$pkgdir" cmake --install build
75
rm -r "$pkgdir"/usr/{bin,include,share}
76
77
install -Dt "$pkgdir/usr/share/licenses/$pkgname" -m644 \
78
libwebp-$pkgver/COPYING
79
}
80
81
# vim:set sw=2 sts=-1 et:
82
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-13 19:15:06 | Medium | 2 |
| 2026-08-23 11:22:25 | Clean | 3 |
| 2026-08-23 11:20:29 | Medium | 2 |