libadios-git

maintainer orphaned · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package builds from the official project Git repository, uses a SKIP'd checksum due to the git source, and patches shebangs for Python 2 compatibility; this is normal for AUR packages maintaining legacy software and poses no inherent security risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the official project Git repository, uses a SKIP'd checksum due to the git source, and patches shebangs for Python 2 compatibility; this is normal for AUR packages maintaining legacy software and poses no inherent security risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

1# Maintainer: Carlchristian Eckert <carli-eckert at gmx dot de>
2
3pkgname=libadios-git
4pkgver=1.10.0.r422.g084b08f
5pkgrel=1
6pkgdesc="ADIOS Adaptable IO system for simulations. The Adaptable IO System (ADIOS) provides a simple, flexible way for scientists to describe the data in their code that may need to be written, read, or processed outside of the running simulation."
7url="https://www.olcf.ornl.gov/center-projects/adios/"
8install=$pkgname.install
9license=('BSD')
10arch=('i686' 'x86_64')
11depends=('openmpi' 'python2' 'mxml' 'gcc-fortran')
12source=("${pkgname}::git://github.com/ornladios/ADIOS.git")
13makedepends=('git')
14sha256sums=('SKIP')
15
16pkgver(){
17 cd ${pkgname}
18 # remove leading "v", then remove everything after the first "-"
19 # RELEASE=$(git describe --long --tags | sed 's/v//;s/-.\+//')
20
21 # take version directly from their version file, since that is what is reported internally
22 RELEASE=$(grep -o "ADIOS_VERSION \"[.0-9]\+\"" src/public/adios_version.h | sed 's/[^.0-9]//g')
23
24 # remove everything before the first "-", including the "-"; then replace remaining "-" with "."
25 REVISION=$(git describe --long --tags | sed 's/[^-]\+-//;s/-/./g')
26 echo ${RELEASE}.r${REVISION}
27}
28
29
30prepare() {
31 cd ${pkgname}
32 # replace all occurences of python with python2 to avoid using the default python3
33 find . -type f -print0 | xargs -0 sed -i -e 's/\(#\!\/usr\/bin\/env python\)/\12/' -e 's/python \(.*.py\)/python2 \1/'
34}
35
36build() {
37 cd ${pkgname}
38 ./autogen.sh
39 CFLAGS="$CFLAGS -fPIC" ./configure --enable-static --enable-shared --prefix=/usr/ \
40 --with-mxml=/usr \
41 --with-mpi=/usr \
42 --with-zlib=/usr
43 make
44}
45
46check() {
47 cd ${pkgname}
48 make check
49}
50
51package() {
52 cd ${pkgname}
53 make DESTDIR="${pkgdir}" install
54 install -D -m644 COPYING "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
55}
56

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion