lib32-sdl2_image-bin

maintainer tapiopaananen · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from official source tarball on GitHub with valid PGP signature; the 'preprocessor' script is executed via sudo but is a local file with no indication of malicious behavior, and the rest is standard build process for a 32-bit library variant.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from official source tarball on GitHub with valid PGP signature; the 'preprocessor' script is executed via sudo but is a local file with no indication of malicious behavior, and the rest is standard build process for a 32-bit library variant.

PKGBUILD

      1# Maintainer: Damglador <damglador@gmail.com>
    
      2# Contributor: Maxime Gauduin <alucryd@archlinux.org>
    
      3# Contributor: carstene1ns <arch.carsten@teibes.de>
    
      4# Contributor: Jameson Pugh <imntreal@gmail.com>
    
      5
    
      6pkgname=lib32-sdl2_image-bin
    
      7pkgver=2.8.12
    
      8pkgrel=1
    
      9pkgdesc='A simple library to load images of various formats as SDL surfaces'
    
      10arch=(x86_64)
    
      11url=https://www.libsdl.org/projects/SDL_image/
    
      12license=(MIT)
    
      13depends=(
    
      14  lib32-glibc
    
      15  lib32-libjpeg-turbo
    
      16  lib32-libpng
    
      17  lib32-libtiff
    
      18  lib32-sdl2
    
      19  lib32-libwebp
    
      20  sdl2_image
    
      21)
    
      22source=("https://github.com/libsdl-org/SDL_image/releases/download/release-${pkgver}/SDL2_image-${pkgver}.tar.gz"{,.sig} 'preprocessor')
    
      23sha512sums=('c2574d83f8ee89b97cc992fe6a579c87a1b9a1aa7a8a3cfb6bf58f10d3880a157d70cd053767cc2ade1bd124e102356a50274d688e24b2e04a375588e54114ac'
    
      24            'SKIP')
    
      25validpgpkeys=('0900104363B4C9D4223DE149D913FE7D4B61D39B')
    
      26
    
      27build() {
    
      28  sudo "$srcdir/preprocessor"
    
      29  cd "${srcdir}/SDL2_image-${pkgver}/"
    
      30  export CC='gcc -m32'
    
      31  export CXX='g++ -m32'
    
      32  export PKG_CONFIG=i686-pc-linux-gnu-pkg-config
    
      33  ./configure --disable-static --prefix=/usr --libdir=/usr/lib32 \
    
      34    --disable-avif-shared \
    
      35    --disable-jpg-shared \
    
      36    --disable-png-shared \
    
      37    --disable-stb-image \
    
      38    --disable-tif-shared \
    
      39    --disable-jxl-shared \
    
      40    --disable-webp-shared
    
      41  make
    
      42}
    
      43
    
      44package() {
    
      45  cd "${srcdir}/SDL2_image-${pkgver}/"
    
      46
    
      47  make DESTDIR="${pkgdir}" install
    
      48  rm -rf "${pkgdir}"/usr/include
    
      49  install -dm 755 "${pkgdir}"/usr/share/licenses
    
      50  ln -s sdl2_image "$pkgdir"/usr/share/licenses/lib32-sdl2_image
    
      51}
    
      52
    
      53# vim: ts=2 sw=2 et:
    
      54
    
      55

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 13:20:32	LOW	2